, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xbc, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcb4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb8f6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x91}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7196}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40840}, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r0, 0x0) dup3(r4, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:08 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x7}}) 20:36:08 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000580)={0x5, 0x80000000, 0x7, 0x0, 0xf}) r9 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x401}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@generic={0x4, 0x9, 0x0, 0xfff8, 0x1f}, @map_fd={0x18, 0x8, 0x1, 0x0, r3}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xc2, &(0x7f0000000380)=""/194, 0x40f00, 0x2, '\x00', r5, 0x0, r9, 0x8, &(0x7f0000000140)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xa, 0x3, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r10]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_free\x00', r0}, 0x10) 20:36:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) syz_open_pts(r1, 0x8000) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/cx231xx_dvb', 0x40, 0xe3) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x4) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5441, 0x0) 20:36:09 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x80000000, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xb0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCXONC(r0, 0x540a, 0x0) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r1, 0x80000) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x10, r2, 0x494db000) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x220880, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/4090, 0xffa}], 0x1) 20:36:09 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x8}}) 20:36:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) syz_open_pts(r1, 0x8000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/cx231xx_dvb', 0x40, 0xe3) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x4) ioctl$TIOCSTI(r0, 0x541d, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) syz_open_pts(r1, 0x8000) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/cx231xx_dvb', 0x40, 0xe3) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x4) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) 20:36:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffffd, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\x00'}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000580)={0x5, 0x80000000, 0x7, 0x0, 0xf}) r9 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x401}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@generic={0x4, 0x9, 0x0, 0xfff8, 0x1f}, @map_fd={0x18, 0x8, 0x1, 0x0, r3}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xc2, &(0x7f0000000380)=""/194, 0x40f00, 0x2, '\x00', r5, 0x0, r9, 0x8, &(0x7f0000000140)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xa, 0x3, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r10]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'macsec0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r7, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r8, &(0x7f0000000240)=0x100000000000000, 0x12) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000580)={0x5, 0x80000000, 0x7, 0x0, 0xf}) (async) openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x401}}, './file0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@generic={0x4, 0x9, 0x0, 0xfff8, 0x1f}, @map_fd={0x18, 0x8, 0x1, 0x0, r3}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xc2, &(0x7f0000000380)=""/194, 0x40f00, 0x2, '\x00', r5, 0x0, r9, 0x8, &(0x7f0000000140)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xa, 0x3, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r10]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_free\x00', r0}, 0x10) (async) 20:36:09 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x9}}) 20:36:09 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/4096, 0x1000, 0x1, &(0x7f00000011c0)=""/135, 0x87}, &(0x7f00000012c0)=0x40) fcntl$setlease(r1, 0x400, 0x1) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:09 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 20:36:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000580)={0x5, 0x80000000, 0x7, 0x0, 0xf}) (async) r9 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x401}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@generic={0x4, 0x9, 0x0, 0xfff8, 0x1f}, @map_fd={0x18, 0x8, 0x1, 0x0, r3}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xc2, &(0x7f0000000380)=""/194, 0x40f00, 0x2, '\x00', r5, 0x0, r9, 0x8, &(0x7f0000000140)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xa, 0x3, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r10]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_free\x00', r0}, 0x10) 20:36:09 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xa}}) 20:36:09 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 20:36:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5450, 0x0) 20:36:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="8500000009000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000040)=@x25, &(0x7f00000000c0)=0x80) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x404000, 0x134) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x10, &(0x7f0000000380)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x8}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8001}, @ldst={0x3, 0x1, 0x6, 0x0, 0x7, 0xffffffffffffffff, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xb5, &(0x7f0000000400)=""/181, 0x41100, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xd, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r4, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r5, r7, 0x1, 0x1]}, 0x80) fallocate(r2, 0x31, 0x9, 0x7) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000100)={{0x0, 0x0, 0x8001}}) 20:36:09 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xb}}) 20:36:09 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 20:36:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffffd, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\x00'}) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:10 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async, rerun: 64) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161301, 0x0) (rerun: 64) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/4096, 0x1000, 0x1, &(0x7f00000011c0)=""/135, 0x87}, &(0x7f00000012c0)=0x40) fcntl$setlease(r1, 0x400, 0x1) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:10 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xc}}) 20:36:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) syz_open_pts(r1, 0x0) close_range(r0, r0, 0x0) 20:36:10 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="8500000009000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000040)=@x25, &(0x7f00000000c0)=0x80) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x404000, 0x134) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x10, &(0x7f0000000380)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x8}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8001}, @ldst={0x3, 0x1, 0x6, 0x0, 0x7, 0xffffffffffffffff, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xb5, &(0x7f0000000400)=""/181, 0x41100, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xd, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r4, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r5, r7, 0x1, 0x1]}, 0x80) (async) fallocate(r2, 0x31, 0x9, 0x7) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000100)={{0x0, 0x0, 0x8001}}) 20:36:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5451, 0x0) 20:36:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) syz_open_pts(r1, 0x0) (async) close_range(r0, r0, 0x0) 20:36:10 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="8500000009000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000040)=@x25, &(0x7f00000000c0)=0x80) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x404000, 0x134) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x10, &(0x7f0000000380)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x8}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8001}, @ldst={0x3, 0x1, 0x6, 0x0, 0x7, 0xffffffffffffffff, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xb5, &(0x7f0000000400)=""/181, 0x41100, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xd, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r4, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r5, r7, 0x1, 0x1]}, 0x80) fallocate(r2, 0x31, 0x9, 0x7) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000100)={{0x0, 0x0, 0x8001}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="8500000009000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) accept(0xffffffffffffffff, &(0x7f0000000040)=@x25, &(0x7f00000000c0)=0x80) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) open(&(0x7f0000000500)='./file0\x00', 0x404000, 0x134) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x10, &(0x7f0000000380)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x8}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8001}, @ldst={0x3, 0x1, 0x6, 0x0, 0x7, 0xffffffffffffffff, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xb5, &(0x7f0000000400)=""/181, 0x41100, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xd, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r4, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r5, r7, 0x1, 0x1]}, 0x80) (async) fallocate(r2, 0x31, 0x9, 0x7) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000100)={{0x0, 0x0, 0x8001}}) (async) 20:36:10 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xd}}) 20:36:10 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xe}}) 20:36:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async, rerun: 32) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) (rerun: 32) syz_open_pts(r1, 0x0) (async) close_range(r0, r0, 0x0) 20:36:10 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000400)={@mcast1, 0x0}, &(0x7f0000000440)=0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x20, 0x6, 0x401, 0x50c, 0xffffffffffffffff, 0x4, '\x00', r2, r4, 0x3, 0x3, 0x0, 0x4}, 0x48) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x0, 0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000380)={0x4, 0x2, 0x4, 0x0, 0xf}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', r5, 0x700, 0x20, 0x6, 0x6, {{0x9, 0x4, 0x3, 0x3f, 0x24, 0x67, 0x0, 0xff, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0xbc, 0x3, 0x4}, @rr={0x7, 0xb, 0xec, [@local, @private=0xa010102]}, @noop]}}}}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffffd, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\x00'}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffffd, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\x00'}) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 20:36:11 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000400)={@mcast1, 0x0}, &(0x7f0000000440)=0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x20, 0x6, 0x401, 0x50c, 0xffffffffffffffff, 0x4, '\x00', r2, r4, 0x3, 0x3, 0x0, 0x4}, 0x48) (async) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x0, 0x3, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000380)={0x4, 0x2, 0x4, 0x0, 0xf}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', r5, 0x700, 0x20, 0x6, 0x6, {{0x9, 0x4, 0x3, 0x3f, 0x24, 0x67, 0x0, 0xff, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0xbc, 0x3, 0x4}, @rr={0x7, 0xb, 0xec, [@local, @private=0xa010102]}, @noop]}}}}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:11 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/4096, 0x1000, 0x1, &(0x7f00000011c0)=""/135, 0x87}, &(0x7f00000012c0)=0x40) fcntl$setlease(r1, 0x400, 0x1) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/4096, 0x1000, 0x1, &(0x7f00000011c0)=""/135, 0x87}, &(0x7f00000012c0)=0x40) (async) fcntl$setlease(r1, 0x400, 0x1) (async) dup3(r1, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) 20:36:11 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x10}}) 20:36:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5452, 0x0) 20:36:11 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000001140)=""/75, 0x4b}, {&(0x7f00000011c0)=""/24, 0x18}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/13, 0xd}, {&(0x7f0000002240)=""/109, 0x6d}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/2, 0x2}, {&(0x7f0000002400)=""/199, 0xc7}], 0xa, 0x10000, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000025c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x5386, &(0x7f0000000040)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003b40)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) r6 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r6, 0x5386, &(0x7f0000000040)) r7 = dup2(r1, r0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000038c0)={&(0x7f0000003880)='xprtrdma_post_recv\x00'}, 0x10) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000240)=0x100000000000000, 0x12) io_submit(0x0, 0x9, &(0x7f0000003ac0)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x2, 0xfff, r2, &(0x7f0000002600)="063b3489019b06b4d313646fe439038d9aa1b7ce1109a92cac3bdf6f95702ab52000bf298faae1e19f2dcafb932a9e257ee770e1f4e5c25b1ffe1a06", 0x3c, 0x1d}, 0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x3, 0x9, r3, &(0x7f0000002680)="0cff0c4aac1719784bf0d3b392d087108d651bced29bdf7e324b01ab7daec05addc59f12c3c9c5ab4699844d0de230cefc7068d87b6ba4eb2e614234690d", 0x3e, 0x3, 0x0, 0x2, r5}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x6, 0xff, r6, &(0x7f0000002700)="43906f8f0ed637802e70046841daeaeb9a9b197cd466b373e13165a589edd470b4e810e4a70a6de653d1657d57e28992f061f5b016193a2a8341624690ae4f049e", 0x41, 0x0, 0x0, 0x1}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f00000027c0)="a5cb0c30e2", 0x5, 0x78b, 0x0, 0x0, r7}, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000002840)="48494e24e1e580ed1e94c5e8226d05806624d69ed5dc93b38d482d96a68f9d801224eef493170ab1e452411e8467766659d3775583521b396f577cd4a2e5419a56367bad871f003a07824ae0496e61897cf74baf24c6da9b57f4254a2d51f8ee65714d5073959f75eaff09df0403581496280b23883fd8e96568d4bf39dd739a2dd9bb24809f178faf9ece99846c47e22183867ca9b991987e0689d36a7927f8330dc042ad1cc36ac86f12f34d7d9136ff0e4438e5cdd6239f3b212def19a6b9f712eba2bf6156758867829077613d720df1a1a17d0147fe77eab26f6b879b7e2fcc02e8e8b2c16e308d8be6be605b3ec8e7564c5eb308d543770ab0178c28087d9eb1152101499d2d5ac4ae5577836c8d85e21214817488e5814f5bc5ea775861a20be8053ccbe581b6371e405822afc36d111d6492346c3f0719647578ef82219cf49c39e27828fcf919b5fc37f48539479c3cb257b90b3bf541aba87fb40f64bc466714e1e99cd0393e61552b92770a8e0e37feb25df978995a28cd09bf0128805b8649fed8e3448333cc18f4ef540750e99be053ac1b97003b9958ec29f6a92f9676ede23fd9a75f315561d4c94411896cc0fcfaa611309d10857bab07632d1a753e2b025c2782e17eb29c7e287df178415ba627a2306073011daaf436a32680d2d307228a35d2e89e9a80502fa5ec1620d34e6609a4f7c37eecdc6e777579f26a98aea443b6254715e8246d0d1fc4ffa09f468a81930c3226c6dabf7cfe7e7e9750ed5ca2fd94dd28ef9752720aa5b60124f80ae297f2b1995d8f2a55f8418347f0c572e5e20aff5ee513eafc3983e2bdf44094504fb2e6d2203cf8be3dcf886b7d223344d89f00de6418adff1a333b5a1c43a79476e5fdcfe5f1f2aba49cf983a24f0864414bbab7de8f436f18d4a0d5dfd96537483ac158d5b1598f458a82fd70bbe18eb39ee2e18508b975a5edf4dfbb3cc77e97cdccaa5fa659c22eb55fd9df569b6f91113a7d1488d4c09d8c393dfd7e04ecc29056a0b89010195556ad9cc2fbbdb652cf2e0d8689f2d65727acfc7b8c98ba093b5bbc0914a74862b2ac58cef011d0d21409b6cb696da57683be2b4f6684c7e3f246750501cb270432b0a15f019c0009fb8ec29e2817328aef1f1f1451355a1ae8474d947732d1a2d7a79fe9d7ba7912257d9858bdea681edf98cfa5a3cd48285a15af76723bf27ad835f7dff68a317daa77952897bf644bc2b19b80ff97bb2959ee5ca44e8f0661bd3f2460580e8d152d1c1b103d13a16e11ad16e7348475a448651e2d577fc690b5c93c0fc2518d33425476540ca6dfc98d26bfb0c775ecc9a9e08e8904bcc9da61345bf39c26644ed00c2dff8a39d0ccbdc496d792b394e82a6c624a1e47d5e91ee8c087fc56e73046c322b8ad7f6421a53f487d15a7d94e520ac86572b2e88087be23ea5ecc7161696db11ddddeeb5aec1f6d54c896230170248f327771d1d391f8fc5752c3ac4ac470f812832948187c730b4786a3cd607dfdab6c925ebb580bc2f22637db6a2d0287e2cde4a6d8bdb8f87bee50e15e70d6a36a74c73460e1104a317e49e7846d6f70fed3e37f5bb77978d43d69771e3dafd03d6fe714bee2ca590188dca295500782def3f7c09aab18be631c6b3aa67fc7c679ab3a920be3f2599ddb5a1a667fa3a74b311754b84a7373bd7da312a0401a1474b24dcae3ae51f8a4e2e30c4d8bca8845a73604d7fd16bc519f9b309c494ca0f11ef236dd6cc64066e6e0f7f5e0a2e24af18e8d60aa89f4c799ec339f22f19e99d4123cc5efa4a3b0045ea45b7831348fd01fe858d67567795fb2dd633f2e13cc58779f0ca1b9c5ffc3f03828343bee391706370f5e0ccef67a5b3e853da0652988229d7f9fc5193507053df69c8f8a83345f69b6e205083e7ebff2e5a589be90f6752d098b6a11c66b0021b3737a8d6fd4e26cabe3a03c9a970311ca76b4e575ff9f0b848d671ad7d6da6a8119cb726f65871a9ead02e96e53be36bc7d9854165525c8627253b8a83ad7e44dcbfc5f1e3796a2b0eb7cc2fe40a9a242c195521dbd6d0ace907f6a52b407d58f4bb7af3d0b72b116a560ec79a47a9e35a77a262c93373d66953c3b1da9ae2846c96668b02e3294a4ef1adc289b6b559b3d46c00fa270541e1573c60489eb7a67e17668f3a67af1055216645378794a6d0558bfbd948de9c3ba0bd05a1585162b334b5c135791476cca66509d9177852052a19d38575edc212d46cc56f2d1436fcc01c31dd60887bf25df0e964bafde8b48a757f0f6e747e93da128f29d4b30544e123adb6dd46187f6aad7668f022322249709c0e645b4403cdb9c93ed5bb05b8fe7adf7f929e724010173625d79a7caff1677df01c34272aa70f410a52f2864bf047a22fbfcfe851b6acfa6f81b3654246e67d4e56bf684c136ad4148272e10b1319326013dc8c1480954a8bb2c25123f1bf51f24203094e0ff627555460fef3d2a591a2354d1e97f549f5888e454a70e90e013ebc13d789748b7b882b5d2d53ee591f227f6299e91883143a79b8cbb81f6eb1a40715da0574bbb473685c7d6378d9d66f49965e6d9775c70f646225f78d43c7b058d6fb4320bcc367d886c66c234eb8fc6e5be86aa220e6643257166616a9a972f13cd7763c88f12f5ef0b56bd7d372710df401d5ea41a88a57aae6f8261df93520ce10240bbaa9b56c72a585e12d120c61e55124d0bd217ef2ce1edfcf410361a96a986e91a367a679a6f44598a9aab3e6a792578b2af73cf9814ceed7d947198280689ef2c313aa61acfa9cfb1de3bb65217d925fed045445af2a4c596a693c60cc1552963e02a8325ad3fddb18b5aa63ebfde96c96db5338c038c879240ae40ebb7443c37fdda2f6d321fa46daf17a98e7129f45947f86125f7936a91024f5f32c5ba1efcdbe54b7c2bd7723133f78df287030044c45fc1d5ba6f515eba319d3100fa231494051e1e8debc6e0856bad99325ecf0e3367a2d224aaac83448dff1a03d4f971269851bd8d53ddc95e41112119208ec81c088c405d10af7c3accb4f9a3fa282fff300dbba6e2bbdf7437249a79ab6890583c12dce87df9fc4a287fa24083591a61c4e9329badefbf12e73ea156cf65f8b1822a4626b8ebb07a91938553b7c6a0a54dbe00ec62e128590146f9affc34c692c03dca3cf341d871c5816a9353b5c291bea1f5b6828b728ea0bdad30c3569cc53da42bf0ac5655918c1ee8b1694f8ada13e45cf0c29102b43cab3e71d2af0bdef6f565c1568e0b4295839f12335fa29a90208f36a9c4fdb8048d28f40dc372a59711718f6af367505817bd86670263ba19a5d0c4f899aa78de856f1b7f4ec26c1cea73c69b7ca6f4702ceb12c9a787c6b51d74a7628f3e766c8429b9955d2ab5ce33dd780f4ac8e49eb26ec2706c490f528d5316959e4de32f6519df7c71849ff577301b1fb6f75a7ac4934fabb735c7d6c47e42abb2e58c110e3e28eba56780a4ea5b98fd188a5742fb0c18b998f50ba672359ce33623d88b71d3a3b25ce1284ac76d706ec3c0bbac0e27fcefb8de62e98868229b0512f838e4d67de15f87d980ea82e3b2769ca8a83666341add8d172cd8146f4a37f101d0f6980e291cfefeaaabf82ade4026734c64b1c760fee0468510c50e90076d46f8e79a79383130e8dfea1334fb406b917e114f7e1d70a39d28bdbeb06d1c7ec2f697d69c1c316f18eda6a95d4c8ada59b8ca3cb457b74c9d9c891c926a092bbd9efe9e150722ef8028da140712f3928ed59e49e4d791380f004a5fb5eb407dbf72913972c3b530a8d02748c368f3587e816165140291068abe14041ce1ff3b630714f6f21ebaea9d69a9e929ef2ff6738c2c1212225ccb00d26277ae75c776cb6864142ca682b4fe97e6d0454c6070ef8d8414cecbe15b1236066e4f2b4d38f7e04787d3657f111a74c570e51c98503a78da245ad6fbc14bc3b3852fd2728884e64a8d369a138f104172fecd5bfbb18294564a4fd5cac14bbdab975b0b069928b94613aefb2791a1834f4db84f697932c8637bee2efac3ee89d4a095c06dcf0b4e2b4112d4b936e14254ad6b07c2ae0ae0df493feba70c83fd4a966bef4e3f1604f63b0f6363954293014b7221764bc0413d11d275a9bd7fa0b810becc0fab961bfe9257a74a37cf2071dac9a85291d6d63017a074266f4a4ea1ec405c136c3704f17ce563c5fe227431daa09887f4ac90f326c09aa6819fbadd514bb82da563f7b5e5a76f4c119933b0db86f83eac157dd7268598f091078cebfd66e39943a054a66491405080518967228d0623a8b2bc7397338a9a46e7dff3081c9701246148b6030fff3e7c65361e4c83475cc9ca7ff36347ce901e3582760fe2037ed33df468f9fcabb6f30c132a1b061eccc24636e1420366d9897b29ec72e8bd6162b1169ee05c4db6d344d90bb7530c5d167742b5605cf062d162ba56c3f7a2f8c37e0179ee725ceaa5b62ef67475ab15c28c7bb6be9c0e44aa1b525810dc7a8ebd44a8dbb74903a6929c6ab4ec0cfe37a029a76b7cb0c84be85f8cdf2247e62615886daccc33d2e43f5df0f7fe38cb366c240141a5d49caf639bac91c445aac34592aa2f082de38926a97acfe4633f4bbc7b014199bd39a85c12e49265c6c776fd1ea6b749e93bc999622ed4ae665a3c18c401babb672346da3f658e83038d4286b0c6b366b6ee7437af90c81cf74b8e74b08e5ac9256bcb3e4fc8adccc24abd28312f942009c9828eb61c53bc5b42746d60c10836c5dd07c82a138179465457c4a28dbeb5a78377f4fe409ad18e810e9cda8c3af8b7580e0297f75e3b8ac594e1fdc1cfebfa6f7f7312d5b9241ff2547b58d44bc9c33d1d356261c651807b453d7cd28f64b9c39fe52e6a9f105f45f3c085a823cae543c6941b710b49ad7ace43ef55e97d516afe2d2ab33a4b2a0a9431f667b6ecb8dbde673ca78763ee870a4d711b3d50093732f1f69cf804e5bbf68387d0bb017dd7a009c7628b8db073ebe1d8799498410770777d83be5c0e19584cd44ebd58bd10aa13e7031b150a79c6731cb67ea01e2d21694f70402f1b8b81ee17a3ec74005c6f14f28ce113d525f0f16c66730239727d6472ffa334c500f6d3a509551ab9fa5b8a1aa119b9a0f58614c207269977155e585291350e7f69fc09811624f23f41c95fd3f149b66990a570e5919049f8f6d57438b643e282e68f5f61f02416b98a8eb4f689e49b279ec6916fc0ce487479312a498c7dcc704c3e8b745d1492cb934d1a0f1adc88cec1a7a5d7248980179c170b6e27285e560a904585a4b6466db33b61e7817731ee22cd12326f552948a2809496321bfc0e034a96c828d9d95e4de14d434facd47e73793b2c6287040523693d737b4f978ce813148943f544618cefd0035ca60642342ee1ba811bf12aa24f0704df0254e041e6eb755d5b523dcd90bd15e13485daded1149846ab1a578a82198ec171455320e16cf3adff303be1ce8f4905656afb3bfe14795d523f558293bdb9ef507f13dd0d4b167dc28dbcbdf09dbee014399cc1f0acd0347cdbe0b47979f09b0e4001f80456fe405ab5b5c335253ce583062c400ec18ff6102edf3c1944d0494540de9c0c265377f793267c425b3eca06c321c711e0193312bb1542874b5ba9eb6b09dc5e8231111d40d9269eae02cc62b224ebec8d075590b0b6ec274d37a0a59724439d25e77e38196766d8e3f65c839b785341c668588c939dfe330fb8e3600c1a7234fee3502c6d48ccb8", 0x1000, 0x2, 0x0, 0x2, r9}, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0xa49c, r10, &(0x7f0000003900)="e84f2b8a54f1fd4505b68365e1949511947564f7e93ac32c67daef1f65", 0x1d, 0x4, 0x0, 0x3}, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x3, 0x7f, r0, &(0x7f0000003980)="3e4acb715a090bd0d8bbd11b64f890e03df7aeff77802513c9f7b1c48e688a2b1ea1c7ee8da4dc4e8ff42261a606e3868b309f39e24a026f972c6bc4acd8d690f9e421312ed156b1b31cc89f2593291db7ffa025548e04843815f26cf8967b2d4ee8a613b6", 0x65, 0x3, 0x0, 0x1}, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, &(0x7f0000003a40)="4ef57f8f6cc9efdde1424e7bdf5bbd6b1aa7ff0dfd35be3b3e34111c176932e21841f1a1d240e0083eb6c80d4e3ea68d", 0x30, 0xffffffffffffffff, 0x0, 0x1, r12}]) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r13 = memfd_secret(0x80000) r14 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r14, 0x5386, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r14, &(0x7f0000000040)={0x200d}) r15 = syz_open_pts(r1, 0x0) dup3(r15, r1, 0x0) ioctl$TCSETA(r15, 0x5406, &(0x7f0000000000)={0x2, 0x3, 0x9d4e, 0x2, 0x7, "ab471cce6bfdeb98"}) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:11 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x11}}) 20:36:11 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x12}}) 20:36:11 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000400)={@mcast1, 0x0}, &(0x7f0000000440)=0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x20, 0x6, 0x401, 0x50c, 0xffffffffffffffff, 0x4, '\x00', r2, r4, 0x3, 0x3, 0x0, 0x4}, 0x48) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x0, 0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000380)={0x4, 0x2, 0x4, 0x0, 0xf}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', r5, 0x700, 0x20, 0x6, 0x6, {{0x9, 0x4, 0x3, 0x3f, 0x24, 0x67, 0x0, 0xff, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0xbc, 0x3, 0x4}, @rr={0x7, 0xb, 0xec, [@local, @private=0xa010102]}, @noop]}}}}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000400)={@mcast1}, &(0x7f0000000440)=0x14) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x20, 0x6, 0x401, 0x50c, 0xffffffffffffffff, 0x4, '\x00', r2, r4, 0x3, 0x3, 0x0, 0x4}, 0x48) (async) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x0, 0xffffffffffffffff}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x0, 0x3, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000380)={0x4, 0x2, 0x4, 0x0, 0xf}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', r5, 0x700, 0x20, 0x6, 0x6, {{0x9, 0x4, 0x3, 0x3f, 0x24, 0x67, 0x0, 0xff, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0xbc, 0x3, 0x4}, @rr={0x7, 0xb, 0xec, [@local, @private=0xa010102]}, @noop]}}}}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:11 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x38, &(0x7f00000000c0)=ANY=[@ANYBLOB="1834cfc7ff9eede9ee0abf3ab8f0bd01fd01c70000000000000000009500"/42], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) openat$cgroup_ro(r5, &(0x7f0000001480)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) r6 = fsmount(r3, 0x1, 0x8) openat$cgroup_ro(r6, &(0x7f0000001440)='pids.events\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0xcbd4, 0x6, 0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x1, 0x3, 0x1, 0x3, 0xb, 0xfffffffffffffff0, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1258f4c4, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000380)=""/4096, 0x1f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001380)={0x2, 0x6, 0x2, 0x5}, 0x10}, 0x80) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:11 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x48}}) 20:36:11 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000100)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x7c420}) r2 = syz_open_pts(r0, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x414}}, './file0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xe) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000240)={0x1, 0x5}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000200)=0x1) dup3(r2, r0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0', [{0x20, ',]).$,'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/dev/ptmx\x00'}], 0xa, "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"}, 0x1033) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:11 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x4c}}) 20:36:11 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x38, &(0x7f00000000c0)=ANY=[@ANYBLOB="1834cfc7ff9eede9ee0abf3ab8f0bd01fd01c70000000000000000009500"/42], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) openat$cgroup_ro(r5, &(0x7f0000001480)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) r6 = fsmount(r3, 0x1, 0x8) openat$cgroup_ro(r6, &(0x7f0000001440)='pids.events\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0xcbd4, 0x6, 0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x1, 0x3, 0x1, 0x3, 0xb, 0xfffffffffffffff0, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1258f4c4, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000380)=""/4096, 0x1f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001380)={0x2, 0x6, 0x2, 0x5}, 0x10}, 0x80) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x38, &(0x7f00000000c0)=ANY=[@ANYBLOB="1834cfc7ff9eede9ee0abf3ab8f0bd01fd01c70000000000000000009500"/42], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async) openat$cgroup_ro(r5, &(0x7f0000001480)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) fsmount(r3, 0x1, 0x8) (async) openat$cgroup_ro(r6, &(0x7f0000001440)='pids.events\x00', 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0xcbd4, 0x6, 0x9}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x1, 0x3, 0x1, 0x3, 0xb, 0xfffffffffffffff0, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1258f4c4, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000380)=""/4096, 0x1f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001380)={0x2, 0x6, 0x2, 0x5}, 0x10}, 0x80) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80001) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:11 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x68}}) 20:36:11 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x38, &(0x7f00000000c0)=ANY=[@ANYBLOB="1834cfc7ff9eede9ee0abf3ab8f0bd01fd01c70000000000000000009500"/42], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async) openat$cgroup_ro(r5, &(0x7f0000001480)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async, rerun: 64) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async, rerun: 64) r6 = fsmount(r3, 0x1, 0x8) openat$cgroup_ro(r6, &(0x7f0000001440)='pids.events\x00', 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0xcbd4, 0x6, 0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x1, 0x3, 0x1, 0x3, 0xb, 0xfffffffffffffff0, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1258f4c4, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000380)=""/4096, 0x1f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001380)={0x2, 0x6, 0x2, 0x5}, 0x10}, 0x80) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:11 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000001140)=""/75, 0x4b}, {&(0x7f00000011c0)=""/24, 0x18}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/13, 0xd}, {&(0x7f0000002240)=""/109, 0x6d}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/2, 0x2}, {&(0x7f0000002400)=""/199, 0xc7}], 0xa, 0x10000, 0x1) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000025c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) (async, rerun: 64) r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x5386, &(0x7f0000000040)) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003b40)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r6 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r6, 0x5386, &(0x7f0000000040)) r7 = dup2(r1, r0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) (async, rerun: 32) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000038c0)={&(0x7f0000003880)='xprtrdma_post_recv\x00'}, 0x10) (async, rerun: 32) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000240)=0x100000000000000, 0x12) (async) io_submit(0x0, 0x9, &(0x7f0000003ac0)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x2, 0xfff, r2, &(0x7f0000002600)="063b3489019b06b4d313646fe439038d9aa1b7ce1109a92cac3bdf6f95702ab52000bf298faae1e19f2dcafb932a9e257ee770e1f4e5c25b1ffe1a06", 0x3c, 0x1d}, 0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x3, 0x9, r3, &(0x7f0000002680)="0cff0c4aac1719784bf0d3b392d087108d651bced29bdf7e324b01ab7daec05addc59f12c3c9c5ab4699844d0de230cefc7068d87b6ba4eb2e614234690d", 0x3e, 0x3, 0x0, 0x2, r5}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x6, 0xff, r6, &(0x7f0000002700)="43906f8f0ed637802e70046841daeaeb9a9b197cd466b373e13165a589edd470b4e810e4a70a6de653d1657d57e28992f061f5b016193a2a8341624690ae4f049e", 0x41, 0x0, 0x0, 0x1}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f00000027c0)="a5cb0c30e2", 0x5, 0x78b, 0x0, 0x0, r7}, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000002840)="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", 0x1000, 0x2, 0x0, 0x2, r9}, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0xa49c, r10, &(0x7f0000003900)="e84f2b8a54f1fd4505b68365e1949511947564f7e93ac32c67daef1f65", 0x1d, 0x4, 0x0, 0x3}, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x3, 0x7f, r0, &(0x7f0000003980)="3e4acb715a090bd0d8bbd11b64f890e03df7aeff77802513c9f7b1c48e688a2b1ea1c7ee8da4dc4e8ff42261a606e3868b309f39e24a026f972c6bc4acd8d690f9e421312ed156b1b31cc89f2593291db7ffa025548e04843815f26cf8967b2d4ee8a613b6", 0x65, 0x3, 0x0, 0x1}, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, &(0x7f0000003a40)="4ef57f8f6cc9efdde1424e7bdf5bbd6b1aa7ff0dfd35be3b3e34111c176932e21841f1a1d240e0083eb6c80d4e3ea68d", 0x30, 0xffffffffffffffff, 0x0, 0x1, r12}]) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r13 = memfd_secret(0x80000) r14 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r14, 0x5386, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r14, &(0x7f0000000040)={0x200d}) (async) r15 = syz_open_pts(r1, 0x0) dup3(r15, r1, 0x0) (async, rerun: 64) ioctl$TCSETA(r15, 0x5406, &(0x7f0000000000)={0x2, 0x3, 0x9d4e, 0x2, 0x7, "ab471cce6bfdeb98"}) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:11 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x6c}}) 20:36:11 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000001380)=""/4096, 0x1000, 0x0, &(0x7f0000002380)=""/221, 0xdd}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000240)=0x100000000000000, 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000240)=0x100000000000000, 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x1d, 0x5, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xc, 0x3, 0x2, 0xfffffffffffffffe}, @generic={0x2, 0x9, 0x8, 0x1, 0x100}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000080)='syzkaller\x00', 0x39c, 0x1000, &(0x7f0000000380)=""/4096, 0x41100, 0xc, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0xf, 0x1, 0x16}, 0x10, r2, r0, 0x0, &(0x7f0000002480)=[r4, r6, 0x1, r8, r10, 0xffffffffffffffff]}, 0x80) 20:36:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251, 0x0, 0x0, '\x00', 0x0, 0x21}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="85000000860000009500fd9f000000008a479a9cc9ca135552516c6a61eb9c85eee435df8b397697a17981c301f2daa876d6451fcc6ea8064707b82c5e9cc34193"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc2, &(0x7f00000009c0)=""/194, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000400)={@private0, 0x5, r5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000778bab7c43cee6580254a275000000ad15890d99650000"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', r5, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r6, r2}, 0x80) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x9, &(0x7f0000000680)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0xfffffffd, 0x6, 0x3ff, 0x4}, 0x10, r6, r7, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xe, 0x9, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000005000000000000000101000085200000020000008d38feffffffffff95000000000000001878000005000000000000007341e88306bf4facf0ffffff9500000000000000"], &(0x7f0000000980)='GPL\x00', 0x80, 0x28, &(0x7f0000000c40)=""/40, 0x41000, 0x11, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r6}, 0x80) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000839ca0daf332700000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r8}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x3, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000000000000000007112170000000000950000000000000013a3d3f59b3d08cb57ae8b11619a2855feaaa791d60d3d246abf979921587b66e706cc271c7822aab4b294ffa9bfe903585612f0cb0dcfa904125c89b09e4f443d6d37ed529e4c686ea03678e975970e3325985a943d82c7627550dc38fc5a00aacf1831b80519239456b22786ff257ec1c7b0648e2a8be92f2461ae163f387510fcd78c2fd95cb6fb2e44abea252f07b43275950d9700944c8faef5b69c3c0009528f3245ef9d7e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x3, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8400000010000104000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005c00128008000100677265005000028008001500eefd0f000600180008000000050016000100000006000f00010000000400120008000500090000000500160002000000060018000300000005000a0001000000080006006401010208000300", @ANYRES32=r11], 0x84}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x3, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="6800000010000104000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004000128008000100677265003400028006000f00000000000600110000000000080004000700000006001800030000000800140001000080080006006401010208000300", @ANYRES32=r14], 0x68}}, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x545d, 0x0) 20:36:11 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000100)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x7c420}) (async) r2 = syz_open_pts(r0, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x414}}, './file0\x00'}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xe) (async) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000240)={0x1, 0x5}) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000200)=0x1) (async) dup3(r2, r0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0', [{0x20, ',]).$,'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/dev/ptmx\x00'}], 0xa, "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"}, 0x1033) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:11 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000001380)=""/4096, 0x1000, 0x0, &(0x7f0000002380)=""/221, 0xdd}}, 0x10) (rerun: 32) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x1d, 0x5, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xc, 0x3, 0x2, 0xfffffffffffffffe}, @generic={0x2, 0x9, 0x8, 0x1, 0x100}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000080)='syzkaller\x00', 0x39c, 0x1000, &(0x7f0000000380)=""/4096, 0x41100, 0xc, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0xf, 0x1, 0x16}, 0x10, r2, r0, 0x0, &(0x7f0000002480)=[r4, r6, 0x1, r8, r10, 0xffffffffffffffff]}, 0x80) 20:36:11 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x74}}) 20:36:11 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000100)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x7c420}) r2 = syz_open_pts(r0, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x414}}, './file0\x00'}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xe) (async) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000240)={0x1, 0x5}) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000200)=0x1) dup3(r2, r0, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0', [{0x20, ',]).$,'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/dev/ptmx\x00'}], 0xa, "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"}, 0x1033) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:12 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x7a}}) 20:36:12 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000001140)=""/75, 0x4b}, {&(0x7f00000011c0)=""/24, 0x18}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/13, 0xd}, {&(0x7f0000002240)=""/109, 0x6d}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/2, 0x2}, {&(0x7f0000002400)=""/199, 0xc7}], 0xa, 0x10000, 0x1) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000025c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x5386, &(0x7f0000000040)) (async, rerun: 64) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003b40)='./cgroup/syz0\x00', 0x200002, 0x0) (rerun: 64) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) r6 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r6, 0x5386, &(0x7f0000000040)) (async, rerun: 32) r7 = dup2(r1, r0) (rerun: 32) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000038c0)={&(0x7f0000003880)='xprtrdma_post_recv\x00'}, 0x10) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000240)=0x100000000000000, 0x12) (async, rerun: 32) io_submit(0x0, 0x9, &(0x7f0000003ac0)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x2, 0xfff, r2, &(0x7f0000002600)="063b3489019b06b4d313646fe439038d9aa1b7ce1109a92cac3bdf6f95702ab52000bf298faae1e19f2dcafb932a9e257ee770e1f4e5c25b1ffe1a06", 0x3c, 0x1d}, 0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x3, 0x9, r3, &(0x7f0000002680)="0cff0c4aac1719784bf0d3b392d087108d651bced29bdf7e324b01ab7daec05addc59f12c3c9c5ab4699844d0de230cefc7068d87b6ba4eb2e614234690d", 0x3e, 0x3, 0x0, 0x2, r5}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x6, 0xff, r6, &(0x7f0000002700)="43906f8f0ed637802e70046841daeaeb9a9b197cd466b373e13165a589edd470b4e810e4a70a6de653d1657d57e28992f061f5b016193a2a8341624690ae4f049e", 0x41, 0x0, 0x0, 0x1}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f00000027c0)="a5cb0c30e2", 0x5, 0x78b, 0x0, 0x0, r7}, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000002840)="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", 0x1000, 0x2, 0x0, 0x2, r9}, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0xa49c, r10, &(0x7f0000003900)="e84f2b8a54f1fd4505b68365e1949511947564f7e93ac32c67daef1f65", 0x1d, 0x4, 0x0, 0x3}, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x3, 0x7f, r0, &(0x7f0000003980)="3e4acb715a090bd0d8bbd11b64f890e03df7aeff77802513c9f7b1c48e688a2b1ea1c7ee8da4dc4e8ff42261a606e3868b309f39e24a026f972c6bc4acd8d690f9e421312ed156b1b31cc89f2593291db7ffa025548e04843815f26cf8967b2d4ee8a613b6", 0x65, 0x3, 0x0, 0x1}, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, &(0x7f0000003a40)="4ef57f8f6cc9efdde1424e7bdf5bbd6b1aa7ff0dfd35be3b3e34111c176932e21841f1a1d240e0083eb6c80d4e3ea68d", 0x30, 0xffffffffffffffff, 0x0, 0x1, r12}]) (async, rerun: 32) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) r13 = memfd_secret(0x80000) (async) r14 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r14, 0x5386, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r14, &(0x7f0000000040)={0x200d}) (async) r15 = syz_open_pts(r1, 0x0) dup3(r15, r1, 0x0) (async, rerun: 64) ioctl$TCSETA(r15, 0x5406, &(0x7f0000000000)={0x2, 0x3, 0x9d4e, 0x2, 0x7, "ab471cce6bfdeb98"}) (rerun: 64) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:12 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000001380)=""/4096, 0x1000, 0x0, &(0x7f0000002380)=""/221, 0xdd}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000240)=0x100000000000000, 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000240)=0x100000000000000, 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x1d, 0x5, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xc, 0x3, 0x2, 0xfffffffffffffffe}, @generic={0x2, 0x9, 0x8, 0x1, 0x100}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000080)='syzkaller\x00', 0x39c, 0x1000, &(0x7f0000000380)=""/4096, 0x41100, 0xc, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0xf, 0x1, 0x16}, 0x10, r2, r0, 0x0, &(0x7f0000002480)=[r4, r6, 0x1, r8, r10, 0xffffffffffffffff]}, 0x80) 20:36:12 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x300}}) 20:36:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000140)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000d23cccdd3d83b7520000000095000000000000005327f92c82acb3165c88c2e13b5ba6e34c53b142387c65b156c1cc7e43f951bc185743ebb20e849ac83035fef8d019fdfdc2"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x5386, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000080)={0x0, 0xcb3c, [0xe9c, 0xf21, 0x0, 0x2, 0x4, 0x3f]}) 20:36:12 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x5386, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES64=r0], 0xfeca) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251, 0x0, 0x0, '\x00', 0x0, 0x21}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="85000000860000009500fd9f000000008a479a9cc9ca135552516c6a61eb9c85eee435df8b397697a17981c301f2daa876d6451fcc6ea8064707b82c5e9cc34193"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc2, &(0x7f00000009c0)=""/194, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000400)={@private0, 0x5, r5}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000778bab7c43cee6580254a275000000ad15890d99650000"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', r5, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r6, r2}, 0x80) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x9, &(0x7f0000000680)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0xfffffffd, 0x6, 0x3ff, 0x4}, 0x10, r6, r7, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xe, 0x9, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000005000000000000000101000085200000020000008d38feffffffffff95000000000000001878000005000000000000007341e88306bf4facf0ffffff9500000000000000"], &(0x7f0000000980)='GPL\x00', 0x80, 0x28, &(0x7f0000000c40)=""/40, 0x41000, 0x11, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r6}, 0x80) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000839ca0daf332700000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r8}, 0x10) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x3, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000000000000000007112170000000000950000000000000013a3d3f59b3d08cb57ae8b11619a2855feaaa791d60d3d246abf979921587b66e706cc271c7822aab4b294ffa9bfe903585612f0cb0dcfa904125c89b09e4f443d6d37ed529e4c686ea03678e975970e3325985a943d82c7627550dc38fc5a00aacf1831b80519239456b22786ff257ec1c7b0648e2a8be92f2461ae163f387510fcd78c2fd95cb6fb2e44abea252f07b43275950d9700944c8faef5b69c3c0009528f3245ef9d7e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x3, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8400000010000104000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005c00128008000100677265005000028008001500eefd0f000600180008000000050016000100000006000f00010000000400120008000500090000000500160002000000060018000300000005000a0001000000080006006401010208000300", @ANYRES32=r11], 0x84}}, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x3, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="6800000010000104000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004000128008000100677265003400028006000f00000000000600110000000000080004000700000006001800030000000800140001000080080006006401010208000300", @ANYRES32=r14], 0x68}}, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:12 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x500}}) 20:36:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) (async) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000140)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000d23cccdd3d83b7520000000095000000000000005327f92c82acb3165c88c2e13b5ba6e34c53b142387c65b156c1cc7e43f951bc185743ebb20e849ac83035fef8d019fdfdc2"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x5386, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000080)={0x0, 0xcb3c, [0xe9c, 0xf21, 0x0, 0x2, 0x4, 0x3f]}) 20:36:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSTI(r0, 0x541d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xfff, 0x8, 0x7, 0x9, 0x11, "95149ca052669ec2"}) r4 = syz_open_pts(r1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x38}}, 0x0) dup3(r4, r1, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x9) 20:36:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5460, 0x0) 20:36:12 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x5386, &(0x7f0000000040)) (async) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES64=r0], 0xfeca) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:12 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x600}}) 20:36:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) (async) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000140)) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000d23cccdd3d83b7520000000095000000000000005327f92c82acb3165c88c2e13b5ba6e34c53b142387c65b156c1cc7e43f951bc185743ebb20e849ac83035fef8d019fdfdc2"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x5386, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000080)={0x0, 0xcb3c, [0xe9c, 0xf21, 0x0, 0x2, 0x4, 0x3f]}) 20:36:12 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x5386, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES64=r0], 0xfeca) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r1, 0x5386, &(0x7f0000000040)) (async) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES64=r0], 0xfeca) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) dup3(r2, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) 20:36:12 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x700}}) 20:36:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async, rerun: 32) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251, 0x0, 0x0, '\x00', 0x0, 0x21}, 0x48) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="85000000860000009500fd9f000000008a479a9cc9ca135552516c6a61eb9c85eee435df8b397697a17981c301f2daa876d6451fcc6ea8064707b82c5e9cc34193"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc2, &(0x7f00000009c0)=""/194, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000400)={@private0, 0x5, r5}) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000778bab7c43cee6580254a275000000ad15890d99650000"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', r5, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r6, r2}, 0x80) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x9, &(0x7f0000000680)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0xfffffffd, 0x6, 0x3ff, 0x4}, 0x10, r6, r7, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xe, 0x9, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000005000000000000000101000085200000020000008d38feffffffffff95000000000000001878000005000000000000007341e88306bf4facf0ffffff9500000000000000"], &(0x7f0000000980)='GPL\x00', 0x80, 0x28, &(0x7f0000000c40)=""/40, 0x41000, 0x11, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r6}, 0x80) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000839ca0daf332700000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r8}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x3, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000000000000000007112170000000000950000000000000013a3d3f59b3d08cb57ae8b11619a2855feaaa791d60d3d246abf979921587b66e706cc271c7822aab4b294ffa9bfe903585612f0cb0dcfa904125c89b09e4f443d6d37ed529e4c686ea03678e975970e3325985a943d82c7627550dc38fc5a00aacf1831b80519239456b22786ff257ec1c7b0648e2a8be92f2461ae163f387510fcd78c2fd95cb6fb2e44abea252f07b43275950d9700944c8faef5b69c3c0009528f3245ef9d7e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x80) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x1, 0x3, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8400000010000104000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005c00128008000100677265005000028008001500eefd0f000600180008000000050016000100000006000f00010000000400120008000500090000000500160002000000060018000300000005000a0001000000080006006401010208000300", @ANYRES32=r11], 0x84}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket(0x1, 0x3, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="6800000010000104000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004000128008000100677265003400028006000f00000000000600110000000000080004000700000006001800030000000800140001000080080006006401010208000300", @ANYRES32=r14], 0x68}}, 0x0) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5437, 0x0) (rerun: 32) 20:36:12 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x900}}) 20:36:12 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1a) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) 20:36:13 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xa00}}) 20:36:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) (async) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xfff, 0x8, 0x7, 0x9, 0x11, "95149ca052669ec2"}) r4 = syz_open_pts(r1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x38}}, 0x0) dup3(r4, r1, 0x0) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x9) 20:36:13 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xb00}}) 20:36:13 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="85000000860000009500fd9f000000008a479a9cc9ca135552516c6a61eb9c85eee435df8b397697a17981c301f2daa876d6451fcc6ea8064707b82c5e9cc34193"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc2, &(0x7f00000009c0)=""/194, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000400)={@private0, 0x5, r5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000778bab7c43cee6580254a275000000ad15890d99650000"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', r5, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r6, r2}, 0x80) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x9, &(0x7f0000000680)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0xfffffffd, 0x6, 0x3ff, 0x4}, 0x10, r6, r7, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xe, 0x9, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000005000000000000000101000085200000020000008d38feffffffffff950000000000000018680000050000000000000004e70000dc702000f0ffffff9500000000000000"], &(0x7f0000000980)='GPL\x00', 0x80, 0x28, &(0x7f0000000c40)=""/40, 0x41000, 0x11, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r6}, 0x80) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r8}, 0x10) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x3, 0x10}, 0xc) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xa, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0x4, 0x8, 0x2, 0xffffffffffffffe0, 0x77387f96da588ff8}, @map_fd={0x18, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x5, 0xd, 0xf, 0x9}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x18, '\x00', r5, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x34, 0x10, &(0x7f0000000540)={0x4, 0x8, 0x1f, 0x2}, 0x10, r6, r8, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, r9, r10, 0x1, 0x1]}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='cpuset.memory_pressure\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1f}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x0, 0x0, 0x2, 0x8, 0xc, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @ldst={0x1, 0x2, 0x1, 0x2, 0x1, 0xc, 0x8}]}, &(0x7f0000000500)='GPL\x00', 0x6, 0xa5, &(0x7f0000000540)=""/165, 0x41000, 0x1d, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x6, 0x3, 0x3310}, 0x10, r6, r11}, 0x80) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000240)=0x100000000000000, 0x12) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r15 = openat$cgroup_ro(r14, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r15, &(0x7f0000000240)=0x100000000000000, 0x12) r16 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@generic={0x6, 0xd, 0xc, 0x1, 0x800}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffe, 0xfffffffffffffff0}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x96, &(0x7f00000000c0)=""/150, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x5, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r13, r15, r16, 0x1, 0x1]}, 0x80) 20:36:13 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1a) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1a) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) 20:36:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x40049409, 0x0) 20:36:13 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xc00}}) 20:36:13 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="85000000860000009500fd9f000000008a479a9cc9ca135552516c6a61eb9c85eee435df8b397697a17981c301f2daa876d6451fcc6ea8064707b82c5e9cc34193"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc2, &(0x7f00000009c0)=""/194, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000400)={@private0, 0x5, r5}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000778bab7c43cee6580254a275000000ad15890d99650000"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', r5, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r6, r2}, 0x80) (async, rerun: 64) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x9, &(0x7f0000000680)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0xfffffffd, 0x6, 0x3ff, 0x4}, 0x10, r6, r7, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xe, 0x9, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000005000000000000000101000085200000020000008d38feffffffffff950000000000000018680000050000000000000004e70000dc702000f0ffffff9500000000000000"], &(0x7f0000000980)='GPL\x00', 0x80, 0x28, &(0x7f0000000c40)=""/40, 0x41000, 0x11, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r6}, 0x80) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r8}, 0x10) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x3, 0x10}, 0xc) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xa, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0x4, 0x8, 0x2, 0xffffffffffffffe0, 0x77387f96da588ff8}, @map_fd={0x18, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x5, 0xd, 0xf, 0x9}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x18, '\x00', r5, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x34, 0x10, &(0x7f0000000540)={0x4, 0x8, 0x1f, 0x2}, 0x10, r6, r8, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, r9, r10, 0x1, 0x1]}, 0x80) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='cpuset.memory_pressure\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1f}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x0, 0x0, 0x2, 0x8, 0xc, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @ldst={0x1, 0x2, 0x1, 0x2, 0x1, 0xc, 0x8}]}, &(0x7f0000000500)='GPL\x00', 0x6, 0xa5, &(0x7f0000000540)=""/165, 0x41000, 0x1d, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x6, 0x3, 0x3310}, 0x10, r6, r11}, 0x80) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000240)=0x100000000000000, 0x12) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r15 = openat$cgroup_ro(r14, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r15, &(0x7f0000000240)=0x100000000000000, 0x12) (async, rerun: 64) r16 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@generic={0x6, 0xd, 0xc, 0x1, 0x800}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffe, 0xfffffffffffffff0}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x96, &(0x7f00000000c0)=""/150, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x5, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r13, r15, r16, 0x1, 0x1]}, 0x80) 20:36:13 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xd00}}) 20:36:13 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="85000000860000009500fd9f000000008a479a9cc9ca135552516c6a61eb9c85eee435df8b397697a17981c301f2daa876d6451fcc6ea8064707b82c5e9cc34193"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc2, &(0x7f00000009c0)=""/194, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000400)={@private0, 0x5, r5}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000778bab7c43cee6580254a275000000ad15890d99650000"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', r5, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r6, r2}, 0x80) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x9, &(0x7f0000000680)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0xfffffffd, 0x6, 0x3ff, 0x4}, 0x10, r6, r7, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xe, 0x9, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000005000000000000000101000085200000020000008d38feffffffffff950000000000000018680000050000000000000004e70000dc702000f0ffffff9500000000000000"], &(0x7f0000000980)='GPL\x00', 0x80, 0x28, &(0x7f0000000c40)=""/40, 0x41000, 0x11, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r6}, 0x80) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r8}, 0x10) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x3, 0x10}, 0xc) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xa, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0x4, 0x8, 0x2, 0xffffffffffffffe0, 0x77387f96da588ff8}, @map_fd={0x18, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x5, 0xd, 0xf, 0x9}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x18, '\x00', r5, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x34, 0x10, &(0x7f0000000540)={0x4, 0x8, 0x1f, 0x2}, 0x10, r6, r8, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, r9, r10, 0x1, 0x1]}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='cpuset.memory_pressure\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1f}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x0, 0x0, 0x2, 0x8, 0xc, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @ldst={0x1, 0x2, 0x1, 0x2, 0x1, 0xc, 0x8}]}, &(0x7f0000000500)='GPL\x00', 0x6, 0xa5, &(0x7f0000000540)=""/165, 0x41000, 0x1d, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x6, 0x3, 0x3310}, 0x10, r6, r11}, 0x80) (async) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000240)=0x100000000000000, 0x12) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r15 = openat$cgroup_ro(r14, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r15, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r16 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@generic={0x6, 0xd, 0xc, 0x1, 0x800}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffe, 0xfffffffffffffff0}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x96, &(0x7f00000000c0)=""/150, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x5, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r13, r15, r16, 0x1, 0x1]}, 0x80) 20:36:13 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1a) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) 20:36:13 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xe00}}) 20:36:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSTI(r0, 0x541d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xfff, 0x8, 0x7, 0x9, 0x11, "95149ca052669ec2"}) r4 = syz_open_pts(r1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x38}}, 0x0) dup3(r4, r1, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCXONC(r0, 0x540a, 0x1) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r2, 0x0) (async) dup3(r3, r2, 0x0) (async) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xfff, 0x8, 0x7, 0x9, 0x11, "95149ca052669ec2"}) (async) syz_open_pts(r1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x38}}, 0x0) (async) dup3(r4, r1, 0x0) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x9) (async) 20:36:13 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x2040, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) r10 = dup3(r0, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x8, &(0x7f0000000040)=@raw=[@generic={0xa9, 0x1, 0x7, 0x7, 0x400}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @exit, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x1, 0xa, 0x8, 0x3, 0x0, 0xf}, @jmp={0x5, 0x0, 0x1, 0x2, 0x2, 0x40, 0xfffffffffffffffc}], &(0x7f0000000080)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xc, 0x632, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r3, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r5, r7, r9, 0x1, 0x1, r10]}, 0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) 20:36:13 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x1100}}) 20:36:13 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x2040, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r10 = dup3(r0, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x8, &(0x7f0000000040)=@raw=[@generic={0xa9, 0x1, 0x7, 0x7, 0x400}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @exit, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x1, 0xa, 0x8, 0x3, 0x0, 0xf}, @jmp={0x5, 0x0, 0x1, 0x2, 0x2, 0x40, 0xfffffffffffffffc}], &(0x7f0000000080)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xc, 0x632, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r3, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r5, r7, r9, 0x1, 0x1, r10]}, 0x80) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) 20:36:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x40086602, 0x0) 20:36:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x1200}}) 20:36:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) 20:36:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x2040, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) r10 = dup3(r0, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x8, &(0x7f0000000040)=@raw=[@generic={0xa9, 0x1, 0x7, 0x7, 0x400}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @exit, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x1, 0xa, 0x8, 0x3, 0x0, 0xf}, @jmp={0x5, 0x0, 0x1, 0x2, 0x2, 0x40, 0xfffffffffffffffc}], &(0x7f0000000080)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xc, 0x632, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r3, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r5, r7, r9, 0x1, 0x1, r10]}, 0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x2040, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) (async) dup3(r0, r1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x8, &(0x7f0000000040)=@raw=[@generic={0xa9, 0x1, 0x7, 0x7, 0x400}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @exit, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x1, 0xa, 0x8, 0x3, 0x0, 0xf}, @jmp={0x5, 0x0, 0x1, 0x2, 0x2, 0x40, 0xfffffffffffffffc}], &(0x7f0000000080)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xc, 0x632, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r3, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r5, r7, r9, 0x1, 0x1, r10]}, 0x80) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x3e100, 0x0) r1 = socket$key(0xf, 0x3, 0x2) dup3(r0, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x6) r4 = dup3(r2, 0xffffffffffffffff, 0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x3, 0x3, 0x4, 0x3a3, 0xb, "fd30f15cf6b946dcb1d44be1a9a3f24564a46a"}) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x4800}}) 20:36:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000300)={&(0x7f00000000c0)=""/234, 0xea}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x1, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='scsi_eh_wakeup\x00', r1}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000080)={r3}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)) 20:36:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000002c0)) syz_open_pts(r0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0x6, 0xfe, 0x5, 0x0, 0x9, 0xa8230, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x100, 0x7, 0x5, 0x7, 0xdd, 0x2, 0x5a2c, 0x0, 0x4e0, 0x0, 0x50000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x9800) bind$can_j1939(r4, &(0x7f0000000280)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x1}, 0x1}, 0x18) dup3(r3, r3, 0x80000) r5 = getpgrp(0x0) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000080)='!emory.current\x00') perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x40, 0x3, 0x3, 0xf9, 0x0, 0x4, 0x18140, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x2}, 0x290, 0x2, 0x6c3b44, 0x5, 0x506f, 0xe5, 0x6, 0x0, 0x2, 0x0, 0x5}, r5, 0x8, r6, 0x1b) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x503, 0xfffffffe, 0x0, 0x3, 0x2, "4920ecef74ff663220cd3dd5e6d2c2adfe7c8e"}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20b01, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup2(0xffffffffffffffff, r1) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000011c0)=0x3) fremovexattr(r2, &(0x7f00000000c0)=@known='system.sockprotoname\x00') ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f00000001c0)={{r5}, "95d107b8a87871bebfd0c6b575cc140a7f8484da6cc1663a5750b2eff6eb77de5db83399a1e92dc045ede7b3bcd3812e52c78bfc31b01c2ed13463010bb9252a812ea03d74fee75d028c452b637b80d8726d75f5415581c1f74da14eb16b23e3cec1bba06c98b694a3a72375840aee7c226df0b8c3511594a03299883dd4720770b1a0c432a83f62710dca9233a9dad275dec33d647bdb614270fb8efbda8fd251c3b5e906dc9b1982666f52bce2f5b4d431d0e359d8ef1f684871aca2445758c961bd1eea18e91bcfaf8e745000a0ebce64ee5179ad0224209877bd7ce6c643b0d7da7db533c782ff7861fed2db05a19a5e1caa79ec703c0283f73b70fba916a6ae8596201809af9f1e0b82409b5dc9ab20c8ceebf43df3e9ddbd4b99e3a87481b03a1f84b61bb96673a1324210473f4b8b1608f35e3f041a1a7c93cd839259c4d261cdece826574274d6bc26525d6446e51aab8c6e33ca170b43bfb0bba5d39c9bc535720a706062434ab53ce2b44b691fe0dec6d8c3145345fabb4eff25c7a79cae223276f631b7d500e60b7545a3911af69da7689dce056d4f4067f15752fe7313ece21d04cff9f53d20a8fb2459b8be08a381e8c04c5fac0625473310c9bcfdc1ea48878a89d2ed267ea5a9cbbf37a271f24a156d964b23af8e2bcaf55d0aab6a4b27797a1071648ba4d1f8ab430fe389600755d536da84950920ef8c9c9e388fd93735ff6eb8c13be84a4ad0d2f3028859b73ff43b977680185e8848559aacd0b2bbe0e839b5b8175dc0333f1affc48bee94771cfa51c51eb77a038471dbc0e16002a1dc8c278021f7434ca3ff57f6810676673727ce8898574cd0acf3354e9dc323fd2df29bdec0b88bc4c62457207632f7d845c7b1153240a0b3c012049cb982c8f39809023bf9b68ed02d778f3299e0d24fa5c8651ad70ca0319fc6d231576a9c8ec59f5b4a98b3bbe8c9c9c07369544163dffc1d9a44ef8ccbdef21a745f743b377d63f482228a2f35af3236acb5853b5d1b2bbb6c76645318b13b70d766a39b8a77dfa315b5e338069c6a3bcee9cec702dbbc816df3877f61cbfc07c4cc8f3ca36e579d4ad751eb16a460cd6e1be8b2265567b72a6ddd2da1a29a33b1207272a05bc3ea25ebd019fe7417ba88fe495fbd0508d22d7593438776eff2da4241215cfa1c73b2c3f09280a51fcff86b5a4d73dede0f1fbb91f2ec634aaddc8ca11f8017d745da0bd9f3aa995714fd1c88b761f016cf58295a9c343947d5923ffae91291ab3b52477550e8f30b9d1aa4ace107f8b2247ecec63a2029f24af00086c8f8a6e73c3bd6fd5efe95e5abecdce3d8cf59ddab9e0a496f60bb666486a9db5fb2c4413f674f80d140174712fb53254dff4cd1a9ee3d718a55fc57cfe5cfe8fb328fd200bc5381d998bb425667750d0c38597d4cf3551dd48f589bde4fbacbeccbd2d4b2bf8d9c82a3ba84bb0f674e78fcefcd03a36f1e84fbe0605e8f59646f3db02855dda81287f861da3ca5a36b88e036a7e799b4169b0e5c7ec325d425c3dace766d5ed2478cefca86d27b3a4996f692d4a008bce4e01f1d43575ed1a2904de2969f4a0806dcc3bf574c363644e113bbae4ec6f26a613cff3304e4afd769a09ba5cee6b6ea8ddb4f390b6080d472060ce2705a09c278d559cfcc7e7ba74ebd93203345751112de1f80e8cbf777eeff20756fd49323ce0af1ca3449af00e106c2f4bb6b57950e35851386dab8a0b3a47a765672a8f03491521be4cc7d1b19e6084e0ca2a4cc41b8cd8c8a68c5a137a0faf5edd7c8f3b3795f8e73aed1129cd2d8b4c8e5a711059e58190f47a4fc2fcbc7f06ef6af19676196d4f81b84a385f560e44f262e9f54342e160d141494c18b686b94cc41fb2a3834d2b2a3493ef600bfdabc9c7cec1c3779974dacf39b279f9650e460e551a857ecd24a9f0a76ec044d2f1e775aa7fb857febb2724784c9e5b499c00d2835a77e5df3086da8a8e53dd6a6d339970b69d554babc022e0f956ea86dd3447af97104cb41134ea2a1316c227f95344b9c421ef429c737d8c81b2c9ca23fefd768fe7628cd5d756d16f705d7654f7bae87cd676205c850d16761d11c924de5c5f4c9487d5ba5c6d5a2b34450b6c89ee7f9d8279def3689785f2311992dcdda68dfed6baa177c8aef8d99de883631c3d527f1485f0a7a5092aae2f6af8353d22e1672c105bd9fb82203aef30c0657be77805a7fa9a8d04b40d1a2d1c60ad28d97b9f4518cfdfcdcfd10c6515e6928e74e1b93e67a8b3927b15577507d0bcd12ba517b75d257e70878df66f973490f71fc68f563dba8e2b1ed8273dcd251d38e96dfa3dbe6de7a0bd7b6c1790e0a77681faf2e09599a99acd931881be4be3f8850321ac55417df9027f2e963e515cca58b06e93c8a9dbc4d973897c340c28851192bbb60614b8899da6915fec23ced47f5b32cbecd740393b94f29b3b3252c42e50fc4cc9b66ea78283b07fc77eb7903cf53cf198189bb269b47a8c027c110d26060ce32f6696eb130c61db631cc7243ec7bbd0dec93e37301dd8db954f70bc5e6a431e31393542a5073b0a4eb6beeab673d4cf8d58c985859d6a82869637900afab12ad9a8d744d6659b7ab20d3ac775ad871c1dd1666c17e35b1c0464b41f0da0194f274ed390b394d284f0546f17424bff0d48ee19f8b04a7ab2ee9e240be8a64ca8b38d4c366557378d4c02277022eeb14d1f1f4f38fa099422ae5a2d7b8634ae863db0b3de2ead03148f6a15abc746c6a935da2c4d22c4e9180b3c976b2f7345ed50fd53dc7c4833de5f35f3ae2f914b13b4b14becf1da34fca988349167d9d3289b1d6e2ab3c9e8c0059875fc34e4ee5198658681987bda9af694a2ff3fd41589a5a95d75dc7cdb3ca40bdf65b6fa37ec35cbda1467a4cf3b95971bb4aabebf1e5da49095189f9e2651fa373b94db40b94e8dbe42691b145cc373850b49f3185c9537b526dfa0d1bf9df320160f987d3b09dd116edad896b50d9edad145647441cd95aa1554f181439f7780f1717cc49f4fdef3ecbb51b44d8d258181f8b9681f5912d9ac28fb39bb83541a0b83fe5e37334081f0438f8443fde93af0ebb223ca0ceeed0f09f66eaa0930d8925d4f73062ee1533ee386220af53c3b3140df0e23ceb44aa3cb2924805cac33a731aed973a7ef1862a4a375f0f36c7eed1c29cf0971ac51f9586df1d5dd50fec69c6aca68b244a82bcddc4ba70be990faff568133a3065e98f0c71218ec536f0bbfae67de33816e36e965f90f48dc80f0f862a03e00fe5577bb0904ab6f647b9b1fdd8a9bf5addddc2a0b3ac968a4be558c91180a7fad3540c6199adbcb8b03c20086f4a07520fa1eeb4a2cd42bbef0562c1c8bac9190b8347b4ca409c1d4c309a90145430b0bdcea232ddd16831023df6bb49af5d87511a8e3f66c02f43c104805cd78e56812986f49838dc051bae414f6352927e01a956865defa364128a0a0ae72de41ab735af4f25512731ecd5fe642669e9a55027206d3c60b125f54438d7d4fec4711e8bcfaee35dc132e70a81c5d7e579cf0e4157dc9dc30b2031aec91cbcd66de28b0d55c02fc90902ffacc850b3ae0f8296612d6d8c0e0db0111955841c5ffc71dcf43815de9ef1d4583ce8e8f059bc8cb876dea7f1d3448353c8ab082437664ef5ceb5741eff5be239405d374f2f625a963d8919612cb3061eea0e33a7af2a07ff62eddcca0a491707e8a439616009a59d296d68bb686d0d00b14a7405408b1687ba52fd94a7839a0ed996dc8582f92e7ab90e589c1542f10ca4bc8aaac7dd98396b77ab3f8433f7689476a3b2e2a0e2d1d4978001b331bb381d0f3bd736022f4f18970310c8407d52c09f61512b49be74588aff67398b1fa9fbed1530705de6948ef3d5888038847e0e64c36e55f3559fb94e5f617f15f67488c2c1abbb59aed82e458fd4e203e9b3e1bc853ff9773cd05cfef52619699d1089d29c47e410fd97c95065cfacbe6174c52e6375ff9ce8b58631eba826a3bb9893af03d588933a7e3fa028df51e37a4a429a6da514cf801415643c533c5c30f225a923e3f6ba86a518f966de1b9d719f2e99049cbbe95b6de8f2fa4dec990f4df8a39e20de4342bc809703c84c5cfbd60fc1d19e09219bfcdf36028edf5d7ae1c78a94b42e41540c577bae0b48accd3df1fd859c2b6ed76c8d78d845ed41eba8a4b47e12fceaf3f172c34b23cef6ecaa3d7fd00391001c3ad2604bcd51655dc9825b2f76a65cfa7b42fbbddc39a2bc21e7f1a85fdfcde438ae1c333b49b07c46828ec19bfcac757f25aee6973e8531a4b6d826133d395a572eb5a37f78471674beeca4b324132e717fab24464e4b55720eedf905318a6125b8368cc681d2b4a6ac9c02623970bb738535154969598bc61a5987e84f57a27cd51b3eebea711529145f564412f75a8e69d593055d3f5cddba765dd1f37851e7d2868575ebccaf8af5b2b664982cc650a6fed0983fc1f24b35e093f7dd6bfbb89a2789d70cd0b0c38117e60905571669b1535502e9c197ba3ffed9c31689d7919570dddbbe4fcab74c25a534c7336d3a596942e38e0449d34cde16de1ca2871c5edb7fb490dcf69ef5b185118ea888d78dd0f4f351eb73365f5ee0b170d4d7b3899a97d31f2aae61de729b6f3c770650af5a5cb86e411811bc2640a43bde7d4916a5af9ac8f9bd4fb3f1b05c166d8973ef31c56cbff599d613203dd0fce28887fc7e125dd16df5505f241e6962181eef198dbf0dff0550c20a700a58568f0f75c1e497945f60cd1389db044341fd30d0c165ef21eed424f7e59a9f50bc4fc7b68c5ffcad6efa4fe5b056bd42e2f1101a38375532344c4075b85928b50081e14d8192a6f73cfa5985fb39b61b8b18e93b59c207dbba871bf25defbcfbd8856c2bcdeda7915e1ab4bd6463e2cf7e9d2ff08bfc4ff87930eff85151c2611e22a0562d54b62e7d9d524176ebfff5225f5e07b461a3cb108bb2055fc6508e3229a5670d8f5ed451cbcd3bc0f3130ff2c4e02e2f38a6e07fec68a05f640ec6de14e394c888a049f95ae9bdc63b393d8e2fd0f00d62c87e91b5a4facf84f4425d32a85cd33afe17d21cbe1c314296e32cf75ecb82b95b4b008e8fdc420884fe374750cd0c4cc909bd7c4cd350cc0b0705cb0f3423a87bd519900584ecafef427c9c555e8565e467690449e2e38a4dc363eac04661b0a54af8c46d5ed3a95ceecc4417c851c4fed705e8f2ed12bbbb6125bcf4678297db1051c7c173de832106732d94bf5698aef24cd0b03052b434cff23314d60061f204d0bbf86e33c235d548cf85017610723ac529bbe5ab08b55a8de4734754feecf5ef6fe888220ae3dc601e17f82f3e39b09cc04f341d46d055e6489356bb62914896e9860d3a9ab72a99ca56769f0c14642f49a4b4c50498d5f94c4f3dfd0b6b2e4e422d369cdc1955df154c2ecb8c16595b885499ab549583eae509352dc82e4f0345531e7a12f306b803aae766198c7a76aeef6d4edd78c1763e97ff286804384ad58d09f9917047e6821525dad34344cfd6e0b8759c0c05af060f448f4bd1a45c02db5c02205a4aa6ec71bcc5740e77b8ed15cc83f213bf06eb34305610d1fddd56abfd5d1d1412f13531b64b192b3a701fdb4a4ee3c66303a4fe562446b99dc671c796caf104f01eb9e9a035fc0e61fe20a1a8c4f10418c759eabd39cc43a687059e743ed3bdb5db6f31f5d9fbf628f049f4e4c1d9266ef44a5971bb3619f438b7b3ad24"}) dup3(r3, r2, 0x0) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000300)={&(0x7f00000000c0)=""/234, 0xea}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x1, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='scsi_eh_wakeup\x00', r1}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000080)={r3}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000300)={&(0x7f00000000c0)=""/234, 0xea}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async) syz_open_dev$sg(&(0x7f0000659000), 0x1, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='scsi_eh_wakeup\x00', r1}, 0x10) (async) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000080)={r3}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x4c00}}) 20:36:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000300)={&(0x7f00000000c0)=""/234, 0xea}) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x1, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='scsi_eh_wakeup\x00', r1}, 0x10) (async) r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000080)={r3}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)) 20:36:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x40087602, 0x0) 20:36:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x6800}}) 20:36:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0x100000000000000, 0x12) (async) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000002c0)) syz_open_pts(r0, 0x0) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0x6, 0xfe, 0x5, 0x0, 0x9, 0xa8230, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x100, 0x7, 0x5, 0x7, 0xdd, 0x2, 0x5a2c, 0x0, 0x4e0, 0x0, 0x50000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x9800) bind$can_j1939(r4, &(0x7f0000000280)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x1}, 0x1}, 0x18) dup3(r3, r3, 0x80000) r5 = getpgrp(0x0) (async) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000080)='!emory.current\x00') (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x40, 0x3, 0x3, 0xf9, 0x0, 0x4, 0x18140, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x2}, 0x290, 0x2, 0x6c3b44, 0x5, 0x506f, 0xe5, 0x6, 0x0, 0x2, 0x0, 0x5}, r5, 0x8, r6, 0x1b) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0f0000000000008a000000182a0000", @ANYRES32, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="00000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x40, 0xfff}, 0x10}, 0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x3e100, 0x0) r1 = socket$key(0xf, 0x3, 0x2) dup3(r0, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (rerun: 64) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x6) (async) r4 = dup3(r2, 0xffffffffffffffff, 0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x3, 0x3, 0x4, 0x3a3, 0xb, "fd30f15cf6b946dcb1d44be1a9a3f24564a46a"}) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async, rerun: 32) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x503, 0xfffffffe, 0x0, 0x3, 0x2, "4920ecef74ff663220cd3dd5e6d2c2adfe7c8e"}) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20b01, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async, rerun: 32) r3 = syz_open_pts(r2, 0x0) dup2(0xffffffffffffffff, r1) (async) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = socket$caif_seqpacket(0x25, 0x5, 0x2) (async) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000011c0)=0x3) (async) fremovexattr(r2, &(0x7f00000000c0)=@known='system.sockprotoname\x00') ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f00000001c0)={{r5}, "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"}) (async) dup3(r3, r2, 0x0) (async, rerun: 32) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (rerun: 32) 20:36:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x6c00}}) 20:36:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0f0000000000008a000000182a0000", @ANYRES32, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="00000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x40, 0xfff}, 0x10}, 0x80) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000002c0)) (async) syz_open_pts(r0, 0x0) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0x6, 0xfe, 0x5, 0x0, 0x9, 0xa8230, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x100, 0x7, 0x5, 0x7, 0xdd, 0x2, 0x5a2c, 0x0, 0x4e0, 0x0, 0x50000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async, rerun: 32) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x9800) bind$can_j1939(r4, &(0x7f0000000280)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x1}, 0x1}, 0x18) (async, rerun: 64) dup3(r3, r3, 0x80000) (async, rerun: 64) r5 = getpgrp(0x0) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000080)='!emory.current\x00') perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x40, 0x3, 0x3, 0xf9, 0x0, 0x4, 0x18140, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x2}, 0x290, 0x2, 0x6c3b44, 0x5, 0x506f, 0xe5, 0x6, 0x0, 0x2, 0x0, 0x5}, r5, 0x8, r6, 0x1b) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x7400}}) 20:36:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0f0000000000008a000000182a0000", @ANYRES32, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="00000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x40, 0xfff}, 0x10}, 0x80) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:14 executing program 3: r0 = gettid() rt_tgsigqueueinfo(0xffffffffffffffff, r0, 0x28, &(0x7f0000000000)={0xa, 0x1000, 0x9}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) getpid() write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCSTI(r1, 0x5437, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000000140)={0x5, 0x616, 0x1000, 0x2000000000}) 20:36:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x401c5820, 0x0) 20:36:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) r3 = dup2(r0, r1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000080)) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000040)=0x4) 20:36:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x7a00}}) 20:36:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x3e100, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) dup3(r0, r1, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) (async) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x6) (async) r4 = dup3(r2, 0xffffffffffffffff, 0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x3, 0x3, 0x4, 0x3a3, 0xb, "fd30f15cf6b946dcb1d44be1a9a3f24564a46a"}) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x503, 0xfffffffe, 0x0, 0x3, 0x2, "4920ecef74ff663220cd3dd5e6d2c2adfe7c8e"}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20b01, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup2(0xffffffffffffffff, r1) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000011c0)=0x3) fremovexattr(r2, &(0x7f00000000c0)=@known='system.sockprotoname\x00') ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f00000001c0)={{r5}, "95d107b8a87871bebfd0c6b575cc140a7f8484da6cc1663a5750b2eff6eb77de5db83399a1e92dc045ede7b3bcd3812e52c78bfc31b01c2ed13463010bb9252a812ea03d74fee75d028c452b637b80d8726d75f5415581c1f74da14eb16b23e3cec1bba06c98b694a3a72375840aee7c226df0b8c3511594a03299883dd4720770b1a0c432a83f62710dca9233a9dad275dec33d647bdb614270fb8efbda8fd251c3b5e906dc9b1982666f52bce2f5b4d431d0e359d8ef1f684871aca2445758c961bd1eea18e91bcfaf8e745000a0ebce64ee5179ad0224209877bd7ce6c643b0d7da7db533c782ff7861fed2db05a19a5e1caa79ec703c0283f73b70fba916a6ae8596201809af9f1e0b82409b5dc9ab20c8ceebf43df3e9ddbd4b99e3a87481b03a1f84b61bb96673a1324210473f4b8b1608f35e3f041a1a7c93cd839259c4d261cdece826574274d6bc26525d6446e51aab8c6e33ca170b43bfb0bba5d39c9bc535720a706062434ab53ce2b44b691fe0dec6d8c3145345fabb4eff25c7a79cae223276f631b7d500e60b7545a3911af69da7689dce056d4f4067f15752fe7313ece21d04cff9f53d20a8fb2459b8be08a381e8c04c5fac0625473310c9bcfdc1ea48878a89d2ed267ea5a9cbbf37a271f24a156d964b23af8e2bcaf55d0aab6a4b27797a1071648ba4d1f8ab430fe389600755d536da84950920ef8c9c9e388fd93735ff6eb8c13be84a4ad0d2f3028859b73ff43b977680185e8848559aacd0b2bbe0e839b5b8175dc0333f1affc48bee94771cfa51c51eb77a038471dbc0e16002a1dc8c278021f7434ca3ff57f6810676673727ce8898574cd0acf3354e9dc323fd2df29bdec0b88bc4c62457207632f7d845c7b1153240a0b3c012049cb982c8f39809023bf9b68ed02d778f3299e0d24fa5c8651ad70ca0319fc6d231576a9c8ec59f5b4a98b3bbe8c9c9c07369544163dffc1d9a44ef8ccbdef21a745f743b377d63f482228a2f35af3236acb5853b5d1b2bbb6c76645318b13b70d766a39b8a77dfa315b5e338069c6a3bcee9cec702dbbc816df3877f61cbfc07c4cc8f3ca36e579d4ad751eb16a460cd6e1be8b2265567b72a6ddd2da1a29a33b1207272a05bc3ea25ebd019fe7417ba88fe495fbd0508d22d7593438776eff2da4241215cfa1c73b2c3f09280a51fcff86b5a4d73dede0f1fbb91f2ec634aaddc8ca11f8017d745da0bd9f3aa995714fd1c88b761f016cf58295a9c343947d5923ffae91291ab3b52477550e8f30b9d1aa4ace107f8b2247ecec63a2029f24af00086c8f8a6e73c3bd6fd5efe95e5abecdce3d8cf59ddab9e0a496f60bb666486a9db5fb2c4413f674f80d140174712fb53254dff4cd1a9ee3d718a55fc57cfe5cfe8fb328fd200bc5381d998bb425667750d0c38597d4cf3551dd48f589bde4fbacbeccbd2d4b2bf8d9c82a3ba84bb0f674e78fcefcd03a36f1e84fbe0605e8f59646f3db02855dda81287f861da3ca5a36b88e036a7e799b4169b0e5c7ec325d425c3dace766d5ed2478cefca86d27b3a4996f692d4a008bce4e01f1d43575ed1a2904de2969f4a0806dcc3bf574c363644e113bbae4ec6f26a613cff3304e4afd769a09ba5cee6b6ea8ddb4f390b6080d472060ce2705a09c278d559cfcc7e7ba74ebd93203345751112de1f80e8cbf777eeff20756fd49323ce0af1ca3449af00e106c2f4bb6b57950e35851386dab8a0b3a47a765672a8f03491521be4cc7d1b19e6084e0ca2a4cc41b8cd8c8a68c5a137a0faf5edd7c8f3b3795f8e73aed1129cd2d8b4c8e5a711059e58190f47a4fc2fcbc7f06ef6af19676196d4f81b84a385f560e44f262e9f54342e160d141494c18b686b94cc41fb2a3834d2b2a3493ef600bfdabc9c7cec1c3779974dacf39b279f9650e460e551a857ecd24a9f0a76ec044d2f1e775aa7fb857febb2724784c9e5b499c00d2835a77e5df3086da8a8e53dd6a6d339970b69d554babc022e0f956ea86dd3447af97104cb41134ea2a1316c227f95344b9c421ef429c737d8c81b2c9ca23fefd768fe7628cd5d756d16f705d7654f7bae87cd676205c850d16761d11c924de5c5f4c9487d5ba5c6d5a2b34450b6c89ee7f9d8279def3689785f2311992dcdda68dfed6baa177c8aef8d99de883631c3d527f1485f0a7a5092aae2f6af8353d22e1672c105bd9fb82203aef30c0657be77805a7fa9a8d04b40d1a2d1c60ad28d97b9f4518cfdfcdcfd10c6515e6928e74e1b93e67a8b3927b15577507d0bcd12ba517b75d257e70878df66f973490f71fc68f563dba8e2b1ed8273dcd251d38e96dfa3dbe6de7a0bd7b6c1790e0a77681faf2e09599a99acd931881be4be3f8850321ac55417df9027f2e963e515cca58b06e93c8a9dbc4d973897c340c28851192bbb60614b8899da6915fec23ced47f5b32cbecd740393b94f29b3b3252c42e50fc4cc9b66ea78283b07fc77eb7903cf53cf198189bb269b47a8c027c110d26060ce32f6696eb130c61db631cc7243ec7bbd0dec93e37301dd8db954f70bc5e6a431e31393542a5073b0a4eb6beeab673d4cf8d58c985859d6a82869637900afab12ad9a8d744d6659b7ab20d3ac775ad871c1dd1666c17e35b1c0464b41f0da0194f274ed390b394d284f0546f17424bff0d48ee19f8b04a7ab2ee9e240be8a64ca8b38d4c366557378d4c02277022eeb14d1f1f4f38fa099422ae5a2d7b8634ae863db0b3de2ead03148f6a15abc746c6a935da2c4d22c4e9180b3c976b2f7345ed50fd53dc7c4833de5f35f3ae2f914b13b4b14becf1da34fca988349167d9d3289b1d6e2ab3c9e8c0059875fc34e4ee5198658681987bda9af694a2ff3fd41589a5a95d75dc7cdb3ca40bdf65b6fa37ec35cbda1467a4cf3b95971bb4aabebf1e5da49095189f9e2651fa373b94db40b94e8dbe42691b145cc373850b49f3185c9537b526dfa0d1bf9df320160f987d3b09dd116edad896b50d9edad145647441cd95aa1554f181439f7780f1717cc49f4fdef3ecbb51b44d8d258181f8b9681f5912d9ac28fb39bb83541a0b83fe5e37334081f0438f8443fde93af0ebb223ca0ceeed0f09f66eaa0930d8925d4f73062ee1533ee386220af53c3b3140df0e23ceb44aa3cb2924805cac33a731aed973a7ef1862a4a375f0f36c7eed1c29cf0971ac51f9586df1d5dd50fec69c6aca68b244a82bcddc4ba70be990faff568133a3065e98f0c71218ec536f0bbfae67de33816e36e965f90f48dc80f0f862a03e00fe5577bb0904ab6f647b9b1fdd8a9bf5addddc2a0b3ac968a4be558c91180a7fad3540c6199adbcb8b03c20086f4a07520fa1eeb4a2cd42bbef0562c1c8bac9190b8347b4ca409c1d4c309a90145430b0bdcea232ddd16831023df6bb49af5d87511a8e3f66c02f43c104805cd78e56812986f49838dc051bae414f6352927e01a956865defa364128a0a0ae72de41ab735af4f25512731ecd5fe642669e9a55027206d3c60b125f54438d7d4fec4711e8bcfaee35dc132e70a81c5d7e579cf0e4157dc9dc30b2031aec91cbcd66de28b0d55c02fc90902ffacc850b3ae0f8296612d6d8c0e0db0111955841c5ffc71dcf43815de9ef1d4583ce8e8f059bc8cb876dea7f1d3448353c8ab082437664ef5ceb5741eff5be239405d374f2f625a963d8919612cb3061eea0e33a7af2a07ff62eddcca0a491707e8a439616009a59d296d68bb686d0d00b14a7405408b1687ba52fd94a7839a0ed996dc8582f92e7ab90e589c1542f10ca4bc8aaac7dd98396b77ab3f8433f7689476a3b2e2a0e2d1d4978001b331bb381d0f3bd736022f4f18970310c8407d52c09f61512b49be74588aff67398b1fa9fbed1530705de6948ef3d5888038847e0e64c36e55f3559fb94e5f617f15f67488c2c1abbb59aed82e458fd4e203e9b3e1bc853ff9773cd05cfef52619699d1089d29c47e410fd97c95065cfacbe6174c52e6375ff9ce8b58631eba826a3bb9893af03d588933a7e3fa028df51e37a4a429a6da514cf801415643c533c5c30f225a923e3f6ba86a518f966de1b9d719f2e99049cbbe95b6de8f2fa4dec990f4df8a39e20de4342bc809703c84c5cfbd60fc1d19e09219bfcdf36028edf5d7ae1c78a94b42e41540c577bae0b48accd3df1fd859c2b6ed76c8d78d845ed41eba8a4b47e12fceaf3f172c34b23cef6ecaa3d7fd00391001c3ad2604bcd51655dc9825b2f76a65cfa7b42fbbddc39a2bc21e7f1a85fdfcde438ae1c333b49b07c46828ec19bfcac757f25aee6973e8531a4b6d826133d395a572eb5a37f78471674beeca4b324132e717fab24464e4b55720eedf905318a6125b8368cc681d2b4a6ac9c02623970bb738535154969598bc61a5987e84f57a27cd51b3eebea711529145f564412f75a8e69d593055d3f5cddba765dd1f37851e7d2868575ebccaf8af5b2b664982cc650a6fed0983fc1f24b35e093f7dd6bfbb89a2789d70cd0b0c38117e60905571669b1535502e9c197ba3ffed9c31689d7919570dddbbe4fcab74c25a534c7336d3a596942e38e0449d34cde16de1ca2871c5edb7fb490dcf69ef5b185118ea888d78dd0f4f351eb73365f5ee0b170d4d7b3899a97d31f2aae61de729b6f3c770650af5a5cb86e411811bc2640a43bde7d4916a5af9ac8f9bd4fb3f1b05c166d8973ef31c56cbff599d613203dd0fce28887fc7e125dd16df5505f241e6962181eef198dbf0dff0550c20a700a58568f0f75c1e497945f60cd1389db044341fd30d0c165ef21eed424f7e59a9f50bc4fc7b68c5ffcad6efa4fe5b056bd42e2f1101a38375532344c4075b85928b50081e14d8192a6f73cfa5985fb39b61b8b18e93b59c207dbba871bf25defbcfbd8856c2bcdeda7915e1ab4bd6463e2cf7e9d2ff08bfc4ff87930eff85151c2611e22a0562d54b62e7d9d524176ebfff5225f5e07b461a3cb108bb2055fc6508e3229a5670d8f5ed451cbcd3bc0f3130ff2c4e02e2f38a6e07fec68a05f640ec6de14e394c888a049f95ae9bdc63b393d8e2fd0f00d62c87e91b5a4facf84f4425d32a85cd33afe17d21cbe1c314296e32cf75ecb82b95b4b008e8fdc420884fe374750cd0c4cc909bd7c4cd350cc0b0705cb0f3423a87bd519900584ecafef427c9c555e8565e467690449e2e38a4dc363eac04661b0a54af8c46d5ed3a95ceecc4417c851c4fed705e8f2ed12bbbb6125bcf4678297db1051c7c173de832106732d94bf5698aef24cd0b03052b434cff23314d60061f204d0bbf86e33c235d548cf85017610723ac529bbe5ab08b55a8de4734754feecf5ef6fe888220ae3dc601e17f82f3e39b09cc04f341d46d055e6489356bb62914896e9860d3a9ab72a99ca56769f0c14642f49a4b4c50498d5f94c4f3dfd0b6b2e4e422d369cdc1955df154c2ecb8c16595b885499ab549583eae509352dc82e4f0345531e7a12f306b803aae766198c7a76aeef6d4edd78c1763e97ff286804384ad58d09f9917047e6821525dad34344cfd6e0b8759c0c05af060f448f4bd1a45c02db5c02205a4aa6ec71bcc5740e77b8ed15cc83f213bf06eb34305610d1fddd56abfd5d1d1412f13531b64b192b3a701fdb4a4ee3c66303a4fe562446b99dc671c796caf104f01eb9e9a035fc0e61fe20a1a8c4f10418c759eabd39cc43a687059e743ed3bdb5db6f31f5d9fbf628f049f4e4c1d9266ef44a5971bb3619f438b7b3ad24"}) dup3(r3, r2, 0x0) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x503, 0xfffffffe, 0x0, 0x3, 0x2, "4920ecef74ff663220cd3dd5e6d2c2adfe7c8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20b01, 0x0) (async) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r2, 0x0) (async) dup2(0xffffffffffffffff, r1) (async) socket$phonet(0x23, 0x2, 0x1) (async) socket$caif_seqpacket(0x25, 0x5, 0x2) (async) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000011c0)=0x3) (async) fremovexattr(r2, &(0x7f00000000c0)=@known='system.sockprotoname\x00') (async) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f00000001c0)={{r5}, "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"}) (async) dup3(r3, r2, 0x0) (async) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) 20:36:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) r3 = dup2(r0, r1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000080)) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000040)=0x4) 20:36:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x1000000}}) 20:36:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) r3 = dup2(r0, r1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000080)) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000040)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) (async) dup2(r0, r1) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000080)) (async) dup2(r2, r1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000040)=0x4) (async) 20:36:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x2000000}}) 20:36:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r3, 0x4, r0}, 0x10) 20:36:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x3000000}}) 20:36:15 executing program 3: r0 = gettid() rt_tgsigqueueinfo(0xffffffffffffffff, r0, 0x28, &(0x7f0000000000)={0xa, 0x1000, 0x9}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) getpid() write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) (async) ioctl$TIOCSTI(r1, 0x5437, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000000140)={0x5, 0x616, 0x1000, 0x2000000000}) 20:36:15 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r3, 0x4, r0}, 0x10) 20:36:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x4000000}}) 20:36:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f00000001c0)=@v1={0x1000000, [{0x8, 0x1}]}, 0xc, 0x3) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000200)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r1, 0x0) dup3(r3, r1, 0x0) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2971bbbf}}, './file0\x00'}) ioctl$KDADDIO(r1, 0x4b34, 0x4cbc) 20:36:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x4020940d, 0x0) 20:36:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2971bbbf}}, './file0\x00'}) ioctl$KDADDIO(r1, 0x4b34, 0x4cbc) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2971bbbf}}, './file0\x00'}) (async) ioctl$KDADDIO(r1, 0x4b34, 0x4cbc) (async) 20:36:15 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async, rerun: 32) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r3, 0x4, r0}, 0x10) 20:36:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x5000000}}) 20:36:15 executing program 3: r0 = gettid() rt_tgsigqueueinfo(0xffffffffffffffff, r0, 0x28, &(0x7f0000000000)={0xa, 0x1000, 0x9}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) getpid() write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCSTI(r1, 0x5437, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000000140)={0x5, 0x616, 0x1000, 0x2000000000}) gettid() (async) rt_tgsigqueueinfo(0xffffffffffffffff, r0, 0x28, &(0x7f0000000000)={0xa, 0x1000, 0x9}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) getpid() (async) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r1, 0x0) (async) dup3(r2, r1, 0x0) (async) ioctl$TIOCSTI(r1, 0x5437, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) (async) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000000140)={0x5, 0x616, 0x1000, 0x2000000000}) (async) 20:36:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2971bbbf}}, './file0\x00'}) ioctl$KDADDIO(r1, 0x4b34, 0x4cbc) 20:36:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x180, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:15 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00'}, 0x10) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r1 = memfd_secret(0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xc605, 0x3, 0x4}) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0f85403, &(0x7f0000000000)) 20:36:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x6000000}}) 20:36:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x7000000}}) 20:36:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f00000001c0)=@v1={0x1000000, [{0x8, 0x1}]}, 0xc, 0x3) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000200)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r1, 0x0) dup3(r3, r1, 0x0) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) (async) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f00000001c0)=@v1={0x1000000, [{0x8, 0x1}]}, 0xc, 0x3) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000200)) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r1, 0x0) (async) dup3(r3, r1, 0x0) (async) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) 20:36:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x180, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x541d, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x180, 0x0) (async) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) 20:36:15 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00'}, 0x10) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r1 = memfd_secret(0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xc605, 0x3, 0x4}) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0f85403, &(0x7f0000000000)) 20:36:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="69a9c8995a77b690332f5736322ce06578e96229009c5cb344bf372e6c5669395123aa73464504257fe4e4898232277ae83e23da597c9e694e73de258c370127", 0x40}, {&(0x7f0000000040)="5e62150a1ea2dc6013f3bd63bd24f34483b95e1edef28ed17180f558ced65db28020cfd37ca164f2df1b4ceb", 0x2c}, {&(0x7f0000001300)="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", 0x1000}], 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x170}, 0x20008850) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "dfff7e0000000005000000fdffffffffffffff"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000180)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000340)={0x567, 0x6, 0x63, 0x23, 0x15, "784af1bc2c901ae667f15ed92c346f42af08a2"}) ioctl$SG_GET_NUM_WAITING(r3, 0x5386, &(0x7f0000000040)) r4 = dup2(r3, r2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x3d) 20:36:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x8000000}}) 20:36:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x80045432, 0x0) 20:36:15 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00'}, 0x10) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r1 = memfd_secret(0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xc605, 0x3, 0x4}) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0f85403, &(0x7f0000000000)) 20:36:15 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='kvm_set_spte_hva\x00', r0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) signalfd4(r2, &(0x7f0000000080)={[0x8]}, 0x8, 0x80000) 20:36:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x180, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x9000000}}) 20:36:16 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xa000000}}) 20:36:16 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async, rerun: 64) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0000) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='kvm_set_spte_hva\x00', r0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) signalfd4(r2, &(0x7f0000000080)={[0x8]}, 0x8, 0x80000) 20:36:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f00000001c0)=@v1={0x1000000, [{0x8, 0x1}]}, 0xc, 0x3) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000200)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r1, 0x0) dup3(r3, r1, 0x0) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) (async) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f00000001c0)=@v1={0x1000000, [{0x8, 0x1}]}, 0xc, 0x3) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000200)) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r1, 0x0) (async) dup3(r3, r1, 0x0) (async) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) 20:36:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)="3cff2b937394eb2e239413eae6942d4472fd6f77859c69bef4b4e13e9ca730d5388eb2f6adba9cddfe4def951038459884473a18036eb6081081f3a9549f") 20:36:16 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xb000000}}) 20:36:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="69a9c8995a77b690332f5736322ce06578e96229009c5cb344bf372e6c5669395123aa73464504257fe4e4898232277ae83e23da597c9e694e73de258c370127", 0x40}, {&(0x7f0000000040)="5e62150a1ea2dc6013f3bd63bd24f34483b95e1edef28ed17180f558ced65db28020cfd37ca164f2df1b4ceb", 0x2c}, {&(0x7f0000001300)="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", 0x1000}], 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x170}, 0x20008850) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "dfff7e0000000005000000fdffffffffffffff"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000180)) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000340)={0x567, 0x6, 0x63, 0x23, 0x15, "784af1bc2c901ae667f15ed92c346f42af08a2"}) (async) ioctl$SG_GET_NUM_WAITING(r3, 0x5386, &(0x7f0000000040)) r4 = dup2(r3, r2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x3d) 20:36:16 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='kvm_set_spte_hva\x00', r0}, 0x10) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) (rerun: 32) signalfd4(r2, &(0x7f0000000080)={[0x8]}, 0x8, 0x80000) 20:36:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)="3cff2b937394eb2e239413eae6942d4472fd6f77859c69bef4b4e13e9ca730d5388eb2f6adba9cddfe4def951038459884473a18036eb6081081f3a9549f") openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)="3cff2b937394eb2e239413eae6942d4472fd6f77859c69bef4b4e13e9ca730d5388eb2f6adba9cddfe4def951038459884473a18036eb6081081f3a9549f") (async) 20:36:16 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xc000000}}) 20:36:16 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) io_setup(0x4, &(0x7f0000000140)=0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) r6 = accept4$phonet_pipe(r2, 0x0, &(0x7f0000000300), 0x800) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x18}, 0xc) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) r10 = dup3(r0, r2, 0x0) io_submit(r3, 0x4, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x8, r2, &(0x7f00000001c0)="6ae3773305a78ec9abd912861db91e3bcaa6a44c877ae0c6b1ed8cb359bb0c8d43d6a8cbb45208078b0bb64c0c0bcb2fb8bf1daf0811682e41e08a90401dbc9784a205741fa73759eddb4f5791d4b6b63a9f5cb0fd286676d82e299daa9fd7db0891a1b45fda09706f19d51d524b4ce6decd642b42317d496b5695b20a49720a886bad8eb3b4abbd6141e5fb5fd7272b039c3845931f325ea5940e67d5fab241af86ebfd7caf3a48b208d4bf262a53b4cc5f228fdc9292bcd6ff5290fda6e83bf74d717154e00150fb", 0xc9, 0x5f652815, 0x0, 0x1, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x5308, r6, &(0x7f0000000340)="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", 0xff, 0x3f, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0xeb7, r7, &(0x7f00000004c0)="d1485039a92f38c152e15825d1c2d37ea5fd8992662f973be73965e103a3ad7d7a72945b33590496a2a4309f3b588b4fa93d40e4e48cdf6014f0eacb9098b4e3fc3515fa76baf880f024926c32dd89548cc32297c87e62367ad5427cb64cced77e016c07a8a02eb56a3b6f3beca84059e15d9f37faa136a40bd7f89dada3ab75e3b6671e2beab27564db15bb30ed1fc8be2066876c0695e45ac7551a5c8a797a462c78ba07091f3725b7c1c4bda6", 0xae, 0x9, 0x0, 0x1, r9}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f00000005c0)="5d600f0f627841f1df396bac7863586717d17eefcb8a910f812cf6ff235ed8ad056aa7b501179e2ed537ae96e2d052a0371dc6bcbe6a2bff48c8cda90071d37672d700ed4a8076470f834bd9807de2367d8542ea19514e96891bfa3b49113f8d54b22c5d7777079d3a00f3b835bcae8b305fca11886fcf90d6ce9d018c13b197914568b2dcc58817eea0508e4e1d45044b2fe22b743cbb7e84c59b59e6bbd11d9328e3f4d92ddd47742f7ba07959a7e046edad86bba288b8b94f207b315985bf99ed6ac859bac6f7200b865b9cdd0c5a21eab9c6dbc130694f89f385", 0xdc, 0xa6f, 0x0, 0x0, r10}]) 20:36:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x80045440, 0x0) 20:36:16 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xd000000}}) 20:36:16 executing program 2: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x10, 0x7800, 0x101, 0x4, {{0xa, 0x4, 0x1, 0x1f, 0x28, 0x67, 0x0, 0x5, 0x2f, 0x0, @loopback, @local, {[@timestamp={0x44, 0x14, 0x1f, 0x0, 0x8, [0x4, 0x1, 0x10001, 0x7]}]}}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xffffffffffffff3d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='siox_get_data\x00', r2}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0xc0f85403, &(0x7f0000000000)) 20:36:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)="3cff2b937394eb2e239413eae6942d4472fd6f77859c69bef4b4e13e9ca730d5388eb2f6adba9cddfe4def951038459884473a18036eb6081081f3a9549f") 20:36:16 executing program 2: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x10, 0x7800, 0x101, 0x4, {{0xa, 0x4, 0x1, 0x1f, 0x28, 0x67, 0x0, 0x5, 0x2f, 0x0, @loopback, @local, {[@timestamp={0x44, 0x14, 0x1f, 0x0, 0x8, [0x4, 0x1, 0x10001, 0x7]}]}}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xffffffffffffff3d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='siox_get_data\x00', r2}, 0x10) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0xc0f85403, &(0x7f0000000000)) 20:36:16 executing program 2: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x10, 0x7800, 0x101, 0x4, {{0xa, 0x4, 0x1, 0x1f, 0x28, 0x67, 0x0, 0x5, 0x2f, 0x0, @loopback, @local, {[@timestamp={0x44, 0x14, 0x1f, 0x0, 0x8, [0x4, 0x1, 0x10001, 0x7]}]}}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xffffffffffffff3d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='siox_get_data\x00', r2}, 0x10) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0xc0f85403, &(0x7f0000000000)) 20:36:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = timerfd_create(0x3, 0x800) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x6, 0x0, &(0x7f0000000000)=[r0, r0, r1, r0, r2]}, 0x5) ioctl$SG_BLKTRACESTART(r2, 0x1274, 0x0) 20:36:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="69a9c8995a77b690332f5736322ce06578e96229009c5cb344bf372e6c5669395123aa73464504257fe4e4898232277ae83e23da597c9e694e73de258c370127", 0x40}, {&(0x7f0000000040)="5e62150a1ea2dc6013f3bd63bd24f34483b95e1edef28ed17180f558ced65db28020cfd37ca164f2df1b4ceb", 0x2c}, {&(0x7f0000001300)="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", 0x1000}], 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x170}, 0x20008850) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "dfff7e0000000005000000fdffffffffffffff"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000180)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000340)={0x567, 0x6, 0x63, 0x23, 0x15, "784af1bc2c901ae667f15ed92c346f42af08a2"}) ioctl$SG_GET_NUM_WAITING(r3, 0x5386, &(0x7f0000000040)) r4 = dup2(r3, r2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x3d) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="69a9c8995a77b690332f5736322ce06578e96229009c5cb344bf372e6c5669395123aa73464504257fe4e4898232277ae83e23da597c9e694e73de258c370127", 0x40}, {&(0x7f0000000040)="5e62150a1ea2dc6013f3bd63bd24f34483b95e1edef28ed17180f558ced65db28020cfd37ca164f2df1b4ceb", 0x2c}, {&(0x7f0000001300)="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", 0x1000}], 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x170}, 0x20008850) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "dfff7e0000000005000000fdffffffffffffff"}) (async) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000180)) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000340)={0x567, 0x6, 0x63, 0x23, 0x15, "784af1bc2c901ae667f15ed92c346f42af08a2"}) (async) ioctl$SG_GET_NUM_WAITING(r3, 0x5386, &(0x7f0000000040)) (async) dup2(r3, r2) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x3d) (async) 20:36:16 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xe000000}}) 20:36:16 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) io_setup(0x4, &(0x7f0000000140)=0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) r6 = accept4$phonet_pipe(r2, 0x0, &(0x7f0000000300), 0x800) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x18}, 0xc) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) r10 = dup3(r0, r2, 0x0) io_submit(r3, 0x4, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x8, r2, &(0x7f00000001c0)="6ae3773305a78ec9abd912861db91e3bcaa6a44c877ae0c6b1ed8cb359bb0c8d43d6a8cbb45208078b0bb64c0c0bcb2fb8bf1daf0811682e41e08a90401dbc9784a205741fa73759eddb4f5791d4b6b63a9f5cb0fd286676d82e299daa9fd7db0891a1b45fda09706f19d51d524b4ce6decd642b42317d496b5695b20a49720a886bad8eb3b4abbd6141e5fb5fd7272b039c3845931f325ea5940e67d5fab241af86ebfd7caf3a48b208d4bf262a53b4cc5f228fdc9292bcd6ff5290fda6e83bf74d717154e00150fb", 0xc9, 0x5f652815, 0x0, 0x1, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x5308, r6, &(0x7f0000000340)="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", 0xff, 0x3f, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0xeb7, r7, &(0x7f00000004c0)="d1485039a92f38c152e15825d1c2d37ea5fd8992662f973be73965e103a3ad7d7a72945b33590496a2a4309f3b588b4fa93d40e4e48cdf6014f0eacb9098b4e3fc3515fa76baf880f024926c32dd89548cc32297c87e62367ad5427cb64cced77e016c07a8a02eb56a3b6f3beca84059e15d9f37faa136a40bd7f89dada3ab75e3b6671e2beab27564db15bb30ed1fc8be2066876c0695e45ac7551a5c8a797a462c78ba07091f3725b7c1c4bda6", 0xae, 0x9, 0x0, 0x1, r9}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f00000005c0)="5d600f0f627841f1df396bac7863586717d17eefcb8a910f812cf6ff235ed8ad056aa7b501179e2ed537ae96e2d052a0371dc6bcbe6a2bff48c8cda90071d37672d700ed4a8076470f834bd9807de2367d8542ea19514e96891bfa3b49113f8d54b22c5d7777079d3a00f3b835bcae8b305fca11886fcf90d6ce9d018c13b197914568b2dcc58817eea0508e4e1d45044b2fe22b743cbb7e84c59b59e6bbd11d9328e3f4d92ddd47742f7ba07959a7e046edad86bba288b8b94f207b315985bf99ed6ac859bac6f7200b865b9cdd0c5a21eab9c6dbc130694f89f385", 0xdc, 0xa6f, 0x0, 0x0, r10}]) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) io_setup(0x4, &(0x7f0000000140)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async) accept4$phonet_pipe(r2, 0x0, &(0x7f0000000300), 0x800) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x18}, 0xc) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) (async) dup3(r0, r2, 0x0) (async) io_submit(r3, 0x4, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x8, r2, &(0x7f00000001c0)="6ae3773305a78ec9abd912861db91e3bcaa6a44c877ae0c6b1ed8cb359bb0c8d43d6a8cbb45208078b0bb64c0c0bcb2fb8bf1daf0811682e41e08a90401dbc9784a205741fa73759eddb4f5791d4b6b63a9f5cb0fd286676d82e299daa9fd7db0891a1b45fda09706f19d51d524b4ce6decd642b42317d496b5695b20a49720a886bad8eb3b4abbd6141e5fb5fd7272b039c3845931f325ea5940e67d5fab241af86ebfd7caf3a48b208d4bf262a53b4cc5f228fdc9292bcd6ff5290fda6e83bf74d717154e00150fb", 0xc9, 0x5f652815, 0x0, 0x1, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x5308, r6, &(0x7f0000000340)="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", 0xff, 0x3f, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0xeb7, r7, &(0x7f00000004c0)="d1485039a92f38c152e15825d1c2d37ea5fd8992662f973be73965e103a3ad7d7a72945b33590496a2a4309f3b588b4fa93d40e4e48cdf6014f0eacb9098b4e3fc3515fa76baf880f024926c32dd89548cc32297c87e62367ad5427cb64cced77e016c07a8a02eb56a3b6f3beca84059e15d9f37faa136a40bd7f89dada3ab75e3b6671e2beab27564db15bb30ed1fc8be2066876c0695e45ac7551a5c8a797a462c78ba07091f3725b7c1c4bda6", 0xae, 0x9, 0x0, 0x1, r9}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f00000005c0)="5d600f0f627841f1df396bac7863586717d17eefcb8a910f812cf6ff235ed8ad056aa7b501179e2ed537ae96e2d052a0371dc6bcbe6a2bff48c8cda90071d37672d700ed4a8076470f834bd9807de2367d8542ea19514e96891bfa3b49113f8d54b22c5d7777079d3a00f3b835bcae8b305fca11886fcf90d6ce9d018c13b197914568b2dcc58817eea0508e4e1d45044b2fe22b743cbb7e84c59b59e6bbd11d9328e3f4d92ddd47742f7ba07959a7e046edad86bba288b8b94f207b315985bf99ed6ac859bac6f7200b865b9cdd0c5a21eab9c6dbc130694f89f385", 0xdc, 0xa6f, 0x0, 0x0, r10}]) (async) 20:36:16 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto(r1, &(0x7f0000000040)="3fb489c17960713c82595ddd103ff0fbe0cd8e191c002525d77194110d63574d36e865168e980c5a38bf1a10969a47f884bc2a6f1ad65e917ecff3f64a1caff36fd6b268214e49529df66c4ec0ae24ed7b00ef12f469ed9804a57c0f1505efb4f9b9dbd422e1574d309de269c91a732cc42e6c8dd9182c31c1b88d875d622f80", 0x80, 0x20000080, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x80) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) 20:36:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r1 = timerfd_create(0x3, 0x800) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x6, 0x0, &(0x7f0000000000)=[r0, r0, r1, r0, r2]}, 0x5) ioctl$SG_BLKTRACESTART(r2, 0x1274, 0x0) [ 590.278601][ T23] audit: type=1400 audit(1668976576.917:447): avc: denied { write } for pid=20870 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 20:36:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x80086601, 0x0) 20:36:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto(r1, &(0x7f0000000040)="3fb489c17960713c82595ddd103ff0fbe0cd8e191c002525d77194110d63574d36e865168e980c5a38bf1a10969a47f884bc2a6f1ad65e917ecff3f64a1caff36fd6b268214e49529df66c4ec0ae24ed7b00ef12f469ed9804a57c0f1505efb4f9b9dbd422e1574d309de269c91a732cc42e6c8dd9182c31c1b88d875d622f80", 0x80, 0x20000080, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x80) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) 20:36:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = timerfd_create(0x3, 0x800) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x6, 0x0, &(0x7f0000000000)=[r0, r0, r1, r0, r2]}, 0x5) ioctl$SG_BLKTRACESTART(r2, 0x1274, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) timerfd_create(0x3, 0x800) (async) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x6, 0x0, &(0x7f0000000000)=[r0, r0, r1, r0, r2]}, 0x5) (async) ioctl$SG_BLKTRACESTART(r2, 0x1274, 0x0) (async) 20:36:17 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x10000000}}) 20:36:17 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) (async, rerun: 32) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async, rerun: 32) io_setup(0x4, &(0x7f0000000140)=0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) r6 = accept4$phonet_pipe(r2, 0x0, &(0x7f0000000300), 0x800) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x18}, 0xc) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) r10 = dup3(r0, r2, 0x0) io_submit(r3, 0x4, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x8, r2, &(0x7f00000001c0)="6ae3773305a78ec9abd912861db91e3bcaa6a44c877ae0c6b1ed8cb359bb0c8d43d6a8cbb45208078b0bb64c0c0bcb2fb8bf1daf0811682e41e08a90401dbc9784a205741fa73759eddb4f5791d4b6b63a9f5cb0fd286676d82e299daa9fd7db0891a1b45fda09706f19d51d524b4ce6decd642b42317d496b5695b20a49720a886bad8eb3b4abbd6141e5fb5fd7272b039c3845931f325ea5940e67d5fab241af86ebfd7caf3a48b208d4bf262a53b4cc5f228fdc9292bcd6ff5290fda6e83bf74d717154e00150fb", 0xc9, 0x5f652815, 0x0, 0x1, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x5308, r6, &(0x7f0000000340)="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", 0xff, 0x3f, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0xeb7, r7, &(0x7f00000004c0)="d1485039a92f38c152e15825d1c2d37ea5fd8992662f973be73965e103a3ad7d7a72945b33590496a2a4309f3b588b4fa93d40e4e48cdf6014f0eacb9098b4e3fc3515fa76baf880f024926c32dd89548cc32297c87e62367ad5427cb64cced77e016c07a8a02eb56a3b6f3beca84059e15d9f37faa136a40bd7f89dada3ab75e3b6671e2beab27564db15bb30ed1fc8be2066876c0695e45ac7551a5c8a797a462c78ba07091f3725b7c1c4bda6", 0xae, 0x9, 0x0, 0x1, r9}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f00000005c0)="5d600f0f627841f1df396bac7863586717d17eefcb8a910f812cf6ff235ed8ad056aa7b501179e2ed537ae96e2d052a0371dc6bcbe6a2bff48c8cda90071d37672d700ed4a8076470f834bd9807de2367d8542ea19514e96891bfa3b49113f8d54b22c5d7777079d3a00f3b835bcae8b305fca11886fcf90d6ce9d018c13b197914568b2dcc58817eea0508e4e1d45044b2fe22b743cbb7e84c59b59e6bbd11d9328e3f4d92ddd47742f7ba07959a7e046edad86bba288b8b94f207b315985bf99ed6ac859bac6f7200b865b9cdd0c5a21eab9c6dbc130694f89f385", 0xdc, 0xa6f, 0x0, 0x0, r10}]) 20:36:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) socket$rxrpc(0x21, 0x2, 0x2) dup3(0xffffffffffffffff, r2, 0x0) syz_open_pts(r1, 0x4200) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto(r1, &(0x7f0000000040)="3fb489c17960713c82595ddd103ff0fbe0cd8e191c002525d77194110d63574d36e865168e980c5a38bf1a10969a47f884bc2a6f1ad65e917ecff3f64a1caff36fd6b268214e49529df66c4ec0ae24ed7b00ef12f469ed9804a57c0f1505efb4f9b9dbd422e1574d309de269c91a732cc42e6c8dd9182c31c1b88d875d622f80", 0x80, 0x20000080, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x80) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) 20:36:17 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x11000000}}) 20:36:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) r6 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x80800, 0x101) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1f}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, @alu={0x7, 0x0, 0x5, 0x4, 0x4, 0x50, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x0, 0x3, 0x9, 0x7, 0x100, 0xfffffffffffffff0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x6}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x2, &(0x7f0000000100)=""/2, 0x41000, 0x10, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000300)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x10, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r3, r5, r6, r7]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0xc0f85403, &(0x7f0000000000)) 20:36:17 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000140)) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000300), 0x3, 0x28000) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000340)) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={0xffffffffffffffff, r1}, 0xc) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) r4 = inotify_init() write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x13}) r6 = syz_open_pts(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000001c0)) r7 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r7, 0x5386, &(0x7f0000000040)) ioctl$int_out(r7, 0x5460, &(0x7f0000000200)) dup3(r6, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:17 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x12000000}}) 20:36:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x80087601, 0x0) 20:36:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) 20:36:17 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x48000000}}) 20:36:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) r6 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x80800, 0x101) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1f}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, @alu={0x7, 0x0, 0x5, 0x4, 0x4, 0x50, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x0, 0x3, 0x9, 0x7, 0x100, 0xfffffffffffffff0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x6}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x2, &(0x7f0000000100)=""/2, 0x41000, 0x10, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000300)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x10, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r3, r5, r6, r7]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0xc0f85403, &(0x7f0000000000)) 20:36:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) (async) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) socket$rxrpc(0x21, 0x2, 0x2) (async) dup3(0xffffffffffffffff, r2, 0x0) syz_open_pts(r1, 0x4200) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:17 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async, rerun: 32) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (rerun: 32) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000140)) (async, rerun: 32) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$sg(&(0x7f0000000300), 0x3, 0x28000) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000340)) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) r4 = inotify_init() write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x13}) (async, rerun: 32) r6 = syz_open_pts(r0, 0x0) (async, rerun: 32) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000001c0)) (async) r7 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r7, 0x5386, &(0x7f0000000040)) ioctl$int_out(r7, 0x5460, &(0x7f0000000200)) dup3(r6, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) 20:36:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async, rerun: 32) r6 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x80800, 0x101) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1f}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, @alu={0x7, 0x0, 0x5, 0x4, 0x4, 0x50, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x0, 0x3, 0x9, 0x7, 0x100, 0xfffffffffffffff0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x6}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x2, &(0x7f0000000100)=""/2, 0x41000, 0x10, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000300)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x10, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r3, r5, r6, r7]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0xc0f85403, &(0x7f0000000000)) 20:36:17 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x4c000000}}) 20:36:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) socket$rxrpc(0x21, 0x2, 0x2) dup3(0xffffffffffffffff, r2, 0x0) syz_open_pts(r1, 0x4200) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) dup3(0xffffffffffffffff, r2, 0x0) (async) syz_open_pts(r1, 0x4200) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 20:36:17 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x68000000}}) 20:36:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r3 = open(&(0x7f00000004c0)='./file0\x00', 0x84002, 0x80) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x6, &(0x7f00000003c0)=@raw=[@jmp={0x5, 0x0, 0x0, 0x6, 0x8, 0x6, 0xfffffffffffffffc}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @jmp={0x5, 0x0, 0x8, 0x8, 0x9, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @jmp={0x5, 0x0, 0x0, 0x2, 0x9, 0xfffffffffffffff8, 0xffffffffffffffff}], &(0x7f0000000400)='GPL\x00', 0x81, 0x0, 0x0, 0x40f00, 0x2, '\x00', r2, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x6, 0x3, 0x1}, 0x10, 0x0, r3, 0x0, &(0x7f0000000540)=[r5, r6, r7, 0xffffffffffffffff]}, 0x80) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="d82183d85ca6508479988c2b21c9920c55e5ae66c9374ac37b569ae769f0d6f532edb4025763904761eeab2053a8ea6131f3bcb6202ab52d365203081b7fc73ce2ff40698ac6d4", 0x47}, {&(0x7f00000000c0)="3f2a5b0b539d2a40f65a2378c5029e6d1ea1283247de1067706bc7a5eed478edede78b2a74cde3005325d2385a2673927617e4c5506d7ea244ff4d0c49854c4c171f4b1c6a0594b563955c99bb0a9e76f324da6ae21da6e667e0ec4ff03f7ae3cedfafc83e1e20a57dd6", 0x6a}, {&(0x7f0000000140)="77910104157595ec46cc02c4b237cccaf0c4f243580fa99ea5c76b050b9ed5d5282ca869624cc0c45571ae84bfcf869e8eecb1d603820757", 0x38}], 0x3, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xf8e1}}, @mark={{0x14, 0x1, 0x24, 0x401}}], 0x78}, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0xc0f85403, &(0x7f0000000000)) 20:36:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x801c581f, 0x0) 20:36:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:36:17 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000140)) (async) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000300), 0x3, 0x28000) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000340)) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) r4 = inotify_init() write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x13}) (async) r6 = syz_open_pts(r0, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000001c0)) (async) r7 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r7, 0x5386, &(0x7f0000000040)) (async) ioctl$int_out(r7, 0x5460, &(0x7f0000000200)) (async) dup3(r6, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:17 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x6c000000}}) 20:36:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r3 = open(&(0x7f00000004c0)='./file0\x00', 0x84002, 0x80) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x6, &(0x7f00000003c0)=@raw=[@jmp={0x5, 0x0, 0x0, 0x6, 0x8, 0x6, 0xfffffffffffffffc}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @jmp={0x5, 0x0, 0x8, 0x8, 0x9, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @jmp={0x5, 0x0, 0x0, 0x2, 0x9, 0xfffffffffffffff8, 0xffffffffffffffff}], &(0x7f0000000400)='GPL\x00', 0x81, 0x0, 0x0, 0x40f00, 0x2, '\x00', r2, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x6, 0x3, 0x1}, 0x10, 0x0, r3, 0x0, &(0x7f0000000540)=[r5, r6, r7, 0xffffffffffffffff]}, 0x80) (async) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="d82183d85ca6508479988c2b21c9920c55e5ae66c9374ac37b569ae769f0d6f532edb4025763904761eeab2053a8ea6131f3bcb6202ab52d365203081b7fc73ce2ff40698ac6d4", 0x47}, {&(0x7f00000000c0)="3f2a5b0b539d2a40f65a2378c5029e6d1ea1283247de1067706bc7a5eed478edede78b2a74cde3005325d2385a2673927617e4c5506d7ea244ff4d0c49854c4c171f4b1c6a0594b563955c99bb0a9e76f324da6ae21da6e667e0ec4ff03f7ae3cedfafc83e1e20a57dd6", 0x6a}, {&(0x7f0000000140)="77910104157595ec46cc02c4b237cccaf0c4f243580fa99ea5c76b050b9ed5d5282ca869624cc0c45571ae84bfcf869e8eecb1d603820757", 0x38}], 0x3, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xf8e1}}, @mark={{0x14, 0x1, 0x24, 0x401}}], 0x78}, 0x4) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0xc0f85403, &(0x7f0000000000)) 20:36:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x15, 0x8, 0x1b, &(0x7f0000000180)="171508e45deca10aa7c634fe5670bc01c6b2cd72e6263ae98e960b0b82fd8e60f83bdf69c575328cb4951e7eddff6c9ddd1e35a9601208e0d68bfb3a1bcb7ae48030a9756c1dafe412cf233325500394d68b4eeff3bc302cf5cc198a7aebc3f76aa52781448bb47d126cc60fb4fc4941b211a3c8e4b54adfd8e3708a68de27d728db0ee18949fdd16f48f38b5ab639f4d1166baddbbf8d3205e783c941d54906ee3c45692fc1abe29a9c8c49c3c6e9f17cc147dcfcf9c11224da5fd759d7fab48bf1e9e90ac1850a6fb420a0cc37fdbee655ff9eace8cc249dc729a94d68b63884c8ac281c6a47493e770d0d9158f42134b8ed3fd5f5f48a1ef4d4f4783869828c90e40bdc82f065802eb0a981c22a24154a2391dc1df2323d066f445589fab9a89671c3a7f95d7f50bfa4aeead2506bf03bbdadca9bd259de8141715cb818435f0e1a9b39bfa61751d7405461f37a374be8be1f6cc757164a7d165df7cdbaf7804166ce4dd9be363897fb97301f31c50a79bb88c811a4c80857864646e969ea417e1b4637bf8df6b830f19f92e6d0f4d1703e60a6155c903771c2ad7faf9303d09208d81c7166b9bc4d54740a4729a7c76d77f56e9622c7e3490f3095988732a1956f765c99116916aa9b7d0aa42f28ae94674a02615b0309194d7ab106f01fa602c8b60123ef04dd7d25f12e1f808a42221834c5ebb1e70cb191ce380f7398ef24247c69311c4696dfa184ce7c3d32d18bb06831bc8e26cc0f3ca9e9340a19509d16cf39bf126ad28c51af727266f0ba475c0dfef19d7bb5d836b1f64d86aa32f9e1cc47240b992e9c4e63f9e5f09ed53237d68bf1d2b23ac48cba50cdef924c54cc1b0b0dd2ffdc7e7c6dcdb4cf81a94db34df587c34ccd43a37d95be802900eae280fefb9e595d26d56446b287470977287b5940a06481b36b0d6a0ccb50257ae5ab7d56fa6e5f5ba4e7fe83446a8e1f82fc954d9d5b86d5d8cf5fce3f944ceeeebc8022133433aa59c42cded93944455e532ca779e94d8634035c327c5704bc76f0940032ca4cfca5a831eafac13511b0a4758e55f5ec614766c778256fc7888c47f570ce4b8498fb55942200f05a360120752a434121f6b6fb5cc930c823ba75ba2ab6c6fedbedb008e0e6f2f16f4f3bc2b806e4b031fb369e1829abebb967707977463bdcf2c2e5c80aea6fba622038b7c23caf2a8e0391c79c62687c2eb93d13587c5652e1ea6d0e7c7af205dd6fe5a939fd3f10064cc3d1f6c86d77181a115b465207130b72f28e50e52a7164bd98ad1bd1547cda9e97311c5ef6e6552312623bff57f13bc107cc00e5431639e3995173d56c44ec76b89cb5b87ac4abf5edcfd55384d6f3816d09ef9093490e0777b7ce25ea1b8bb9f19fad96c81bb75f8b9613b99d311a3f26c7ea2d274dc8421d1d06f091693c0faa2558c4eecb"}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)) r5 = syz_open_pts(r4, 0x0) dup3(r5, r4, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000080)) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r6 = syz_open_pts(r3, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x76, 0x9, 0x5, 0x20, 0x0, 0x3, 0x10000, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x224, 0x1}, 0x400, 0x3, 0x9, 0x8, 0x3, 0x6, 0x1000, 0x0, 0x400, 0x0, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) dup3(r7, r3, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0xfffffffc, 0x9, 0x0, 0x5, 0xa}) socket(0x1a, 0x1, 0x4a9) r8 = syz_open_pts(r1, 0x0) dup3(r8, r1, 0x0) syz_open_pts(r8, 0x140000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r9 = syz_open_pts(r0, 0x0) dup3(r9, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r3 = open(&(0x7f00000004c0)='./file0\x00', 0x84002, 0x80) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x6, &(0x7f00000003c0)=@raw=[@jmp={0x5, 0x0, 0x0, 0x6, 0x8, 0x6, 0xfffffffffffffffc}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @jmp={0x5, 0x0, 0x8, 0x8, 0x9, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @jmp={0x5, 0x0, 0x0, 0x2, 0x9, 0xfffffffffffffff8, 0xffffffffffffffff}], &(0x7f0000000400)='GPL\x00', 0x81, 0x0, 0x0, 0x40f00, 0x2, '\x00', r2, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x6, 0x3, 0x1}, 0x10, 0x0, r3, 0x0, &(0x7f0000000540)=[r5, r6, r7, 0xffffffffffffffff]}, 0x80) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="d82183d85ca6508479988c2b21c9920c55e5ae66c9374ac37b569ae769f0d6f532edb4025763904761eeab2053a8ea6131f3bcb6202ab52d365203081b7fc73ce2ff40698ac6d4", 0x47}, {&(0x7f00000000c0)="3f2a5b0b539d2a40f65a2378c5029e6d1ea1283247de1067706bc7a5eed478edede78b2a74cde3005325d2385a2673927617e4c5506d7ea244ff4d0c49854c4c171f4b1c6a0594b563955c99bb0a9e76f324da6ae21da6e667e0ec4ff03f7ae3cedfafc83e1e20a57dd6", 0x6a}, {&(0x7f0000000140)="77910104157595ec46cc02c4b237cccaf0c4f243580fa99ea5c76b050b9ed5d5282ca869624cc0c45571ae84bfcf869e8eecb1d603820757", 0x38}], 0x3, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xf8e1}}, @mark={{0x14, 0x1, 0x24, 0x401}}], 0x78}, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) open(&(0x7f00000004c0)='./file0\x00', 0x84002, 0x80) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x6, &(0x7f00000003c0)=@raw=[@jmp={0x5, 0x0, 0x0, 0x6, 0x8, 0x6, 0xfffffffffffffffc}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @jmp={0x5, 0x0, 0x8, 0x8, 0x9, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @jmp={0x5, 0x0, 0x0, 0x2, 0x9, 0xfffffffffffffff8, 0xffffffffffffffff}], &(0x7f0000000400)='GPL\x00', 0x81, 0x0, 0x0, 0x40f00, 0x2, '\x00', r2, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x6, 0x3, 0x1}, 0x10, 0x0, r3, 0x0, &(0x7f0000000540)=[r5, r6, r7, 0xffffffffffffffff]}, 0x80) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="d82183d85ca6508479988c2b21c9920c55e5ae66c9374ac37b569ae769f0d6f532edb4025763904761eeab2053a8ea6131f3bcb6202ab52d365203081b7fc73ce2ff40698ac6d4", 0x47}, {&(0x7f00000000c0)="3f2a5b0b539d2a40f65a2378c5029e6d1ea1283247de1067706bc7a5eed478edede78b2a74cde3005325d2385a2673927617e4c5506d7ea244ff4d0c49854c4c171f4b1c6a0594b563955c99bb0a9e76f324da6ae21da6e667e0ec4ff03f7ae3cedfafc83e1e20a57dd6", 0x6a}, {&(0x7f0000000140)="77910104157595ec46cc02c4b237cccaf0c4f243580fa99ea5c76b050b9ed5d5282ca869624cc0c45571ae84bfcf869e8eecb1d603820757", 0x38}], 0x3, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xf8e1}}, @mark={{0x14, 0x1, 0x24, 0x401}}], 0x78}, 0x4) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:17 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x7, 0x6, 0x2, 0x8, 0x11, "0492eaf326ce806c26f0992932fcd353e0b752"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) dup3(0xffffffffffffffff, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x8000000000000001, 0x80) syz_open_pts(r2, 0x400040) 20:36:17 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x74000000}}) 20:36:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:36:17 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x7a000000}}) 20:36:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x40) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000440), 0xff, 0x2) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="18670000060000000000000004000f001417d4f9bd50fdff2ed6c26d544de96e1869283f0de9c27504985666a4f7e02ed1faacab4ce3600e480eac3effd82a7a955c713aaf73c05487c441e776f763db4727a577aa5269a6568a3631101d"], &(0x7f0000000080)='syzkaller\x00', 0x40, 0x9c, &(0x7f00000000c0)=""/156, 0x41000, 0x3, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x10, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, r5, r6, 0xffffffffffffffff, r7, r9]}, 0x80) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r10, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0xc0f85403, &(0x7f0000000000)) 20:36:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0xc0045878, 0x0) 20:36:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:36:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:18 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x40) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000440), 0xff, 0x2) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="18670000060000000000000004000f001417d4f9bd50fdff2ed6c26d544de96e1869283f0de9c27504985666a4f7e02ed1faacab4ce3600e480eac3effd82a7a955c713aaf73c05487c441e776f763db4727a577aa5269a6568a3631101d"], &(0x7f0000000080)='syzkaller\x00', 0x40, 0x9c, &(0x7f00000000c0)=""/156, 0x41000, 0x3, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x10, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, r5, r6, 0xffffffffffffffff, r7, r9]}, 0x80) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r10, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) (async) creat(&(0x7f00000003c0)='./file0\x00', 0x40) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000440), 0xff, 0x2) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="18670000060000000000000004000f001417d4f9bd50fdff2ed6c26d544de96e1869283f0de9c27504985666a4f7e02ed1faacab4ce3600e480eac3effd82a7a955c713aaf73c05487c441e776f763db4727a577aa5269a6568a3631101d"], &(0x7f0000000080)='syzkaller\x00', 0x40, 0x9c, &(0x7f00000000c0)=""/156, 0x41000, 0x3, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x10, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, r5, r6, 0xffffffffffffffff, r7, r9]}, 0x80) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r10, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x2}}) 20:36:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x15, 0x8, 0x1b, &(0x7f0000000180)="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"}) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)) r5 = syz_open_pts(r4, 0x0) dup3(r5, r4, 0x0) (async) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000080)) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r6 = syz_open_pts(r3, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x76, 0x9, 0x5, 0x20, 0x0, 0x3, 0x10000, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x224, 0x1}, 0x400, 0x3, 0x9, 0x8, 0x3, 0x6, 0x1000, 0x0, 0x400, 0x0, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) dup3(r7, r3, 0x0) (async) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0xfffffffc, 0x9, 0x0, 0x5, 0xa}) (async) socket(0x1a, 0x1, 0x4a9) r8 = syz_open_pts(r1, 0x0) dup3(r8, r1, 0x0) (async) syz_open_pts(r8, 0x140000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r9 = syz_open_pts(r0, 0x0) dup3(r9, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:18 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x40) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000440), 0xff, 0x2) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="18670000060000000000000004000f001417d4f9bd50fdff2ed6c26d544de96e1869283f0de9c27504985666a4f7e02ed1faacab4ce3600e480eac3effd82a7a955c713aaf73c05487c441e776f763db4727a577aa5269a6568a3631101d"], &(0x7f0000000080)='syzkaller\x00', 0x40, 0x9c, &(0x7f00000000c0)=""/156, 0x41000, 0x3, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x10, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, r5, r6, 0xffffffffffffffff, r7, r9]}, 0x80) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r10, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) (async) creat(&(0x7f00000003c0)='./file0\x00', 0x40) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000440), 0xff, 0x2) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="18670000060000000000000004000f001417d4f9bd50fdff2ed6c26d544de96e1869283f0de9c27504985666a4f7e02ed1faacab4ce3600e480eac3effd82a7a955c713aaf73c05487c441e776f763db4727a577aa5269a6568a3631101d"], &(0x7f0000000080)='syzkaller\x00', 0x40, 0x9c, &(0x7f00000000c0)=""/156, 0x41000, 0x3, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x10, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, r5, r6, 0xffffffffffffffff, r7, r9]}, 0x80) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r10, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:18 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x7, 0x6, 0x2, 0x8, 0x11, "0492eaf326ce806c26f0992932fcd353e0b752"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) dup3(0xffffffffffffffff, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x8000000000000001, 0x80) syz_open_pts(r2, 0x400040) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x7, 0x6, 0x2, 0x8, 0x11, "0492eaf326ce806c26f0992932fcd353e0b752"}) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) (async) dup3(0xffffffffffffffff, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x8000000000000001, 0x80) (async) syz_open_pts(r2, 0x400040) (async) 20:36:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x115180, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x3, 0x1ff, 0x800, 0x8, 0x18, "8784b2e85cf734a9bd879ea8f97b595ce9004a"}) r4 = syz_open_pts(r1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r6 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r6, 0x5386, &(0x7f0000000040)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000092c0)={0x0, 0x0, &(0x7f0000009280)={&(0x7f0000000340)=@newtaction={0xec4, 0x30, 0x1, 0x0, 0x0, {}, [{0xe4, 0x1, [@m_ct={0xe0, 0x0, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8}, @TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "32a30c2b043729f75a58ca4f0c0a463e"}]}, {0x81, 0x6, "c8d0d0ea254611b690509379513a25de74771d9a72f755ed494a081038b726a0c2a98fbd62ee4dc67cda7a631611194cb34e6201f95584c0e4b0cae5fc2c0efa2714aeacf5416e7895bc21bd3573bc8c1a8433e63ab0aadf0175d920b95af1949afb7c9be3dc4337d5dec599387786221ec1142a93a55954b69605e0ff"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0xd84, 0x1, [@m_ife={0xe8, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}]}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}]}, @TCA_IFE_TYPE={0x6}]}, {0x45, 0x6, "d0b364a585b18e8bfcc02ca78130e66382274ad7eb55c980b55a3ba84d8259ed1c418c756375e32982221cc07141724a673645e6d4f6f8203796dd649b6b88127a"}, {0xc}, {0xc}}}, @m_ife={0x13c, 0x0, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x34, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xdd, 0x6, "b337d384910052ecb7d10b612c94e02ae047a83076947b581a32928781a585c74f78bc4c59e5501027fbf9b00af62695c326e61029353b0fc123a38cda9516fdb690a88141bbb71a47daf1bacdf25e4b49a40ba0834fcbcbc2451c4d53a5f9bb56c5d8f945e449e3aab7caff624ce104a9f9afc6d149d851c3aaa65c9c7fd7835bbffdb59947e0297ab804e861c261c879823a8f5151796019a7a1a3fb2e32a1c5a3c4d9714cf8bd95671c2692aea166a8b83e7e7f039efa30120fae8bb1f080a7e48d199edde9e4cbbe1add2bcbc70e7bdcac72813075b397"}, {0xc}, {0xc}}}, @m_nat={0xac, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}, @multicast1, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @broadcast, @multicast2}}]}, {0x9, 0x6, "48cb0fb05c"}, {0xc}, {0xc}}}, @m_mirred={0xab0, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xa81, 0x6, "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"}, {0xc}, {0xc}}}]}, {0x48, 0x1, [@m_vlan={0x44, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x15, 0x6, "e12bc804bd0ae56b08f5efc43830705a99"}, {0xc}, {0xc}}}]}]}, 0xec4}}, 0x20000840) r8 = syz_open_pts(r5, 0x0) dup3(r8, r5, 0x0) readv(r5, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) syz_open_pts(r5, 0x2800) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)={0x3, 0xc8, 0x2, 0xfff, 0x6, [{0x7fffffff, 0x0, 0x9, '\x00', 0x2000}, {0x5, 0x3596, 0x6, '\x00', 0x4}, {0x20, 0x81, 0x4f6, '\x00', 0x1600}, {0x9, 0x401, 0xff, '\x00', 0x8}, {0x2, 0x7, 0x5, '\x00', 0x880}, {0x4, 0x7, 0x2, '\x00', 0x2a0b}]}) dup3(r4, r1, 0x0) r9 = syz_open_pts(0xffffffffffffffff, 0x22182) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000140)=0x18) syz_open_pts(r4, 0x200000) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x3}}) 20:36:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0xc0045878, 0x0) 20:36:18 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095000057ed67525e"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='cachefiles_ondemand_fd_release\x00'}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x4}}) 20:36:18 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095000057ed67525e"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='cachefiles_ondemand_fd_release\x00'}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:18 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095000057ed67525e"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='cachefiles_ondemand_fd_release\x00'}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095000057ed67525e"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='cachefiles_ondemand_fd_release\x00'}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:18 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x7, 0x6, 0x2, 0x8, 0x11, "0492eaf326ce806c26f0992932fcd353e0b752"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) dup3(0xffffffffffffffff, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x8000000000000001, 0x80) syz_open_pts(r2, 0x400040) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x7, 0x6, 0x2, 0x8, 0x11, "0492eaf326ce806c26f0992932fcd353e0b752"}) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) (async) dup3(0xffffffffffffffff, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x8000000000000001, 0x80) (async) syz_open_pts(r2, 0x400040) (async) 20:36:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x5}}) 20:36:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x15, 0x8, 0x1b, &(0x7f0000000180)="171508e45deca10aa7c634fe5670bc01c6b2cd72e6263ae98e960b0b82fd8e60f83bdf69c575328cb4951e7eddff6c9ddd1e35a9601208e0d68bfb3a1bcb7ae48030a9756c1dafe412cf233325500394d68b4eeff3bc302cf5cc198a7aebc3f76aa52781448bb47d126cc60fb4fc4941b211a3c8e4b54adfd8e3708a68de27d728db0ee18949fdd16f48f38b5ab639f4d1166baddbbf8d3205e783c941d54906ee3c45692fc1abe29a9c8c49c3c6e9f17cc147dcfcf9c11224da5fd759d7fab48bf1e9e90ac1850a6fb420a0cc37fdbee655ff9eace8cc249dc729a94d68b63884c8ac281c6a47493e770d0d9158f42134b8ed3fd5f5f48a1ef4d4f4783869828c90e40bdc82f065802eb0a981c22a24154a2391dc1df2323d066f445589fab9a89671c3a7f95d7f50bfa4aeead2506bf03bbdadca9bd259de8141715cb818435f0e1a9b39bfa61751d7405461f37a374be8be1f6cc757164a7d165df7cdbaf7804166ce4dd9be363897fb97301f31c50a79bb88c811a4c80857864646e969ea417e1b4637bf8df6b830f19f92e6d0f4d1703e60a6155c903771c2ad7faf9303d09208d81c7166b9bc4d54740a4729a7c76d77f56e9622c7e3490f3095988732a1956f765c99116916aa9b7d0aa42f28ae94674a02615b0309194d7ab106f01fa602c8b60123ef04dd7d25f12e1f808a42221834c5ebb1e70cb191ce380f7398ef24247c69311c4696dfa184ce7c3d32d18bb06831bc8e26cc0f3ca9e9340a19509d16cf39bf126ad28c51af727266f0ba475c0dfef19d7bb5d836b1f64d86aa32f9e1cc47240b992e9c4e63f9e5f09ed53237d68bf1d2b23ac48cba50cdef924c54cc1b0b0dd2ffdc7e7c6dcdb4cf81a94db34df587c34ccd43a37d95be802900eae280fefb9e595d26d56446b287470977287b5940a06481b36b0d6a0ccb50257ae5ab7d56fa6e5f5ba4e7fe83446a8e1f82fc954d9d5b86d5d8cf5fce3f944ceeeebc8022133433aa59c42cded93944455e532ca779e94d8634035c327c5704bc76f0940032ca4cfca5a831eafac13511b0a4758e55f5ec614766c778256fc7888c47f570ce4b8498fb55942200f05a360120752a434121f6b6fb5cc930c823ba75ba2ab6c6fedbedb008e0e6f2f16f4f3bc2b806e4b031fb369e1829abebb967707977463bdcf2c2e5c80aea6fba622038b7c23caf2a8e0391c79c62687c2eb93d13587c5652e1ea6d0e7c7af205dd6fe5a939fd3f10064cc3d1f6c86d77181a115b465207130b72f28e50e52a7164bd98ad1bd1547cda9e97311c5ef6e6552312623bff57f13bc107cc00e5431639e3995173d56c44ec76b89cb5b87ac4abf5edcfd55384d6f3816d09ef9093490e0777b7ce25ea1b8bb9f19fad96c81bb75f8b9613b99d311a3f26c7ea2d274dc8421d1d06f091693c0faa2558c4eecb"}) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)) (async) r5 = syz_open_pts(r4, 0x0) dup3(r5, r4, 0x0) (async) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000080)) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) (async) r6 = syz_open_pts(r3, 0x0) (async) r7 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x76, 0x9, 0x5, 0x20, 0x0, 0x3, 0x10000, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x224, 0x1}, 0x400, 0x3, 0x9, 0x8, 0x3, 0x6, 0x1000, 0x0, 0x400, 0x0, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) dup3(r7, r3, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0xfffffffc, 0x9, 0x0, 0x5, 0xa}) socket(0x1a, 0x1, 0x4a9) (async) r8 = syz_open_pts(r1, 0x0) dup3(r8, r1, 0x0) (async) syz_open_pts(r8, 0x140000) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r9 = syz_open_pts(r0, 0x0) dup3(r9, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:18 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ipi_raise\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000740)='!emory.current\x00C\nV\xa21\xb4\xb2\xb3SBB\x0fA\xa6\xe3`V\x82\'\xe7\x8d\x8a\xe2\xd1\xc7\xc5\xa3J') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000700)=0x21) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x1, 0x20, 0x9, 0x2, {{0x41, 0x4, 0x1, 0x5, 0x104, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x31}, {[@timestamp_prespec={0x44, 0x1c, 0xb2, 0x3, 0x4, [{@empty, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x1}, {@empty, 0xfffffffa}]}, @timestamp={0x44, 0x10, 0x45, 0x0, 0x9, [0x3, 0x4, 0x1]}, @timestamp={0x44, 0x10, 0xa2, 0x0, 0xb, [0x6b01, 0xfffffffe, 0xffffffb3]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x2c, 0xfc, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0x200}, {@rand_addr=0x64010100, 0x40000}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x6cdd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@broadcast, 0xfff}]}, @cipso={0x86, 0x39, 0x3, [{0x0, 0xf, "dcd1205242c313663254f193c5"}, {0x0, 0x3, '#'}, {0x5, 0xd, "0a79079891a4622915621a"}, {0x5, 0xe, "1cf8af95ac1308294bfe1bb1"}, {0x0, 0x6, "8d47b4fc"}]}, @generic={0x94, 0x8, "b146f0844e44"}, @timestamp_prespec={0x44, 0x3c, 0x46, 0x3, 0x3, [{@remote, 0x7c}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x6}, {@local, 0x1}, {@multicast2, 0x30805c4}, {@rand_addr=0x64010100, 0xac}, {@remote, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='sys_enter\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc27, 0x0, 0x0, 0x0, 0x7}, [@alu={0x4, 0x1, 0xd, 0xa, 0x6, 0x30, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0x77, &(0x7f0000000380)=""/119, 0x40f00, 0x1a, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x4, 0x7, 0x8}, 0x10}, 0x80) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)) 20:36:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x6}}) 20:36:19 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ipi_raise\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000740)='!emory.current\x00C\nV\xa21\xb4\xb2\xb3SBB\x0fA\xa6\xe3`V\x82\'\xe7\x8d\x8a\xe2\xd1\xc7\xc5\xa3J') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000700)=0x21) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x1, 0x20, 0x9, 0x2, {{0x41, 0x4, 0x1, 0x5, 0x104, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x31}, {[@timestamp_prespec={0x44, 0x1c, 0xb2, 0x3, 0x4, [{@empty, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x1}, {@empty, 0xfffffffa}]}, @timestamp={0x44, 0x10, 0x45, 0x0, 0x9, [0x3, 0x4, 0x1]}, @timestamp={0x44, 0x10, 0xa2, 0x0, 0xb, [0x6b01, 0xfffffffe, 0xffffffb3]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x2c, 0xfc, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0x200}, {@rand_addr=0x64010100, 0x40000}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x6cdd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@broadcast, 0xfff}]}, @cipso={0x86, 0x39, 0x3, [{0x0, 0xf, "dcd1205242c313663254f193c5"}, {0x0, 0x3, '#'}, {0x5, 0xd, "0a79079891a4622915621a"}, {0x5, 0xe, "1cf8af95ac1308294bfe1bb1"}, {0x0, 0x6, "8d47b4fc"}]}, @generic={0x94, 0x8, "b146f0844e44"}, @timestamp_prespec={0x44, 0x3c, 0x46, 0x3, 0x3, [{@remote, 0x7c}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x6}, {@local, 0x1}, {@multicast2, 0x30805c4}, {@rand_addr=0x64010100, 0xac}, {@remote, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='sys_enter\x00', r0}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc27, 0x0, 0x0, 0x0, 0x7}, [@alu={0x4, 0x1, 0xd, 0xa, 0x6, 0x30, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0x77, &(0x7f0000000380)=""/119, 0x40f00, 0x1a, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x4, 0x7, 0x8}, 0x10}, 0x80) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)) 20:36:19 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x0, 0x14}) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/58}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) read(r2, &(0x7f00000002c0)=""/189, 0xbd) 20:36:19 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x7}}) 20:36:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x115180, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async, rerun: 32) r3 = syz_open_pts(r2, 0x0) (rerun: 32) dup3(r3, r2, 0x0) (async) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x3, 0x1ff, 0x800, 0x8, 0x18, "8784b2e85cf734a9bd879ea8f97b595ce9004a"}) (async) r4 = syz_open_pts(r1, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r6 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r6, 0x5386, &(0x7f0000000040)) (async, rerun: 32) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) (rerun: 32) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000092c0)={0x0, 0x0, &(0x7f0000009280)={&(0x7f0000000340)=@newtaction={0xec4, 0x30, 0x1, 0x0, 0x0, {}, [{0xe4, 0x1, [@m_ct={0xe0, 0x0, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8}, @TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "32a30c2b043729f75a58ca4f0c0a463e"}]}, {0x81, 0x6, "c8d0d0ea254611b690509379513a25de74771d9a72f755ed494a081038b726a0c2a98fbd62ee4dc67cda7a631611194cb34e6201f95584c0e4b0cae5fc2c0efa2714aeacf5416e7895bc21bd3573bc8c1a8433e63ab0aadf0175d920b95af1949afb7c9be3dc4337d5dec599387786221ec1142a93a55954b69605e0ff"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0xd84, 0x1, [@m_ife={0xe8, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}]}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}]}, @TCA_IFE_TYPE={0x6}]}, {0x45, 0x6, "d0b364a585b18e8bfcc02ca78130e66382274ad7eb55c980b55a3ba84d8259ed1c418c756375e32982221cc07141724a673645e6d4f6f8203796dd649b6b88127a"}, {0xc}, {0xc}}}, @m_ife={0x13c, 0x0, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x34, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xdd, 0x6, "b337d384910052ecb7d10b612c94e02ae047a83076947b581a32928781a585c74f78bc4c59e5501027fbf9b00af62695c326e61029353b0fc123a38cda9516fdb690a88141bbb71a47daf1bacdf25e4b49a40ba0834fcbcbc2451c4d53a5f9bb56c5d8f945e449e3aab7caff624ce104a9f9afc6d149d851c3aaa65c9c7fd7835bbffdb59947e0297ab804e861c261c879823a8f5151796019a7a1a3fb2e32a1c5a3c4d9714cf8bd95671c2692aea166a8b83e7e7f039efa30120fae8bb1f080a7e48d199edde9e4cbbe1add2bcbc70e7bdcac72813075b397"}, {0xc}, {0xc}}}, @m_nat={0xac, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}, @multicast1, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @broadcast, @multicast2}}]}, {0x9, 0x6, "48cb0fb05c"}, {0xc}, {0xc}}}, @m_mirred={0xab0, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xa81, 0x6, "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"}, {0xc}, {0xc}}}]}, {0x48, 0x1, [@m_vlan={0x44, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x15, 0x6, "e12bc804bd0ae56b08f5efc43830705a99"}, {0xc}, {0xc}}}]}]}, 0xec4}}, 0x20000840) (async, rerun: 64) r8 = syz_open_pts(r5, 0x0) (rerun: 64) dup3(r8, r5, 0x0) (async) readv(r5, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) syz_open_pts(r5, 0x2800) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)={0x3, 0xc8, 0x2, 0xfff, 0x6, [{0x7fffffff, 0x0, 0x9, '\x00', 0x2000}, {0x5, 0x3596, 0x6, '\x00', 0x4}, {0x20, 0x81, 0x4f6, '\x00', 0x1600}, {0x9, 0x401, 0xff, '\x00', 0x8}, {0x2, 0x7, 0x5, '\x00', 0x880}, {0x4, 0x7, 0x2, '\x00', 0x2a0b}]}) (async, rerun: 32) dup3(r4, r1, 0x0) (async, rerun: 32) r9 = syz_open_pts(0xffffffffffffffff, 0x22182) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000140)=0x18) syz_open_pts(r4, 0x200000) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x202001) dup3(r2, r1, 0x0) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) syz_open_pts(r1, 0x109001) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0xc0189436, 0x0) 20:36:19 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x8}}) 20:36:19 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ipi_raise\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000740)='!emory.current\x00C\nV\xa21\xb4\xb2\xb3SBB\x0fA\xa6\xe3`V\x82\'\xe7\x8d\x8a\xe2\xd1\xc7\xc5\xa3J') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000700)=0x21) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x1, 0x20, 0x9, 0x2, {{0x41, 0x4, 0x1, 0x5, 0x104, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x31}, {[@timestamp_prespec={0x44, 0x1c, 0xb2, 0x3, 0x4, [{@empty, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x1}, {@empty, 0xfffffffa}]}, @timestamp={0x44, 0x10, 0x45, 0x0, 0x9, [0x3, 0x4, 0x1]}, @timestamp={0x44, 0x10, 0xa2, 0x0, 0xb, [0x6b01, 0xfffffffe, 0xffffffb3]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x2c, 0xfc, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0x200}, {@rand_addr=0x64010100, 0x40000}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x6cdd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@broadcast, 0xfff}]}, @cipso={0x86, 0x39, 0x3, [{0x0, 0xf, "dcd1205242c313663254f193c5"}, {0x0, 0x3, '#'}, {0x5, 0xd, "0a79079891a4622915621a"}, {0x5, 0xe, "1cf8af95ac1308294bfe1bb1"}, {0x0, 0x6, "8d47b4fc"}]}, @generic={0x94, 0x8, "b146f0844e44"}, @timestamp_prespec={0x44, 0x3c, 0x46, 0x3, 0x3, [{@remote, 0x7c}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x6}, {@local, 0x1}, {@multicast2, 0x30805c4}, {@rand_addr=0x64010100, 0xac}, {@remote, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='sys_enter\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc27, 0x0, 0x0, 0x0, 0x7}, [@alu={0x4, 0x1, 0xd, 0xa, 0x6, 0x30, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0x77, &(0x7f0000000380)=""/119, 0x40f00, 0x1a, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x4, 0x7, 0x8}, 0x10}, 0x80) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ipi_raise\x00', r0}, 0x10) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000740)='!emory.current\x00C\nV\xa21\xb4\xb2\xb3SBB\x0fA\xa6\xe3`V\x82\'\xe7\x8d\x8a\xe2\xd1\xc7\xc5\xa3J') (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000700)=0x21) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x1, 0x20, 0x9, 0x2, {{0x41, 0x4, 0x1, 0x5, 0x104, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x31}, {[@timestamp_prespec={0x44, 0x1c, 0xb2, 0x3, 0x4, [{@empty, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x1}, {@empty, 0xfffffffa}]}, @timestamp={0x44, 0x10, 0x45, 0x0, 0x9, [0x3, 0x4, 0x1]}, @timestamp={0x44, 0x10, 0xa2, 0x0, 0xb, [0x6b01, 0xfffffffe, 0xffffffb3]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x2c, 0xfc, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0x200}, {@rand_addr=0x64010100, 0x40000}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x6cdd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@broadcast, 0xfff}]}, @cipso={0x86, 0x39, 0x3, [{0x0, 0xf, "dcd1205242c313663254f193c5"}, {0x0, 0x3, '#'}, {0x5, 0xd, "0a79079891a4622915621a"}, {0x5, 0xe, "1cf8af95ac1308294bfe1bb1"}, {0x0, 0x6, "8d47b4fc"}]}, @generic={0x94, 0x8, "b146f0844e44"}, @timestamp_prespec={0x44, 0x3c, 0x46, 0x3, 0x3, [{@remote, 0x7c}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x6}, {@local, 0x1}, {@multicast2, 0x30805c4}, {@rand_addr=0x64010100, 0xac}, {@remote, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='sys_enter\x00', r0}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc27, 0x0, 0x0, 0x0, 0x7}, [@alu={0x4, 0x1, 0xd, 0xa, 0x6, 0x30, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0x77, &(0x7f0000000380)=""/119, 0x40f00, 0x1a, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x4, 0x7, 0x8}, 0x10}, 0x80) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:19 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x9}}) 20:36:19 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000001cdedc6c00000800e9ffffff9500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x1}}) 20:36:19 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xa}}) 20:36:19 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000001cdedc6c00000800e9ffffff9500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x1}}) 20:36:19 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xb}}) 20:36:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x115180, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) (async) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x3, 0x1ff, 0x800, 0x8, 0x18, "8784b2e85cf734a9bd879ea8f97b595ce9004a"}) r4 = syz_open_pts(r1, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r6 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r6, 0x5386, &(0x7f0000000040)) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000092c0)={0x0, 0x0, &(0x7f0000009280)={&(0x7f0000000340)=@newtaction={0xec4, 0x30, 0x1, 0x0, 0x0, {}, [{0xe4, 0x1, [@m_ct={0xe0, 0x0, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8}, @TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "32a30c2b043729f75a58ca4f0c0a463e"}]}, {0x81, 0x6, "c8d0d0ea254611b690509379513a25de74771d9a72f755ed494a081038b726a0c2a98fbd62ee4dc67cda7a631611194cb34e6201f95584c0e4b0cae5fc2c0efa2714aeacf5416e7895bc21bd3573bc8c1a8433e63ab0aadf0175d920b95af1949afb7c9be3dc4337d5dec599387786221ec1142a93a55954b69605e0ff"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0xd84, 0x1, [@m_ife={0xe8, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}]}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}]}, @TCA_IFE_TYPE={0x6}]}, {0x45, 0x6, "d0b364a585b18e8bfcc02ca78130e66382274ad7eb55c980b55a3ba84d8259ed1c418c756375e32982221cc07141724a673645e6d4f6f8203796dd649b6b88127a"}, {0xc}, {0xc}}}, @m_ife={0x13c, 0x0, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x34, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xdd, 0x6, "b337d384910052ecb7d10b612c94e02ae047a83076947b581a32928781a585c74f78bc4c59e5501027fbf9b00af62695c326e61029353b0fc123a38cda9516fdb690a88141bbb71a47daf1bacdf25e4b49a40ba0834fcbcbc2451c4d53a5f9bb56c5d8f945e449e3aab7caff624ce104a9f9afc6d149d851c3aaa65c9c7fd7835bbffdb59947e0297ab804e861c261c879823a8f5151796019a7a1a3fb2e32a1c5a3c4d9714cf8bd95671c2692aea166a8b83e7e7f039efa30120fae8bb1f080a7e48d199edde9e4cbbe1add2bcbc70e7bdcac72813075b397"}, {0xc}, {0xc}}}, @m_nat={0xac, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}, @multicast1, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @broadcast, @multicast2}}]}, {0x9, 0x6, "48cb0fb05c"}, {0xc}, {0xc}}}, @m_mirred={0xab0, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xa81, 0x6, "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"}, {0xc}, {0xc}}}]}, {0x48, 0x1, [@m_vlan={0x44, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x15, 0x6, "e12bc804bd0ae56b08f5efc43830705a99"}, {0xc}, {0xc}}}]}]}, 0xec4}}, 0x20000840) (async) r8 = syz_open_pts(r5, 0x0) dup3(r8, r5, 0x0) readv(r5, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) syz_open_pts(r5, 0x2800) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)={0x3, 0xc8, 0x2, 0xfff, 0x6, [{0x7fffffff, 0x0, 0x9, '\x00', 0x2000}, {0x5, 0x3596, 0x6, '\x00', 0x4}, {0x20, 0x81, 0x4f6, '\x00', 0x1600}, {0x9, 0x401, 0xff, '\x00', 0x8}, {0x2, 0x7, 0x5, '\x00', 0x880}, {0x4, 0x7, 0x2, '\x00', 0x2a0b}]}) dup3(r4, r1, 0x0) (async) r9 = syz_open_pts(0xffffffffffffffff, 0x22182) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000140)=0x18) (async) syz_open_pts(r4, 0x200000) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:19 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x0, 0x14}) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/58}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) read(r2, &(0x7f00000002c0)=""/189, 0xbd) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x0, 0x14}) (async) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/58}) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) read(r2, &(0x7f00000002c0)=""/189, 0xbd) (async) 20:36:19 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000001cdedc6c00000800e9ffffff9500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000001cdedc6c00000800e9ffffff9500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x1}}) (async) 20:36:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (rerun: 32) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x202001) dup3(r2, r1, 0x0) (async) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) syz_open_pts(r1, 0x109001) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:20 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xc}}) 20:36:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_open_dev$tty20(0xc, 0x4, 0x1) 20:36:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0xc020660b, 0x0) 20:36:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1a000000f8ff000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0xde, 0x9, &(0x7f0000000080)="27eb70a23f6076075e2680364393c9d5d532b51b8b2da355b39903798f3eecfe3d43b7e0e36dcadb44647d2d4688c5b3c6c1e24e320e1ed6bebee1d6817265b78dbfaf66fbb7a358ca32a5aefa5e140e27d7b945919da4e9ea3496318196b592478421ed31a5aa161203389bd44bb5581b87bb54f2d2fd8a4ec3db650b3725cfc2d39598e094a69ff15a5026e9dcc1f18111ba6dabd99da35f499d68babe86ba68b61f19a48adec76138a7192ea5127b168f2c498fb0246f73f8c12135cc2d0739ac878c9bf1d8022537e8eadaaffeeaff2bcd10a66adb7f44daa037c6c0", &(0x7f0000000300)=""/9, 0x31200000, 0x0, 0xb7, 0xcf, &(0x7f0000000380)="f0e1bc83de900d3f9f8844d11a543f5e7fb405851eaeffb33651161f2c4e3481b3ef74e4709fbd415d254e9e03ad872cb2fcc9ae2f8eee6d0bb134a5e190640f82dc237f77ec3554153e6eae5493b39a66931d104e9d586c88c27ed008ef353bfb1e0d3c5d9f243791501f0afa4f935c44ba3aabe7e885d728da1fbd3df0de24a86d6b7b779563052a5564cf327d3f549e546d3b8e85d0cbe883cc6905888b18085d54abf8aaadec1929e8da7fed261f4a17cc174f973a", &(0x7f0000000440)="478b5f313b124b26361eabef4f15e894346a93ec59c535959b0f0684d2d0d7ce85c6f620a8aebfaefecefe50d140861d7b1159e591a05777db879859bfa0bd1f023a9c51714c546273d77ea83eccca62864816c7b9fb902e7a0ef54d3e72c642bdd3daa5006d6f8e662c6aff7c523fab8a80f3398cdc0adcbdfa095969386b9c0662423afa12b4c72c1427a3e1281807fa6b346bb546a67d344d526f85b9f07f301060a80c4ae2bf461e46be4a90d48eb9b2035faf4f55d945f9acffde85ae99ae468b309326251a906c610273b27b", 0x0, 0x6}, 0x48) 20:36:20 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x0, 0x14}) (async) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/58}) (async, rerun: 64) r1 = syz_open_pts(r0, 0x0) (rerun: 64) r2 = dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) read(r2, &(0x7f00000002c0)=""/189, 0xbd) 20:36:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1a000000f8ff000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0xde, 0x9, &(0x7f0000000080)="27eb70a23f6076075e2680364393c9d5d532b51b8b2da355b39903798f3eecfe3d43b7e0e36dcadb44647d2d4688c5b3c6c1e24e320e1ed6bebee1d6817265b78dbfaf66fbb7a358ca32a5aefa5e140e27d7b945919da4e9ea3496318196b592478421ed31a5aa161203389bd44bb5581b87bb54f2d2fd8a4ec3db650b3725cfc2d39598e094a69ff15a5026e9dcc1f18111ba6dabd99da35f499d68babe86ba68b61f19a48adec76138a7192ea5127b168f2c498fb0246f73f8c12135cc2d0739ac878c9bf1d8022537e8eadaaffeeaff2bcd10a66adb7f44daa037c6c0", &(0x7f0000000300)=""/9, 0x31200000, 0x0, 0xb7, 0xcf, &(0x7f0000000380)="f0e1bc83de900d3f9f8844d11a543f5e7fb405851eaeffb33651161f2c4e3481b3ef74e4709fbd415d254e9e03ad872cb2fcc9ae2f8eee6d0bb134a5e190640f82dc237f77ec3554153e6eae5493b39a66931d104e9d586c88c27ed008ef353bfb1e0d3c5d9f243791501f0afa4f935c44ba3aabe7e885d728da1fbd3df0de24a86d6b7b779563052a5564cf327d3f549e546d3b8e85d0cbe883cc6905888b18085d54abf8aaadec1929e8da7fed261f4a17cc174f973a", &(0x7f0000000440)="478b5f313b124b26361eabef4f15e894346a93ec59c535959b0f0684d2d0d7ce85c6f620a8aebfaefecefe50d140861d7b1159e591a05777db879859bfa0bd1f023a9c51714c546273d77ea83eccca62864816c7b9fb902e7a0ef54d3e72c642bdd3daa5006d6f8e662c6aff7c523fab8a80f3398cdc0adcbdfa095969386b9c0662423afa12b4c72c1427a3e1281807fa6b346bb546a67d344d526f85b9f07f301060a80c4ae2bf461e46be4a90d48eb9b2035faf4f55d945f9acffde85ae99ae468b309326251a906c610273b27b", 0x0, 0x6}, 0x48) 20:36:20 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xd}}) 20:36:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) 20:36:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1a000000f8ff000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0xde, 0x9, &(0x7f0000000080)="27eb70a23f6076075e2680364393c9d5d532b51b8b2da355b39903798f3eecfe3d43b7e0e36dcadb44647d2d4688c5b3c6c1e24e320e1ed6bebee1d6817265b78dbfaf66fbb7a358ca32a5aefa5e140e27d7b945919da4e9ea3496318196b592478421ed31a5aa161203389bd44bb5581b87bb54f2d2fd8a4ec3db650b3725cfc2d39598e094a69ff15a5026e9dcc1f18111ba6dabd99da35f499d68babe86ba68b61f19a48adec76138a7192ea5127b168f2c498fb0246f73f8c12135cc2d0739ac878c9bf1d8022537e8eadaaffeeaff2bcd10a66adb7f44daa037c6c0", &(0x7f0000000300)=""/9, 0x31200000, 0x0, 0xb7, 0xcf, &(0x7f0000000380)="f0e1bc83de900d3f9f8844d11a543f5e7fb405851eaeffb33651161f2c4e3481b3ef74e4709fbd415d254e9e03ad872cb2fcc9ae2f8eee6d0bb134a5e190640f82dc237f77ec3554153e6eae5493b39a66931d104e9d586c88c27ed008ef353bfb1e0d3c5d9f243791501f0afa4f935c44ba3aabe7e885d728da1fbd3df0de24a86d6b7b779563052a5564cf327d3f549e546d3b8e85d0cbe883cc6905888b18085d54abf8aaadec1929e8da7fed261f4a17cc174f973a", &(0x7f0000000440)="478b5f313b124b26361eabef4f15e894346a93ec59c535959b0f0684d2d0d7ce85c6f620a8aebfaefecefe50d140861d7b1159e591a05777db879859bfa0bd1f023a9c51714c546273d77ea83eccca62864816c7b9fb902e7a0ef54d3e72c642bdd3daa5006d6f8e662c6aff7c523fab8a80f3398cdc0adcbdfa095969386b9c0662423afa12b4c72c1427a3e1281807fa6b346bb546a67d344d526f85b9f07f301060a80c4ae2bf461e46be4a90d48eb9b2035faf4f55d945f9acffde85ae99ae468b309326251a906c610273b27b", 0x0, 0x6}, 0x48) 20:36:20 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f00000013c0)={0x0, 0x1, 0x1, 0x3, 0x13, "492eecef740c7b99f4bc5ae72865f74504fc8e"}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1d, "10000000000000000000000000000000000040"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x22581) r4 = dup3(r3, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0/file0\x00'}) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}, {&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/204, 0xcc}], 0x4) creat(&(0x7f0000000100)='./file0\x00', 0x15) 20:36:20 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xe}}) 20:36:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) r2 = syz_open_pts(r1, 0x202001) dup3(r2, r1, 0x0) (async) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) syz_open_pts(r1, 0x109001) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) 20:36:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)={{0x0, 0x3}}) 20:36:20 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x10}}) 20:36:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000100)="0888b4ef0554a3566a302be01934513507de39016deddab745675db58a0635e8dc6ad8b5ba5d7589da9c785ef33ca4301a83282d7474ddb03e22d98189bc26fea0d250d0ddf17a4806ad8531cb5a96ccbcf20db4a85cf6c44ca4759a4cf4f4a250a4f23c3ed6b8e4a656b38ce4cecfff839af4e7138dfe6325d4d9bce7489e42796a1c529e1a72866ff5153fdfde521f5869deed882ec2319cfd472175dbf5c941622cfd1489a5853f3949908944eb2c7e18e01f7ee29c1369e67f6a94460d634a271c09afacd8084902") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x10000, 0x10001, 0x1, 0x7a7, 0x0, "9d91b73f78845012e09faa6773ad265e364c36", 0x401, 0x74}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7) 20:36:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x7, 0x0, 0xee0, 0x0, 0x20}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) r3 = socket(0xa, 0x1, 0x0) close(r3) sendmmsg$inet_sctp(r3, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20000000000000008400000002000000000004"], 0x20}], 0x1, 0x0) poll(&(0x7f0000001340)=[{r3}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000080)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)) r6 = syz_open_pts(r5, 0x0) dup3(r6, r5, 0x0) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000000)=""/61) setsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000000140)="f423e88a7da7c735d8ea87f77537d6333444479b9e92e58d3150b708c8470d55bef2fc4f3e10c1f19c791fb2082771ac795fa8eafebe216a7e7af0bdaaa37e4fe60b9201167442d5b041fde15499e3cdf0031348efbf8c337454902c36226e59d5b788b25f17310caf40cac38cb4dcef629287b33e05f9af81b0841a6b6e917b38ec30694f1a4d3d781fd7bc7329ceb46317c08053805ad8b944a58217a37a062a2bea0141942c399789f85793b995bca283993d1f5fc6981ddd221ccbee503e20e61f56c69cf228f20469f0606bf5c4b7999cbfc4059b3cfb", 0xd9) 20:36:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async, rerun: 64) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)={{0x0, 0x3}}) 20:36:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)={{0x0, 0x3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)={{0x0, 0x3}}) (async) 20:36:20 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x11}}) 20:36:21 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f00000013c0)={0x0, 0x1, 0x1, 0x3, 0x13, "492eecef740c7b99f4bc5ae72865f74504fc8e"}) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1d, "10000000000000000000000000000000000040"}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x22581) r4 = dup3(r3, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0/file0\x00'}) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}, {&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/204, 0xcc}], 0x4) (async) creat(&(0x7f0000000100)='./file0\x00', 0x15) 20:36:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000580)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x170, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x810) 20:36:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x12}}) 20:36:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000100)="0888b4ef0554a3566a302be01934513507de39016deddab745675db58a0635e8dc6ad8b5ba5d7589da9c785ef33ca4301a83282d7474ddb03e22d98189bc26fea0d250d0ddf17a4806ad8531cb5a96ccbcf20db4a85cf6c44ca4759a4cf4f4a250a4f23c3ed6b8e4a656b38ce4cecfff839af4e7138dfe6325d4d9bce7489e42796a1c529e1a72866ff5153fdfde521f5869deed882ec2319cfd472175dbf5c941622cfd1489a5853f3949908944eb2c7e18e01f7ee29c1369e67f6a94460d634a271c09afacd8084902") (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x10000, 0x10001, 0x1, 0x7a7, 0x0, "9d91b73f78845012e09faa6773ad265e364c36", 0x401, 0x74}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7) 20:36:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async, rerun: 32) r1 = syz_open_pts(r0, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async, rerun: 64) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) (rerun: 64) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000580)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x170, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x810) 20:36:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x48}}) 20:36:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x7, 0x0, 0xee0, 0x0, 0x20}) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) r3 = socket(0xa, 0x1, 0x0) close(r3) sendmmsg$inet_sctp(r3, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20000000000000008400000002000000000004"], 0x20}], 0x1, 0x0) poll(&(0x7f0000001340)=[{r3}], 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000080)) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)) (async) r6 = syz_open_pts(r5, 0x0) dup3(r6, r5, 0x0) (async) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000000)=""/61) setsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000000140)="f423e88a7da7c735d8ea87f77537d6333444479b9e92e58d3150b708c8470d55bef2fc4f3e10c1f19c791fb2082771ac795fa8eafebe216a7e7af0bdaaa37e4fe60b9201167442d5b041fde15499e3cdf0031348efbf8c337454902c36226e59d5b788b25f17310caf40cac38cb4dcef629287b33e05f9af81b0841a6b6e917b38ec30694f1a4d3d781fd7bc7329ceb46317c08053805ad8b944a58217a37a062a2bea0141942c399789f85793b995bca283993d1f5fc6981ddd221ccbee503e20e61f56c69cf228f20469f0606bf5c4b7999cbfc4059b3cfb", 0xd9) 20:36:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000580)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x170, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x810) 20:36:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x4c}}) 20:36:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000100)="0888b4ef0554a3566a302be01934513507de39016deddab745675db58a0635e8dc6ad8b5ba5d7589da9c785ef33ca4301a83282d7474ddb03e22d98189bc26fea0d250d0ddf17a4806ad8531cb5a96ccbcf20db4a85cf6c44ca4759a4cf4f4a250a4f23c3ed6b8e4a656b38ce4cecfff839af4e7138dfe6325d4d9bce7489e42796a1c529e1a72866ff5153fdfde521f5869deed882ec2319cfd472175dbf5c941622cfd1489a5853f3949908944eb2c7e18e01f7ee29c1369e67f6a94460d634a271c09afacd8084902") (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) (async) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x10000, 0x10001, 0x1, 0x7a7, 0x0, "9d91b73f78845012e09faa6773ad265e364c36", 0x401, 0x74}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7) 20:36:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:21 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f00000013c0)={0x0, 0x1, 0x1, 0x3, 0x13, "492eecef740c7b99f4bc5ae72865f74504fc8e"}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1d, "10000000000000000000000000000000000040"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x22581) r4 = dup3(r3, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0/file0\x00'}) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}, {&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/204, 0xcc}], 0x4) creat(&(0x7f0000000100)='./file0\x00', 0x15) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f00000013c0)={0x0, 0x1, 0x1, 0x3, 0x13, "492eecef740c7b99f4bc5ae72865f74504fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1d, "10000000000000000000000000000000000040"}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) (async) syz_open_pts(0xffffffffffffffff, 0x22581) (async) dup3(r3, r2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0/file0\x00'}) (async) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}, {&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/204, 0xcc}], 0x4) (async) creat(&(0x7f0000000100)='./file0\x00', 0x15) (async) 20:36:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x5386, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='spmi_cmd\x00', r3}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)) 20:36:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x68}}) 20:36:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x7, 0x0, 0xee0, 0x0, 0x20}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) r3 = socket(0xa, 0x1, 0x0) close(r3) (async) sendmmsg$inet_sctp(r3, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20000000000000008400000002000000000004"], 0x20}], 0x1, 0x0) (async, rerun: 64) poll(&(0x7f0000001340)=[{r3}], 0x1, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000080)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)) (async) r6 = syz_open_pts(r5, 0x0) dup3(r6, r5, 0x0) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000000)=""/61) (async) setsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000000140)="f423e88a7da7c735d8ea87f77537d6333444479b9e92e58d3150b708c8470d55bef2fc4f3e10c1f19c791fb2082771ac795fa8eafebe216a7e7af0bdaaa37e4fe60b9201167442d5b041fde15499e3cdf0031348efbf8c337454902c36226e59d5b788b25f17310caf40cac38cb4dcef629287b33e05f9af81b0841a6b6e917b38ec30694f1a4d3d781fd7bc7329ceb46317c08053805ad8b944a58217a37a062a2bea0141942c399789f85793b995bca283993d1f5fc6981ddd221ccbee503e20e61f56c69cf228f20469f0606bf5c4b7999cbfc4059b3cfb", 0xd9) 20:36:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) (async) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) (async) r1 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x5386, &(0x7f0000000040)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='spmi_cmd\x00', r3}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)) 20:36:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x6c}}) 20:36:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x5386, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='spmi_cmd\x00', r3}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) (async) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) (async) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r1, 0x5386, &(0x7f0000000040)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='spmi_cmd\x00', r3}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) flock(r0, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ioctl$TIOCSTI(r1, 0x541d, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x23a, 0x5, 0x0, 0x1, 0x15, "210dfa62c36d8f8068420b44f29a322f6ae549"}) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) 20:36:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x6001) 20:36:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) flock(r0, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ioctl$TIOCSTI(r1, 0x541d, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x23a, 0x5, 0x0, 0x1, 0x15, "210dfa62c36d8f8068420b44f29a322f6ae549"}) (async) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) 20:36:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x74}}) 20:36:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:21 executing program 4: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000001c0)="e70215c44fc8e59dae5b083f508f6902350f961773ed9c932e9614f761724d2b444e409d6b109345c592f52ad6ec4ad528bd0419e368323cd9330ba2a9214c597264976237ca0a") ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8000, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x8, 0x0, 0x3, 0x3ff, 0x2, "d8b92976939dd321a739eff27a7b8191b07de8"}) r3 = dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r4 = fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) r5 = accept4$phonet_pipe(r3, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x80800) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) write$binfmt_elf32(r3, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x66, 0xbc, 0x5, 0x9, 0x2, 0x3, 0x7b0, 0x2c, 0x38, 0x24f, 0x9, 0xfffa, 0x20, 0x1, 0x4, 0x7e, 0x5}, [{0x1, 0x2, 0x5, 0x7, 0xfffffe00, 0xfff, 0xffffff2f, 0x7fffffff}, {0x5, 0x1ff, 0x9, 0x2, 0x401, 0x1, 0xff, 0x9}], "5e5ece76f37260bc4114d5f67debe65ecd47d441e6c361a82ef0e8bc4964c68001d240716b6bf611be265d28b68e1bf9f062b482af0c950acb138fac329f2e0e619f6e7d58793dcae82a71e9521d2d930fb5ed79a871e3f7503f27405f2397ec9067154ed98bae2b58c18609c0716b", ['\x00', '\x00', '\x00']}, 0x3e7) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x2030}, {r0, 0x200a}, {r4, 0x4000}, {r5}, {r1, 0x100}, {r2, 0x8000}], 0x6, &(0x7f0000000340), &(0x7f0000000380)={[0x28fe]}, 0x8) syz_open_pts(r1, 0x1a1302) 20:36:21 executing program 3: io_setup(0x1, &(0x7f0000000000)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)='-', 0x2}]) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) ioctl$TIOCSTI(r2, 0x5437, 0x0) 20:36:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x6001) 20:36:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) flock(r0, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ioctl$TIOCSTI(r1, 0x541d, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x23a, 0x5, 0x0, 0x1, 0x15, "210dfa62c36d8f8068420b44f29a322f6ae549"}) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) (async) flock(r0, 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) ioctl$TIOCSTI(r1, 0x541d, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x23a, 0x5, 0x0, 0x1, 0x15, "210dfa62c36d8f8068420b44f29a322f6ae549"}) (async) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) (async) 20:36:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x7a}}) 20:36:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async, rerun: 64) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x6001) (rerun: 64) 20:36:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0xfffffde1) r2 = dup2(r0, r1) r3 = pidfd_getfd(r2, r2, 0x0) r4 = openat$incfs(r3, &(0x7f0000000100)='.pending_reads\x00', 0x100c1, 0x24) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x31, r3, {0x1}}, './file0\x00'}) syz_open_pts(r5, 0x14b800) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x2) syz_open_pts(r4, 0xa0420) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x101, 0x4, [0x800, 0x5, 0x1000, 0x2]}, 0x10) 20:36:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x300}}) 20:36:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0xfffffde1) r2 = dup2(r0, r1) r3 = pidfd_getfd(r2, r2, 0x0) r4 = openat$incfs(r3, &(0x7f0000000100)='.pending_reads\x00', 0x100c1, 0x24) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x31, r3, {0x1}}, './file0\x00'}) syz_open_pts(r5, 0x14b800) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async, rerun: 64) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x2) (rerun: 64) syz_open_pts(r4, 0xa0420) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x101, 0x4, [0x800, 0x5, 0x1000, 0x2]}, 0x10) 20:36:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0xee01) 20:36:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x500}}) [ 595.130797][ T23] audit: type=1400 audit(1668976581.767:448): avc: denied { setattr } for pid=21393 comm="syz-executor.2" name="L2CAP" dev="sockfs" ino=129390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 20:36:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:22 executing program 4: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000001c0)="e70215c44fc8e59dae5b083f508f6902350f961773ed9c932e9614f761724d2b444e409d6b109345c592f52ad6ec4ad528bd0419e368323cd9330ba2a9214c597264976237ca0a") (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8000, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x8, 0x0, 0x3, 0x3ff, 0x2, "d8b92976939dd321a739eff27a7b8191b07de8"}) (async) r3 = dup3(r1, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r4 = fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) r5 = accept4$phonet_pipe(r3, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x80800) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) (async) write$binfmt_elf32(r3, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x66, 0xbc, 0x5, 0x9, 0x2, 0x3, 0x7b0, 0x2c, 0x38, 0x24f, 0x9, 0xfffa, 0x20, 0x1, 0x4, 0x7e, 0x5}, [{0x1, 0x2, 0x5, 0x7, 0xfffffe00, 0xfff, 0xffffff2f, 0x7fffffff}, {0x5, 0x1ff, 0x9, 0x2, 0x401, 0x1, 0xff, 0x9}], "5e5ece76f37260bc4114d5f67debe65ecd47d441e6c361a82ef0e8bc4964c68001d240716b6bf611be265d28b68e1bf9f062b482af0c950acb138fac329f2e0e619f6e7d58793dcae82a71e9521d2d930fb5ed79a871e3f7503f27405f2397ec9067154ed98bae2b58c18609c0716b", ['\x00', '\x00', '\x00']}, 0x3e7) (async) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x2030}, {r0, 0x200a}, {r4, 0x4000}, {r5}, {r1, 0x100}, {r2, 0x8000}], 0x6, &(0x7f0000000340), &(0x7f0000000380)={[0x28fe]}, 0x8) (async) syz_open_pts(r1, 0x1a1302) 20:36:22 executing program 3: io_setup(0x1, &(0x7f0000000000)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)='-', 0x2}]) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) ioctl$TIOCSTI(r2, 0x5437, 0x0) 20:36:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0xfffffde1) r2 = dup2(r0, r1) r3 = pidfd_getfd(r2, r2, 0x0) r4 = openat$incfs(r3, &(0x7f0000000100)='.pending_reads\x00', 0x100c1, 0x24) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x31, r3, {0x1}}, './file0\x00'}) syz_open_pts(r5, 0x14b800) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x2) syz_open_pts(r4, 0xa0420) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x101, 0x4, [0x800, 0x5, 0x1000, 0x2]}, 0x10) 20:36:22 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0xee01) 20:36:22 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x600}}) 20:36:22 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x700}}) 20:36:22 executing program 4: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000001c0)="e70215c44fc8e59dae5b083f508f6902350f961773ed9c932e9614f761724d2b444e409d6b109345c592f52ad6ec4ad528bd0419e368323cd9330ba2a9214c597264976237ca0a") (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8000, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x8, 0x0, 0x3, 0x3ff, 0x2, "d8b92976939dd321a739eff27a7b8191b07de8"}) (async) r3 = dup3(r1, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r4 = fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) (async) r5 = accept4$phonet_pipe(r3, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x80800) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) (async) write$binfmt_elf32(r3, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x66, 0xbc, 0x5, 0x9, 0x2, 0x3, 0x7b0, 0x2c, 0x38, 0x24f, 0x9, 0xfffa, 0x20, 0x1, 0x4, 0x7e, 0x5}, [{0x1, 0x2, 0x5, 0x7, 0xfffffe00, 0xfff, 0xffffff2f, 0x7fffffff}, {0x5, 0x1ff, 0x9, 0x2, 0x401, 0x1, 0xff, 0x9}], "5e5ece76f37260bc4114d5f67debe65ecd47d441e6c361a82ef0e8bc4964c68001d240716b6bf611be265d28b68e1bf9f062b482af0c950acb138fac329f2e0e619f6e7d58793dcae82a71e9521d2d930fb5ed79a871e3f7503f27405f2397ec9067154ed98bae2b58c18609c0716b", ['\x00', '\x00', '\x00']}, 0x3e7) (async) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x2030}, {r0, 0x200a}, {r4, 0x4000}, {r5}, {r1, 0x100}, {r2, 0x8000}], 0x6, &(0x7f0000000340), &(0x7f0000000380)={[0x28fe]}, 0x8) (async) syz_open_pts(r1, 0x1a1302) 20:36:22 executing program 5: ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000040)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x63c5ded9419d833e, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:22 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fchown(r2, 0xffffffffffffffff, 0xee01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) fchown(r2, 0xffffffffffffffff, 0xee01) (async) 20:36:22 executing program 5: ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000040)) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x63c5ded9419d833e, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:22 executing program 2: r0 = socket(0xa, 0x1, 0x0) close(r0) sendmmsg$inet_sctp(r0, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20000000000000008400000002006c00000004"], 0x20}], 0x1, 0x0) poll(&(0x7f0000001340)=[{r0}], 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x2, 0x80, 0x4]}, &(0x7f0000000140)=0x44) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x57, 0x10, 0x0}, 0x80) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0xc0f85403, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) shutdown(r4, 0x1) 20:36:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:23 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x900}}) 20:36:23 executing program 3: io_setup(0x1, &(0x7f0000000000)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)='-', 0x2}]) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) ioctl$TIOCSTI(r2, 0x5437, 0x0) io_setup(0x1, &(0x7f0000000000)) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)='-', 0x2}]) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r2, 0x0) (async) dup3(r3, r2, 0x0) (async) ioctl$TIOCSTI(r2, 0x5437, 0x0) (async) 20:36:23 executing program 5: ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000040)) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x63c5ded9419d833e, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:23 executing program 2: r0 = socket(0xa, 0x1, 0x0) close(r0) (async) sendmmsg$inet_sctp(r0, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20000000000000008400000002006c00000004"], 0x20}], 0x1, 0x0) (async) poll(&(0x7f0000001340)=[{r0}], 0x1, 0x0) (async, rerun: 32) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x2, 0x80, 0x4]}, &(0x7f0000000140)=0x44) (rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x57, 0x10, 0x0}, 0x80) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0xc0f85403, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00'}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) (async) shutdown(r4, 0x1) 20:36:23 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0xe, 0x80800) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) sendfile(r1, r0, &(0x7f0000000200)=0x3, 0x1e65) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000005000000000000aa946860009f100000ffffff039500000000000000"], &(0x7f0000000280)='GPL\x00', 0xf1ae, 0x13, &(0x7f00000002c0)=""/19, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xd, 0x80000001, 0xfffff801}, 0x10, 0x0, r3, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) r5 = syz_open_pts(r0, 0x0) dup3(r5, r0, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000004c0)={0xff, "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"}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)) r7 = syz_open_pts(r6, 0x0) dup3(r7, r6, 0x0) readv(r6, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000700)=0xfffffbff) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:23 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xa00}}) 20:36:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:23 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xb00}}) 20:36:23 executing program 2: r0 = socket(0xa, 0x1, 0x0) close(r0) (async, rerun: 64) sendmmsg$inet_sctp(r0, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20000000000000008400000002006c00000004"], 0x20}], 0x1, 0x0) (async, rerun: 64) poll(&(0x7f0000001340)=[{r0}], 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x2, 0x80, 0x4]}, &(0x7f0000000140)=0x44) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x57, 0x10, 0x0}, 0x80) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async, rerun: 32) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0xc0f85403, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00'}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) (async) shutdown(r4, 0x1) 20:36:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x541d, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) 20:36:23 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20080}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='fsi_master_rw_result\x00'}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x0, 0x3}}) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='!emory.current\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0xa, &(0x7f0000000000)='syzkaller\x00'}, 0x30) [ 596.883593][ T23] audit: type=1400 audit(1668976583.517:449): avc: denied { setattr } for pid=21461 comm="syz-executor.5" path="/dev/vsock" dev="devtmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 20:36:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_pts(r1, 0x468440) dup3(r2, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:24 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xc00}}) 20:36:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async, rerun: 32) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (rerun: 32) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x541d, 0x0) (rerun: 32) 20:36:24 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20080}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='fsi_master_rw_result\x00'}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x0, 0x3}}) (async) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='!emory.current\x00') (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0xa, &(0x7f0000000000)='syzkaller\x00'}, 0x30) 20:36:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x2, 0x1}) 20:36:24 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0xe, 0x80800) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) (async) sendfile(r1, r0, &(0x7f0000000200)=0x3, 0x1e65) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000005000000000000aa946860009f100000ffffff039500000000000000"], &(0x7f0000000280)='GPL\x00', 0xf1ae, 0x13, &(0x7f00000002c0)=""/19, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xd, 0x80000001, 0xfffff801}, 0x10, 0x0, r3, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) r5 = syz_open_pts(r0, 0x0) dup3(r5, r0, 0x0) (async) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000004c0)={0xff, "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"}) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)) (async) r7 = syz_open_pts(r6, 0x0) dup3(r7, r6, 0x0) (async) readv(r6, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000700)=0xfffffbff) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_pts(r1, 0x468440) dup3(r2, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_pts(r1, 0x468440) (async) dup3(r2, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) (async) 20:36:24 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x5386, &(0x7f0000000040)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x100) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@mpls_delroute={0x1f0, 0x19, 0x4, 0x70bd2a, 0x25dfdbfb, {0x1c, 0x84, 0x80, 0x1f, 0xff, 0x1, 0xc8, 0x6}, [@RTA_NEWDST={0x84, 0x13, [{0x1ff, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1000}, {0x1ff, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {}, {0x1}, {0x4}, {0x8}, {0xff, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x83f}, {0x100, 0x0, 0x1}, {0x3}, {0x1000}, {0x200, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xfff}, {0x0, 0x0, 0x1}, {0xff279}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x800}, {0x1000}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9}, {0x8}, {0x7, 0x0, 0x1}, {0x60dfe, 0x0, 0x1}, {0x7d39}, {0x6}, {0x1}, {0xd17f2, 0x0, 0x1}, {0x7fff}, {0x81}, {0x48000}, {0x7f, 0x0, 0x1}, {0x5}, {0x401, 0x0, 0x1}, {0x3ff}, {0x3, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x1}, {0x34, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}, {0xa21, 0x0, 0x1}, {0x1}, {0x4}, {0x200, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x4}, {0x4}, {0x39c}]}, @RTA_OIF={0x8, 0x4, r4}, @RTA_MULTIPATH={0xc, 0x9, {0xfff, 0x10, 0x1, r4}}, @RTA_VIA={0x14, 0x12, {0x10, "170fc336595890da8d4d9ecace3b"}}, @RTA_NEWDST={0x84, 0x13, [{0x8}, {0xac}, {0x9, 0x0, 0x1}, {0x800, 0x0, 0x1}, {0x1}, {0x640b, 0x0, 0x1}, {0x2}, {0xffffa}, {0x81}, {0x5}, {0x3}, {0x5}, {0x3, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3}, {0x5}, {0x8}, {0x9309}, {0x1000}, {0xf68}, {0x4e4}, {0x8001}, {0x81}, {0x800, 0x0, 0x1}, {0xc0000}, {0x8, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x698, 0x1, 0x0, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "e9d9caecbfe3c64701aa5bc4ec50"}}]}, 0x1f0}}, 0x0) ioctl$TIOCSTI(r2, 0x541d, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) 20:36:24 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xd00}}) 20:36:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_pts(r1, 0x468440) dup3(r2, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:24 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20080}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='fsi_master_rw_result\x00'}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x0, 0x3}}) (async) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='!emory.current\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0xa, &(0x7f0000000000)='syzkaller\x00'}, 0x30) 20:36:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) io_setup(0x1, &(0x7f0000000000)=0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r6 = openat(r2, &(0x7f00000003c0)='./file0\x00', 0x414080, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000800), 0x18240, 0x0) r8 = socket$isdn(0x22, 0x3, 0x22) io_submit(r4, 0x8, &(0x7f0000000980)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x7f, r5, &(0x7f0000000140)="c220f0cee12a60ce24685836f4556e5e59aa9647d603a70f809769b8477f80e0b26ea980622462a6973dfc703998b4ab22bbf48128ef5bf50f1048820a63396027ce568f8b6c9a039081a8355b8461d4dacc4f2d83a2f0d9e0962302c7ea1ca4d46820bbb6890bee8deebfb3abbbfbf7b35ccc11201b0590ad910ffe09435c8fca3fb63edae74cc5927e3d7c9e99f12154f87f253b363cc4a5513fbc748bf2029d68cd40731aa34289b646e4c64ebee1d0c316c29b1024e6a68ca02461742b559b015911aeb9d056121f389cb62f34d910e2a023", 0xd4, 0xa5, 0x0, 0x1, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x1000, r0, &(0x7f0000000240)="9e4fd9ced59271895008d05de6101b83bef4184f76b239dd2c9e22def0f1", 0x1e, 0x8, 0x0, 0x2, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f00000002c0)="6516fe2ac885efb925525d4708a9fee49e894c9e2788f6e7ffcb5ee87b8aad95caa37ad6e24dc447efa7f2f1022f98c1f7e98cb47c07823d5dde92c2b2d3fa252924feee80cc554686e391f23ca6c55db732c4f1e4d5b952e8a590d9845ddeaf911535178106c3c4bc775b7eb025ef574d1fef181e036ef88bcbf1f9abec7b042b6b05ea97dcbbfb3aab4dd574045b03f3e95ad5d687c27751e221b5313e92902177cb78c50f59445c44abd34189230cb7c6e8c5877113ffbef4cc3feec9bbf8a5a9c89c1b1142920461ddb3b85cd7b302f934557b86c880a83f20f9781c5c", 0xdf, 0x2, 0x0, 0x6, r6}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x1, r2, &(0x7f0000000440)="83937cf65441a961a6bf7e31bd15620d331e62cea5fa5e51725327913f5934e6fded14bc2e5f18d214eba12ef035396d80f9e306b66e543a207da840c8ed38dbf94d69378d2db4f4be5d274eb890273938df6b226899249816353a31dde43bdfa3c4d9ff65abe8980319c6f20cb1bd7a04f3da394bc679628caf5c5121967127d6736f79e3cc496146f1687a573573b687ec50015be1c512eb465c2c66956e0dcd8bd630f4d0820b8fdaffeda29f324aedfe8f3d972d06baef62722d2dc52231d00baabaa2908bdf4447828aece46b0e5527ca3945088da96e2a458fe552c93b44", 0xe1, 0x3, 0x0, 0x2, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)="d45008b8ef1a68201c1a0ec232c4a832329c80867e11fb66a80a4e5354afccac27a9bcde73f3421c47b422663879b2e91acd529a2ea3939c8dc381940733643506e89d2b08cb9c42c97b8ddf513ad70382435136588b9d70480abd185b0bfe1c86a4b311108b159b45cefc28c7", 0x6d, 0x9, 0x0, 0x0, r2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000640)="b908535a630cac2cc261885c23e6a4cf180c6d6b8a378db015bdd33d43c21136b37a8585862bd0facebbbfc17bb67b5603190da41de1caba8b77437bdb2ff4bd76201720f70757cd220c84b1401182da12ab63afe4d465800e9589b361ebf74d5146ab3a8ec2b60658b59f07b477fcf9f77b5372", 0x74, 0x4, 0x0, 0x0, r2}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x2, r2, &(0x7f0000000700)="1b58916d3674ffadac9a0e2b3a915d09fe58b916f283602bdd7d377b68a3d2bf2a8f166b57d3d25e2d7c1982bea3cac2d36226910304e1ab19714af7c576d34896e533be6a7f799892e0ba315cef79c7d37a693e1c7e5449ad6f61fd69c2d70e555dad6edd6f67757675165395ec050521559e2fa5dfd7ff8f146978e947733da7402f54b075e3baef167d1b810ef288a933a6a46aa3af18aee26b5379fd421498b664284a04d05f7aa358c4957d6d63b4d688a810bc030552f0a5078a8b45df0c923ef66a77d1b0ee56e6f83179fd31481e1a37d02567dcf05b9b9fa74724b4e7b4b8071a98e6fb2838aa968f76e99b96ae9e5ff2ae", 0xf6, 0x8001, 0x0, 0x3, r7}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x2, 0x8000, r8, &(0x7f0000000880)="91c1318e2f143f102d6247fac58a7e1a499365540c999a34da6b14df84967a5a8e66f00600ff16a3dc21da673ecd1c82471565c63a33bda0b17e441de53d46ce109789aac202a31a08b2e0596e990d55b9d3368d7d03085ab0ac4265d5528fe21732d6f3c619137bb3ee638bcb0be4b431c22a0e56c12839f7079948f96bdb09a6", 0x81, 0x8000000000000001, 0x0, 0xd8620d4dff27aa3a, r2}]) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000009c0)=0x80) r9 = syz_open_pts(r3, 0x0) dup3(r9, r3, 0x0) syz_open_pts(r9, 0x80400) 20:36:24 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xe00}}) 20:36:24 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) r1 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x5386, &(0x7f0000000040)) (async, rerun: 64) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async, rerun: 64) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x100) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@mpls_delroute={0x1f0, 0x19, 0x4, 0x70bd2a, 0x25dfdbfb, {0x1c, 0x84, 0x80, 0x1f, 0xff, 0x1, 0xc8, 0x6}, [@RTA_NEWDST={0x84, 0x13, [{0x1ff, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1000}, {0x1ff, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {}, {0x1}, {0x4}, {0x8}, {0xff, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x83f}, {0x100, 0x0, 0x1}, {0x3}, {0x1000}, {0x200, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xfff}, {0x0, 0x0, 0x1}, {0xff279}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x800}, {0x1000}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9}, {0x8}, {0x7, 0x0, 0x1}, {0x60dfe, 0x0, 0x1}, {0x7d39}, {0x6}, {0x1}, {0xd17f2, 0x0, 0x1}, {0x7fff}, {0x81}, {0x48000}, {0x7f, 0x0, 0x1}, {0x5}, {0x401, 0x0, 0x1}, {0x3ff}, {0x3, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x1}, {0x34, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}, {0xa21, 0x0, 0x1}, {0x1}, {0x4}, {0x200, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x4}, {0x4}, {0x39c}]}, @RTA_OIF={0x8, 0x4, r4}, @RTA_MULTIPATH={0xc, 0x9, {0xfff, 0x10, 0x1, r4}}, @RTA_VIA={0x14, 0x12, {0x10, "170fc336595890da8d4d9ecace3b"}}, @RTA_NEWDST={0x84, 0x13, [{0x8}, {0xac}, {0x9, 0x0, 0x1}, {0x800, 0x0, 0x1}, {0x1}, {0x640b, 0x0, 0x1}, {0x2}, {0xffffa}, {0x81}, {0x5}, {0x3}, {0x5}, {0x3, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3}, {0x5}, {0x8}, {0x9309}, {0x1000}, {0xf68}, {0x4e4}, {0x8001}, {0x81}, {0x800, 0x0, 0x1}, {0xc0000}, {0x8, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x698, 0x1, 0x0, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "e9d9caecbfe3c64701aa5bc4ec50"}}]}, 0x1f0}}, 0x0) ioctl$TIOCSTI(r2, 0x541d, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) 20:36:24 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0xe, 0x80800) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) sendfile(r1, r0, &(0x7f0000000200)=0x3, 0x1e65) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000005000000000000aa946860009f100000ffffff039500000000000000"], &(0x7f0000000280)='GPL\x00', 0xf1ae, 0x13, &(0x7f00000002c0)=""/19, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xd, 0x80000001, 0xfffff801}, 0x10, 0x0, r3, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) (async) r5 = syz_open_pts(r0, 0x0) dup3(r5, r0, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000004c0)={0xff, "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"}) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)) (async) r7 = syz_open_pts(r6, 0x0) dup3(r7, r6, 0x0) readv(r6, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000700)=0xfffffbff) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000001762c74e42d132f0eb5eafaffceef88e1a77e9ededae726278010000000000008055b2b9c3e39b0c7ef4cf7847e1a5c63454f2b72b315d9d"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x8400) fallocate(r3, 0x18, 0x7fffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) [ 597.745731][ T23] audit: type=1400 audit(1668976584.377:450): avc: denied { write } for pid=21525 comm="syz-executor.1" name="net" dev="proc" ino=130121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 597.767838][ T23] audit: type=1400 audit(1668976584.377:451): avc: denied { add_name } for pid=21525 comm="syz-executor.1" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 597.788351][ T23] audit: type=1400 audit(1668976584.377:452): avc: denied { create } for pid=21525 comm="syz-executor.1" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 597.808732][ T23] audit: type=1400 audit(1668976584.377:453): avc: denied { associate } for pid=21525 comm="syz-executor.1" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 20:36:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x2, 0x1}) 20:36:24 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x1100}}) 20:36:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000001762c74e42d132f0eb5eafaffceef88e1a77e9ededae726278010000000000008055b2b9c3e39b0c7ef4cf7847e1a5c63454f2b72b315d9d"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x8400) fallocate(r3, 0x18, 0x7fffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000001762c74e42d132f0eb5eafaffceef88e1a77e9ededae726278010000000000008055b2b9c3e39b0c7ef4cf7847e1a5c63454f2b72b315d9d"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x8400) (async) fallocate(r3, 0x18, 0x7fffffffffffffff, 0xffffffffffffffff) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:24 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x5386, &(0x7f0000000040)) (async, rerun: 64) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async, rerun: 64) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x100) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@mpls_delroute={0x1f0, 0x19, 0x4, 0x70bd2a, 0x25dfdbfb, {0x1c, 0x84, 0x80, 0x1f, 0xff, 0x1, 0xc8, 0x6}, [@RTA_NEWDST={0x84, 0x13, [{0x1ff, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1000}, {0x1ff, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {}, {0x1}, {0x4}, {0x8}, {0xff, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x83f}, {0x100, 0x0, 0x1}, {0x3}, {0x1000}, {0x200, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xfff}, {0x0, 0x0, 0x1}, {0xff279}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x800}, {0x1000}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9}, {0x8}, {0x7, 0x0, 0x1}, {0x60dfe, 0x0, 0x1}, {0x7d39}, {0x6}, {0x1}, {0xd17f2, 0x0, 0x1}, {0x7fff}, {0x81}, {0x48000}, {0x7f, 0x0, 0x1}, {0x5}, {0x401, 0x0, 0x1}, {0x3ff}, {0x3, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x1}, {0x34, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}, {0xa21, 0x0, 0x1}, {0x1}, {0x4}, {0x200, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x4}, {0x4}, {0x39c}]}, @RTA_OIF={0x8, 0x4, r4}, @RTA_MULTIPATH={0xc, 0x9, {0xfff, 0x10, 0x1, r4}}, @RTA_VIA={0x14, 0x12, {0x10, "170fc336595890da8d4d9ecace3b"}}, @RTA_NEWDST={0x84, 0x13, [{0x8}, {0xac}, {0x9, 0x0, 0x1}, {0x800, 0x0, 0x1}, {0x1}, {0x640b, 0x0, 0x1}, {0x2}, {0xffffa}, {0x81}, {0x5}, {0x3}, {0x5}, {0x3, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3}, {0x5}, {0x8}, {0x9309}, {0x1000}, {0xf68}, {0x4e4}, {0x8001}, {0x81}, {0x800, 0x0, 0x1}, {0xc0000}, {0x8, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x698, 0x1, 0x0, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "e9d9caecbfe3c64701aa5bc4ec50"}}]}, 0x1f0}}, 0x0) ioctl$TIOCSTI(r2, 0x541d, 0x0) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (rerun: 64) 20:36:24 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x145000) r2 = dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001440), 0x143900, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) write$cgroup_int(r2, &(0x7f0000001400)=0x3, 0x12) readv(r0, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/24, 0x18}, {&(0x7f00000011c0)=""/35, 0x23}, {&(0x7f0000001200)=""/90, 0x5a}, {&(0x7f0000001280)=""/198, 0xc6}], 0x5) 20:36:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) (async) io_setup(0x1, &(0x7f0000000000)=0x0) (async) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r6 = openat(r2, &(0x7f00000003c0)='./file0\x00', 0x414080, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000800), 0x18240, 0x0) (async) r8 = socket$isdn(0x22, 0x3, 0x22) io_submit(r4, 0x8, &(0x7f0000000980)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x7f, r5, &(0x7f0000000140)="c220f0cee12a60ce24685836f4556e5e59aa9647d603a70f809769b8477f80e0b26ea980622462a6973dfc703998b4ab22bbf48128ef5bf50f1048820a63396027ce568f8b6c9a039081a8355b8461d4dacc4f2d83a2f0d9e0962302c7ea1ca4d46820bbb6890bee8deebfb3abbbfbf7b35ccc11201b0590ad910ffe09435c8fca3fb63edae74cc5927e3d7c9e99f12154f87f253b363cc4a5513fbc748bf2029d68cd40731aa34289b646e4c64ebee1d0c316c29b1024e6a68ca02461742b559b015911aeb9d056121f389cb62f34d910e2a023", 0xd4, 0xa5, 0x0, 0x1, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x1000, r0, &(0x7f0000000240)="9e4fd9ced59271895008d05de6101b83bef4184f76b239dd2c9e22def0f1", 0x1e, 0x8, 0x0, 0x2, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f00000002c0)="6516fe2ac885efb925525d4708a9fee49e894c9e2788f6e7ffcb5ee87b8aad95caa37ad6e24dc447efa7f2f1022f98c1f7e98cb47c07823d5dde92c2b2d3fa252924feee80cc554686e391f23ca6c55db732c4f1e4d5b952e8a590d9845ddeaf911535178106c3c4bc775b7eb025ef574d1fef181e036ef88bcbf1f9abec7b042b6b05ea97dcbbfb3aab4dd574045b03f3e95ad5d687c27751e221b5313e92902177cb78c50f59445c44abd34189230cb7c6e8c5877113ffbef4cc3feec9bbf8a5a9c89c1b1142920461ddb3b85cd7b302f934557b86c880a83f20f9781c5c", 0xdf, 0x2, 0x0, 0x6, r6}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x1, r2, &(0x7f0000000440)="83937cf65441a961a6bf7e31bd15620d331e62cea5fa5e51725327913f5934e6fded14bc2e5f18d214eba12ef035396d80f9e306b66e543a207da840c8ed38dbf94d69378d2db4f4be5d274eb890273938df6b226899249816353a31dde43bdfa3c4d9ff65abe8980319c6f20cb1bd7a04f3da394bc679628caf5c5121967127d6736f79e3cc496146f1687a573573b687ec50015be1c512eb465c2c66956e0dcd8bd630f4d0820b8fdaffeda29f324aedfe8f3d972d06baef62722d2dc52231d00baabaa2908bdf4447828aece46b0e5527ca3945088da96e2a458fe552c93b44", 0xe1, 0x3, 0x0, 0x2, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)="d45008b8ef1a68201c1a0ec232c4a832329c80867e11fb66a80a4e5354afccac27a9bcde73f3421c47b422663879b2e91acd529a2ea3939c8dc381940733643506e89d2b08cb9c42c97b8ddf513ad70382435136588b9d70480abd185b0bfe1c86a4b311108b159b45cefc28c7", 0x6d, 0x9, 0x0, 0x0, r2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000640)="b908535a630cac2cc261885c23e6a4cf180c6d6b8a378db015bdd33d43c21136b37a8585862bd0facebbbfc17bb67b5603190da41de1caba8b77437bdb2ff4bd76201720f70757cd220c84b1401182da12ab63afe4d465800e9589b361ebf74d5146ab3a8ec2b60658b59f07b477fcf9f77b5372", 0x74, 0x4, 0x0, 0x0, r2}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x2, r2, &(0x7f0000000700)="1b58916d3674ffadac9a0e2b3a915d09fe58b916f283602bdd7d377b68a3d2bf2a8f166b57d3d25e2d7c1982bea3cac2d36226910304e1ab19714af7c576d34896e533be6a7f799892e0ba315cef79c7d37a693e1c7e5449ad6f61fd69c2d70e555dad6edd6f67757675165395ec050521559e2fa5dfd7ff8f146978e947733da7402f54b075e3baef167d1b810ef288a933a6a46aa3af18aee26b5379fd421498b664284a04d05f7aa358c4957d6d63b4d688a810bc030552f0a5078a8b45df0c923ef66a77d1b0ee56e6f83179fd31481e1a37d02567dcf05b9b9fa74724b4e7b4b8071a98e6fb2838aa968f76e99b96ae9e5ff2ae", 0xf6, 0x8001, 0x0, 0x3, r7}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x2, 0x8000, r8, &(0x7f0000000880)="91c1318e2f143f102d6247fac58a7e1a499365540c999a34da6b14df84967a5a8e66f00600ff16a3dc21da673ecd1c82471565c63a33bda0b17e441de53d46ce109789aac202a31a08b2e0596e990d55b9d3368d7d03085ab0ac4265d5528fe21732d6f3c619137bb3ee638bcb0be4b431c22a0e56c12839f7079948f96bdb09a6", 0x81, 0x8000000000000001, 0x0, 0xd8620d4dff27aa3a, r2}]) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000009c0)=0x80) r9 = syz_open_pts(r3, 0x0) dup3(r9, r3, 0x0) (async) syz_open_pts(r9, 0x80400) 20:36:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) (async) io_setup(0x1, &(0x7f0000000000)=0x0) (async) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r6 = openat(r2, &(0x7f00000003c0)='./file0\x00', 0x414080, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000800), 0x18240, 0x0) (async) r8 = socket$isdn(0x22, 0x3, 0x22) io_submit(r4, 0x8, &(0x7f0000000980)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x7f, r5, &(0x7f0000000140)="c220f0cee12a60ce24685836f4556e5e59aa9647d603a70f809769b8477f80e0b26ea980622462a6973dfc703998b4ab22bbf48128ef5bf50f1048820a63396027ce568f8b6c9a039081a8355b8461d4dacc4f2d83a2f0d9e0962302c7ea1ca4d46820bbb6890bee8deebfb3abbbfbf7b35ccc11201b0590ad910ffe09435c8fca3fb63edae74cc5927e3d7c9e99f12154f87f253b363cc4a5513fbc748bf2029d68cd40731aa34289b646e4c64ebee1d0c316c29b1024e6a68ca02461742b559b015911aeb9d056121f389cb62f34d910e2a023", 0xd4, 0xa5, 0x0, 0x1, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x1000, r0, &(0x7f0000000240)="9e4fd9ced59271895008d05de6101b83bef4184f76b239dd2c9e22def0f1", 0x1e, 0x8, 0x0, 0x2, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f00000002c0)="6516fe2ac885efb925525d4708a9fee49e894c9e2788f6e7ffcb5ee87b8aad95caa37ad6e24dc447efa7f2f1022f98c1f7e98cb47c07823d5dde92c2b2d3fa252924feee80cc554686e391f23ca6c55db732c4f1e4d5b952e8a590d9845ddeaf911535178106c3c4bc775b7eb025ef574d1fef181e036ef88bcbf1f9abec7b042b6b05ea97dcbbfb3aab4dd574045b03f3e95ad5d687c27751e221b5313e92902177cb78c50f59445c44abd34189230cb7c6e8c5877113ffbef4cc3feec9bbf8a5a9c89c1b1142920461ddb3b85cd7b302f934557b86c880a83f20f9781c5c", 0xdf, 0x2, 0x0, 0x6, r6}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x1, r2, &(0x7f0000000440)="83937cf65441a961a6bf7e31bd15620d331e62cea5fa5e51725327913f5934e6fded14bc2e5f18d214eba12ef035396d80f9e306b66e543a207da840c8ed38dbf94d69378d2db4f4be5d274eb890273938df6b226899249816353a31dde43bdfa3c4d9ff65abe8980319c6f20cb1bd7a04f3da394bc679628caf5c5121967127d6736f79e3cc496146f1687a573573b687ec50015be1c512eb465c2c66956e0dcd8bd630f4d0820b8fdaffeda29f324aedfe8f3d972d06baef62722d2dc52231d00baabaa2908bdf4447828aece46b0e5527ca3945088da96e2a458fe552c93b44", 0xe1, 0x3, 0x0, 0x2, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)="d45008b8ef1a68201c1a0ec232c4a832329c80867e11fb66a80a4e5354afccac27a9bcde73f3421c47b422663879b2e91acd529a2ea3939c8dc381940733643506e89d2b08cb9c42c97b8ddf513ad70382435136588b9d70480abd185b0bfe1c86a4b311108b159b45cefc28c7", 0x6d, 0x9, 0x0, 0x0, r2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000640)="b908535a630cac2cc261885c23e6a4cf180c6d6b8a378db015bdd33d43c21136b37a8585862bd0facebbbfc17bb67b5603190da41de1caba8b77437bdb2ff4bd76201720f70757cd220c84b1401182da12ab63afe4d465800e9589b361ebf74d5146ab3a8ec2b60658b59f07b477fcf9f77b5372", 0x74, 0x4, 0x0, 0x0, r2}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x2, r2, &(0x7f0000000700)="1b58916d3674ffadac9a0e2b3a915d09fe58b916f283602bdd7d377b68a3d2bf2a8f166b57d3d25e2d7c1982bea3cac2d36226910304e1ab19714af7c576d34896e533be6a7f799892e0ba315cef79c7d37a693e1c7e5449ad6f61fd69c2d70e555dad6edd6f67757675165395ec050521559e2fa5dfd7ff8f146978e947733da7402f54b075e3baef167d1b810ef288a933a6a46aa3af18aee26b5379fd421498b664284a04d05f7aa358c4957d6d63b4d688a810bc030552f0a5078a8b45df0c923ef66a77d1b0ee56e6f83179fd31481e1a37d02567dcf05b9b9fa74724b4e7b4b8071a98e6fb2838aa968f76e99b96ae9e5ff2ae", 0xf6, 0x8001, 0x0, 0x3, r7}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x2, 0x8000, r8, &(0x7f0000000880)="91c1318e2f143f102d6247fac58a7e1a499365540c999a34da6b14df84967a5a8e66f00600ff16a3dc21da673ecd1c82471565c63a33bda0b17e441de53d46ce109789aac202a31a08b2e0596e990d55b9d3368d7d03085ab0ac4265d5528fe21732d6f3c619137bb3ee638bcb0be4b431c22a0e56c12839f7079948f96bdb09a6", 0x81, 0x8000000000000001, 0x0, 0xd8620d4dff27aa3a, r2}]) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000009c0)=0x80) r9 = syz_open_pts(r3, 0x0) dup3(r9, r3, 0x0) (async) syz_open_pts(r9, 0x80400) 20:36:25 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000001762c74e42d132f0eb5eafaffceef88e1a77e9ededae726278010000000000008055b2b9c3e39b0c7ef4cf7847e1a5c63454f2b72b315d9d"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x8400) fallocate(r3, 0x18, 0x7fffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000001762c74e42d132f0eb5eafaffceef88e1a77e9ededae726278010000000000008055b2b9c3e39b0c7ef4cf7847e1a5c63454f2b72b315d9d"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x8400) (async) fallocate(r3, 0x18, 0x7fffffffffffffff, 0xffffffffffffffff) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x1ff, 0x1, 0x76d, 0x8, 0x5, "a7cdc916f1122e24f367cabc5459d027e2c684"}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)=""/98) 20:36:25 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x1200}}) 20:36:25 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000006954fa00000000000000000400000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x80000001, 0x1, 0x8}, 0x9, 0x3, 0x9}) 20:36:25 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x4800}}) 20:36:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x2, 0x1}) 20:36:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYRES32], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x1ff, 0x1, 0x76d, 0x8, 0x5, "a7cdc916f1122e24f367cabc5459d027e2c684"}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)=""/98) 20:36:25 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x4c00}}) 20:36:25 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x145000) r2 = dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001440), 0x143900, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) (async) write$cgroup_int(r2, &(0x7f0000001400)=0x3, 0x12) (async) readv(r0, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/24, 0x18}, {&(0x7f00000011c0)=""/35, 0x23}, {&(0x7f0000001200)=""/90, 0x5a}, {&(0x7f0000001280)=""/198, 0xc6}], 0x5) 20:36:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r6, 0x4, 0x2, 0x2b, 0x7fff, 0x48, @private0, @remote, 0x40, 0x10, 0x1, 0xceb}}) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:25 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000006954fa00000000000000000400000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x80000001, 0x1, 0x8}, 0x9, 0x3, 0x9}) 20:36:25 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x6800}}) 20:36:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x1ff, 0x1, 0x76d, 0x8, 0x5, "a7cdc916f1122e24f367cabc5459d027e2c684"}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)=""/98) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x1ff, 0x1, 0x76d, 0x8, 0x5, "a7cdc916f1122e24f367cabc5459d027e2c684"}) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)=""/98) (async) 20:36:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYRES32], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:25 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x6c00}}) 20:36:25 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000006954fa00000000000000000400000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x80000001, 0x1, 0x8}, 0x9, 0x3, 0x9}) 20:36:25 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18001e3c00000000000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='svc_alloc_arg_err\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:25 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x7400}}) 20:36:25 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x145000) r2 = dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001440), 0x143900, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) write$cgroup_int(r2, &(0x7f0000001400)=0x3, 0x12) readv(r0, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/24, 0x18}, {&(0x7f00000011c0)=""/35, 0x23}, {&(0x7f0000001200)=""/90, 0x5a}, {&(0x7f0000001280)=""/198, 0xc6}], 0x5) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x145000) (async) dup3(r1, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001440), 0x143900, 0x0) (async) ioctl$TCXONC(r3, 0x540a, 0x2) (async) write$cgroup_int(r2, &(0x7f0000001400)=0x3, 0x12) (async) readv(r0, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/24, 0x18}, {&(0x7f00000011c0)=""/35, 0x23}, {&(0x7f0000001200)=""/90, 0x5a}, {&(0x7f0000001280)=""/198, 0xc6}], 0x5) (async) 20:36:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:25 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18001e3c00000000000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='svc_alloc_arg_err\x00', r0}, 0x10) (async, rerun: 32) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r6, 0x4, 0x2, 0x2b, 0x7fff, 0x48, @private0, @remote, 0x40, 0x10, 0x1, 0xceb}}) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r2, 0x0) (async) dup3(r3, r2, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'macsec0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r6, 0x4, 0x2, 0x2b, 0x7fff, 0x48, @private0, @remote, 0x40, 0x10, 0x1, 0xceb}}) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 20:36:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x7a00}}) 20:36:26 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18001e3c00000000000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='svc_alloc_arg_err\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18001e3c00000000000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='svc_alloc_arg_err\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:26 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000140)=0x7) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYRES32], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x541b, 0x0) (rerun: 64) 20:36:26 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x7, &(0x7f00000000c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0x5, 0x1, 0x2, 0xc, 0xffffffffffffffff}, @generic={0xff, 0x8, 0x1, 0x4, 0x2}, @generic={0x40, 0x5, 0x0, 0x401, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xae}], &(0x7f0000000100)='syzkaller\x00', 0x100, 0x57, &(0x7f00000002c0)=""/87, 0x41100, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x1000}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)) 20:36:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x1000000}}) 20:36:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x2000000}}) 20:36:26 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x7, &(0x7f00000000c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0x5, 0x1, 0x2, 0xc, 0xffffffffffffffff}, @generic={0xff, 0x8, 0x1, 0x4, 0x2}, @generic={0x40, 0x5, 0x0, 0x401, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xae}], &(0x7f0000000100)='syzkaller\x00', 0x100, 0x57, &(0x7f00000002c0)=""/87, 0x41100, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x1000}, 0x10, 0xffffffffffffffff, r3}, 0x80) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)) 20:36:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x3000000}}) 20:36:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x541d, 0x0) (rerun: 64) 20:36:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async, rerun: 32) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x5) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r6, 0x4, 0x2, 0x2b, 0x7fff, 0x48, @private0, @remote, 0x40, 0x10, 0x1, 0xceb}}) (rerun: 32) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:26 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x7, &(0x7f00000000c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0x5, 0x1, 0x2, 0xc, 0xffffffffffffffff}, @generic={0xff, 0x8, 0x1, 0x4, 0x2}, @generic={0x40, 0x5, 0x0, 0x401, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xae}], &(0x7f0000000100)='syzkaller\x00', 0x100, 0x57, &(0x7f00000002c0)=""/87, 0x41100, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x1000}, 0x10, 0xffffffffffffffff, r3}, 0x80) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x7, &(0x7f00000000c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0x5, 0x1, 0x2, 0xc, 0xffffffffffffffff}, @generic={0xff, 0x8, 0x1, 0x4, 0x2}, @generic={0x40, 0x5, 0x0, 0x401, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xae}], &(0x7f0000000100)='syzkaller\x00', 0x100, 0x57, &(0x7f00000002c0)=""/87, 0x41100, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x1000}, 0x10, 0xffffffffffffffff, r3}, 0x80) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x4000000}}) 20:36:27 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000140)=0x7) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r2, 0x0) (async) dup3(r3, r2, 0x0) (async) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000140)=0x7) (async) dup3(r1, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) 20:36:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x0, 0x101}}) 20:36:27 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x5000000}}) 20:36:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x4}) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x7, 0xfff, 0xd22, 0x9, 0x8, "2d32e0301dd57fd33179fff80f3c9a047a91bb"}) dup3(r1, r0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x5, 0x7f42, 0x100, 0x62, 0x1b, "606b4c025840d63f57fc07eec27502e668eefc"}) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/go7007_usb', 0x1, 0x100) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000040)="c81f515710cb72557c35dd2511e060fd4a31bb3c8cbb84701d524a25f1e28ea4789ec41306faacdf966f9c88490b631063db0d9335cf3aef8a86f470642b9c3b03ce65192357960c95a69eee5a0f6c6c3a8d231dbcbf") sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x8040) syz_open_pts(r1, 0x149001) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r0, 0x0) dup3(r4, r0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)) r6 = syz_open_pts(r5, 0x0) dup3(r6, r5, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000240)=0x7f) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x0, 0x101}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x0, 0x101}}) (async) 20:36:27 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x6000000}}) 20:36:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x0, 0x101}}) 20:36:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1f1000, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 20:36:27 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x7000000}}) 20:36:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4d, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='gpio_direction\x00', r3}, 0x10) syz_clone3(&(0x7f0000000440)={0x1160000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x3b}, &(0x7f0000000380)=""/146, 0x92, &(0x7f0000000100)=""/31, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r4, r1, 0x0, 0x3, &(0x7f0000000300)='}[\x00'}, 0x30) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0xc0f85403, &(0x7f0000000000)) 20:36:27 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) (async) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000140)=0x7) (async) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4d, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='gpio_direction\x00', r3}, 0x10) syz_clone3(&(0x7f0000000440)={0x1160000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x3b}, &(0x7f0000000380)=""/146, 0x92, &(0x7f0000000100)=""/31, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r4, r1, 0x0, 0x3, &(0x7f0000000300)='}[\x00'}, 0x30) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4d, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='gpio_direction\x00', r3}, 0x10) (async) syz_clone3(&(0x7f0000000440)={0x1160000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3b}, &(0x7f0000000380)=""/146, 0x92, &(0x7f0000000100)=""/31, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r4, r1, 0x0, 0x3, &(0x7f0000000300)='}[\x00'}, 0x30) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:27 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x8000000}}) 20:36:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1f1000, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 20:36:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async, rerun: 32) r1 = syz_open_pts(r0, 0x0) (rerun: 32) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x4}) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x7, 0xfff, 0xd22, 0x9, 0x8, "2d32e0301dd57fd33179fff80f3c9a047a91bb"}) (async) dup3(r1, r0, 0x0) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x5, 0x7f42, 0x100, 0x62, 0x1b, "606b4c025840d63f57fc07eec27502e668eefc"}) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/go7007_usb', 0x1, 0x100) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (rerun: 64) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) (async) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000040)="c81f515710cb72557c35dd2511e060fd4a31bb3c8cbb84701d524a25f1e28ea4789ec41306faacdf966f9c88490b631063db0d9335cf3aef8a86f470642b9c3b03ce65192357960c95a69eee5a0f6c6c3a8d231dbcbf") (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x8040) syz_open_pts(r1, 0x149001) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r4 = syz_open_pts(r0, 0x0) dup3(r4, r0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)) r6 = syz_open_pts(r5, 0x0) dup3(r6, r5, 0x0) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000240)=0x7f) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:28 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4d, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='gpio_direction\x00', r3}, 0x10) syz_clone3(&(0x7f0000000440)={0x1160000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x3b}, &(0x7f0000000380)=""/146, 0x92, &(0x7f0000000100)=""/31, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r4, r1, 0x0, 0x3, &(0x7f0000000300)='}[\x00'}, 0x30) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4d, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='gpio_direction\x00', r3}, 0x10) (async) syz_clone3(&(0x7f0000000440)={0x1160000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3b}, &(0x7f0000000380)=""/146, 0x92, &(0x7f0000000100)=""/31, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r4, r1, 0x0, 0x3, &(0x7f0000000300)='}[\x00'}, 0x30) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x9000000}}) 20:36:28 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xf9bbfea364e26b68}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0xb}}}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x4}) r5 = syz_open_pts(r1, 0x0) r6 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r6, 0x5386, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000400)) dup3(r5, r1, 0x0) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f00000001c0)={0x81, "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"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "f300638000000000000000100001004000"}) r7 = syz_open_pts(r0, 0x200400) r8 = dup3(r6, r6, 0x80000) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000580)={0x39, 0x9, 0x2, "a70f44b3ed6da281138792180ba9822832b78086ee146826cbeca11b460cf4a42690a171b7bd229bec3a611d1085a17bdeb650f4c56a7c64e2"}) dup3(r7, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1f1000, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 20:36:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xa000000}}) 20:36:28 executing program 5: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000220000000a00010077b1485f1305"], 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x240000d0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000100)=""/4096) 20:36:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xb000000}}) 20:36:28 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) r5 = dup(r0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000002e2f66006c65300023803ce59ee3c99b43b5ab8d7afee1af3d814ecf7cac24ee50983fe2465084f49e9a10105759a529c5"]) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/class/pvrusb2', 0x800c3, 0x22) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000005c0)=0xa82, 0x4) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x1, 0xc9, 0x4, 0x80, 0x0, 0x6, 0x5e8c58e39da05beb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x400, 0xff}, 0x40300, 0x7, 0x4, 0x1, 0x9, 0x3, 0x1, 0x0, 0x8000, 0x0, 0x1f0}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0xb, 0x1, 0x0, r3}, @generic={0x1, 0x8, 0xf, 0x3f, 0xfff}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0xf3, &(0x7f0000000380)=""/243, 0x41100, 0x4b9af61647b214fd, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000100)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x7, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, r5, 0x1, 0xffffffffffffffff, r7, 0xffffffffffffffff, r8, r9]}, 0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:28 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) r5 = dup(r0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000002e2f66006c65300023803ce59ee3c99b43b5ab8d7afee1af3d814ecf7cac24ee50983fe2465084f49e9a10105759a529c5"]) (async, rerun: 64) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/class/pvrusb2', 0x800c3, 0x22) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000005c0)=0xa82, 0x4) (async) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x1, 0xc9, 0x4, 0x80, 0x0, 0x6, 0x5e8c58e39da05beb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x400, 0xff}, 0x40300, 0x7, 0x4, 0x1, 0x9, 0x3, 0x1, 0x0, 0x8000, 0x0, 0x1f0}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0xb, 0x1, 0x0, r3}, @generic={0x1, 0x8, 0xf, 0x3f, 0xfff}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0xf3, &(0x7f0000000380)=""/243, 0x41100, 0x4b9af61647b214fd, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000100)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x7, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, r5, 0x1, 0xffffffffffffffff, r7, 0xffffffffffffffff, r8, r9]}, 0x80) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/go7007_usb', 0x1, 0x100) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) (async) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000040)="c81f515710cb72557c35dd2511e060fd4a31bb3c8cbb84701d524a25f1e28ea4789ec41306faacdf966f9c88490b631063db0d9335cf3aef8a86f470642b9c3b03ce65192357960c95a69eee5a0f6c6c3a8d231dbcbf") (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x8040) syz_open_pts(r1, 0x149001) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r0, 0x0) dup3(r4, r0, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)) (async) r6 = syz_open_pts(r5, 0x0) dup3(r6, r5, 0x0) (async, rerun: 64) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000240)=0x7f) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async, rerun: 64) r1 = syz_open_pts(r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x4}) (async) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) (async, rerun: 32) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x7, 0xfff, 0xd22, 0x9, 0x8, "2d32e0301dd57fd33179fff80f3c9a047a91bb"}) (async, rerun: 32) dup3(r1, r0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x5, 0x7f42, 0x100, 0x62, 0x1b, "606b4c025840d63f57fc07eec27502e668eefc"}) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xc000000}}) 20:36:28 executing program 5: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r2) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000220000000a00010077b1485f1305"], 0x20}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x240000d0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000100)=""/4096) 20:36:28 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) (async) r5 = dup(r0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000002e2f66006c65300023803ce59ee3c99b43b5ab8d7afee1af3d814ecf7cac24ee50983fe2465084f49e9a10105759a529c5"]) (async) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/class/pvrusb2', 0x800c3, 0x22) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000005c0)=0xa82, 0x4) (async) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x1, 0xc9, 0x4, 0x80, 0x0, 0x6, 0x5e8c58e39da05beb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x400, 0xff}, 0x40300, 0x7, 0x4, 0x1, 0x9, 0x3, 0x1, 0x0, 0x8000, 0x0, 0x1f0}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0xb, 0x1, 0x0, r3}, @generic={0x1, 0x8, 0xf, 0x3f, 0xfff}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0xf3, &(0x7f0000000380)=""/243, 0x41100, 0x4b9af61647b214fd, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000100)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x7, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, r5, 0x1, 0xffffffffffffffff, r7, 0xffffffffffffffff, r8, r9]}, 0x80) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/15], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setreuid(0x0, 0xee00) setpriority(0x2, 0x0, 0x802208f0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='writeback_bdi_register\x00', r1}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) 20:36:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xd000000}}) 20:36:29 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xf9bbfea364e26b68}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0xb}}}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x4}) r5 = syz_open_pts(r1, 0x0) r6 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r6, 0x5386, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000400)) dup3(r5, r1, 0x0) (async) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f00000001c0)={0x81, "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"}) (async) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "f300638000000000000000100001004000"}) (async) r7 = syz_open_pts(r0, 0x200400) (async) r8 = dup3(r6, r6, 0x80000) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000580)={0x39, 0x9, 0x2, "a70f44b3ed6da281138792180ba9822832b78086ee146826cbeca11b460cf4a42690a171b7bd229bec3a611d1085a17bdeb650f4c56a7c64e2"}) (async) dup3(r7, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:29 executing program 5: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000220000000a00010077b1485f1305"], 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x240000d0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000100)=""/4096) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000220000000a00010077b1485f1305"], 0x20}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x240000d0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000100)=""/4096) (async) 20:36:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) syz_open_pts(r0, 0x801) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x16b, 0x5, &(0x7f0000000140)}) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$VT_WAITACTIVE(r1, 0x5607) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80}) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/15], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setreuid(0x0, 0xee00) (async) setpriority(0x2, 0x0, 0x802208f0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='writeback_bdi_register\x00', r1}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) 20:36:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40000, 0x11c, 0x11}, 0x18) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x200, 0x0, 0x6, 0x0, 0x16, "310718fc996ccdae2727b0992565389d63855f"}) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x7, 0xa7e, 0x8000, 0x10001, 0x13, "05b84f302f47e0c0be300fba3bf95ae678ce9d"}) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xe000000}}) 20:36:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40000, 0x11c, 0x11}, 0x18) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x200, 0x0, 0x6, 0x0, 0x16, "310718fc996ccdae2727b0992565389d63855f"}) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x7, 0xa7e, 0x8000, 0x10001, 0x13, "05b84f302f47e0c0be300fba3bf95ae678ce9d"}) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x10000000}}) 20:36:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/15], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setreuid(0x0, 0xee00) setpriority(0x2, 0x0, 0x802208f0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x100000000000000, 0x12) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='writeback_bdi_register\x00', r1}, 0x10) (async, rerun: 64) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) 20:36:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x11000000}}) 20:36:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40000, 0x11c, 0x11}, 0x18) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x200, 0x0, 0x6, 0x0, 0x16, "310718fc996ccdae2727b0992565389d63855f"}) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x7, 0xa7e, 0x8000, 0x10001, 0x13, "05b84f302f47e0c0be300fba3bf95ae678ce9d"}) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:29 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async, rerun: 64) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (rerun: 64) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xf9bbfea364e26b68}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0xb}}}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x4}) r5 = syz_open_pts(r1, 0x0) (async, rerun: 32) r6 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (rerun: 32) ioctl$SG_GET_NUM_WAITING(r6, 0x5386, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000400)) (async, rerun: 32) dup3(r5, r1, 0x0) (async, rerun: 32) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f00000001c0)={0x81, "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"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "f300638000000000000000100001004000"}) (async, rerun: 32) r7 = syz_open_pts(r0, 0x200400) (async, rerun: 32) r8 = dup3(r6, r6, 0x80000) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000580)={0x39, 0x9, 0x2, "a70f44b3ed6da281138792180ba9822832b78086ee146826cbeca11b460cf4a42690a171b7bd229bec3a611d1085a17bdeb650f4c56a7c64e2"}) (async) dup3(r7, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:29 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000010047000000950001000000000000000000001000000004000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='fscache_invalidate\x00', r2}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) syz_open_pts(r0, 0x801) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x16b, 0x5, &(0x7f0000000140)}) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) syz_open_pts(r0, 0x801) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x16b, 0x5, &(0x7f0000000140)}) (async) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) (async) 20:36:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000040)={0x3, 0x0, 0x1000008c, 0x4, 0x17b, &(0x7f0000000500)}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x4, 0x10000, 0x0, 0x0, 0x7, "b10bc3e908f4d3cbf9b69fa0a303c9f1a6ee03"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000080)) 20:36:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x12000000}}) 20:36:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$VT_WAITACTIVE(r1, 0x5607) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80}) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$VT_WAITACTIVE(r1, 0x5607) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80}) (async) syz_open_pts(r0, 0x0) (async) dup3(r2, r0, 0x0) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 20:36:29 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000010047000000950001000000000000000000001000000004000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='fscache_invalidate\x00', r2}, 0x10) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:29 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000001c0)="95cd3310905581c20e05377b1d1c0fb764cf7f1cff723685d9ebb031fb74e588f09a03eebd9172b3addcff101627d96c9105079cc7c3e436deb5e5c2c957078cc9cb2a537b5b048b5d959c4ae6ea90293686b66227ff299486f228c9992127ca11387dd3f1c04e3eaa2ec22077a943446a4b5ae02d23f667dd4683d65a9d0bd860f2607c") r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x5386, &(0x7f0000000040)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000140)) dup3(r1, r0, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xc0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) syz_open_pts(r0, 0x801) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x16b, 0x5, &(0x7f0000000140)}) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) syz_open_pts(r0, 0x801) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x16b, 0x5, &(0x7f0000000140)}) (async) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) (async) 20:36:29 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000010047000000950001000000000000000000001000000004000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='fscache_invalidate\x00', r2}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000010047000000950001000000000000000000001000000004000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='fscache_invalidate\x00', r2}, 0x10) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x48000000}}) 20:36:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xfffffffffffffdb8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r2}) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@RTM_NEWNSID={0x34, 0x58, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x2000011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x10000000}) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async, rerun: 64) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (rerun: 64) ioctl$VT_WAITACTIVE(r1, 0x5607) (async, rerun: 32) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (rerun: 32) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80}) (async) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x4c000000}}) 20:36:30 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x3, 0xfffffffe, 0x0, 0x7}}) 20:36:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000040)={0x3, 0x0, 0x1000008c, 0x4, 0x17b, &(0x7f0000000500)}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x4, 0x10000, 0x0, 0x0, 0x7, "b10bc3e908f4d3cbf9b69fa0a303c9f1a6ee03"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000040)={0x3, 0x0, 0x1000008c, 0x4, 0x17b, &(0x7f0000000500)}) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x4, 0x10000, 0x0, 0x0, 0x7, "b10bc3e908f4d3cbf9b69fa0a303c9f1a6ee03"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r1, 0x0) (async) dup3(r2, r1, 0x0) (async) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000080)) (async) 20:36:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x68000000}}) 20:36:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xfffffffffffffdb8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r2}) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@RTM_NEWNSID={0x34, 0x58, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x2000011) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x10000000}) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:30 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x3, 0xfffffffe, 0x0, 0x7}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x3, 0xfffffffe, 0x0, 0x7}}) (async) 20:36:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private1, 0x0, 0x0, 0x4e22, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x6c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:30 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000001c0)="95cd3310905581c20e05377b1d1c0fb764cf7f1cff723685d9ebb031fb74e588f09a03eebd9172b3addcff101627d96c9105079cc7c3e436deb5e5c2c957078cc9cb2a537b5b048b5d959c4ae6ea90293686b66227ff299486f228c9992127ca11387dd3f1c04e3eaa2ec22077a943446a4b5ae02d23f667dd4683d65a9d0bd860f2607c") r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x5386, &(0x7f0000000040)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000140)) dup3(r1, r0, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xc0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000001c0)="95cd3310905581c20e05377b1d1c0fb764cf7f1cff723685d9ebb031fb74e588f09a03eebd9172b3addcff101627d96c9105079cc7c3e436deb5e5c2c957078cc9cb2a537b5b048b5d959c4ae6ea90293686b66227ff299486f228c9992127ca11387dd3f1c04e3eaa2ec22077a943446a4b5ae02d23f667dd4683d65a9d0bd860f2607c") (async) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r3, 0x5386, &(0x7f0000000040)) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000140)) (async) dup3(r1, r0, 0x0) (async) creat(&(0x7f0000000280)='./file0\x00', 0xc0) (async) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) 20:36:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xfffffffffffffdb8) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r2}) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@RTM_NEWNSID={0x34, 0x58, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x2000011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x10000000}) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:30 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x3, 0xfffffffe, 0x0, 0x7}}) 20:36:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x6c000000}}) 20:36:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x31}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x40) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x74000000}}) 20:36:30 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000001c0)="95cd3310905581c20e05377b1d1c0fb764cf7f1cff723685d9ebb031fb74e588f09a03eebd9172b3addcff101627d96c9105079cc7c3e436deb5e5c2c957078cc9cb2a537b5b048b5d959c4ae6ea90293686b66227ff299486f228c9992127ca11387dd3f1c04e3eaa2ec22077a943446a4b5ae02d23f667dd4683d65a9d0bd860f2607c") r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x5386, &(0x7f0000000040)) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000140)) (async) dup3(r1, r0, 0x0) (async, rerun: 64) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xc0) (rerun: 64) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000040)={0x3, 0x0, 0x1000008c, 0x4, 0x17b, &(0x7f0000000500)}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x4, 0x10000, 0x0, 0x0, 0x7, "b10bc3e908f4d3cbf9b69fa0a303c9f1a6ee03"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000040)={0x3, 0x0, 0x1000008c, 0x4, 0x17b, &(0x7f0000000500)}) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x4, 0x10000, 0x0, 0x0, 0x7, "b10bc3e908f4d3cbf9b69fa0a303c9f1a6ee03"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r1, 0x0) (async) dup3(r2, r1, 0x0) (async) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000080)) (async) 20:36:30 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0x100000000000000, 0x12) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0xc000, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) openat$cgroup_ro(r6, &(0x7f0000000bc0)='cpuacct.usage_user\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x8, 0x701b, 0x1, @loopback, @mcast2, 0x7800, 0x80, 0x0, 0x7}}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000240)=0x100000000000000, 0x12) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000240)=0x100000000000000, 0x12) openat$cgroup_ro(r13, &(0x7f0000000a80)='memory.current\x00', 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000b40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000c00)=@bridge_setlink={0xb0, 0x13, 0x4, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r9, 0x20000, 0x50ca0}, [@IFLA_NET_NS_FD={0x8, 0x1c, r11}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}, @IFLA_AF_SPEC={0x80, 0x1a, 0x0, 0x1, [@AF_INET6={0x70, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x8, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @alu={0x7, 0x0, 0x9, 0x8, 0x4, 0x1, 0x10}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1000}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x3f, &(0x7f00000000c0)=""/63, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x3, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r5, r14, 0xffffffffffffffff]}, 0x80) r15 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) recvmsg$can_bcm(r14, &(0x7f0000000ac0)={&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000700)=""/57, 0x39}, {&(0x7f0000000740)=""/37, 0x25}, {&(0x7f0000000780)=""/32, 0x20}, {&(0x7f0000000ac0)}], 0x6, &(0x7f0000000880)=""/217, 0xd9}, 0x2141) ioctl$SNDRV_TIMER_IOCTL_SELECT(r15, 0xc0f85403, &(0x7f0000000000)) 20:36:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x7a000000}}) 20:36:30 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xb0200, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x1) dup3(r2, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private1, 0x0, 0x0, 0x4e22, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x6c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private1, 0x0, 0x0, 0x4e22, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x6c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) dup3(r2, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 20:36:31 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0xc000, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) openat$cgroup_ro(r6, &(0x7f0000000bc0)='cpuacct.usage_user\x00', 0x0, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x8, 0x701b, 0x1, @loopback, @mcast2, 0x7800, 0x80, 0x0, 0x7}}) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000240)=0x100000000000000, 0x12) (async) openat$cgroup_ro(r13, &(0x7f0000000a80)='memory.current\x00', 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000b40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000c00)=@bridge_setlink={0xb0, 0x13, 0x4, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r9, 0x20000, 0x50ca0}, [@IFLA_NET_NS_FD={0x8, 0x1c, r11}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}, @IFLA_AF_SPEC={0x80, 0x1a, 0x0, 0x1, [@AF_INET6={0x70, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x8, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @alu={0x7, 0x0, 0x9, 0x8, 0x4, 0x1, 0x10}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1000}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x3f, &(0x7f00000000c0)=""/63, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x3, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r5, r14, 0xffffffffffffffff]}, 0x80) r15 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) recvmsg$can_bcm(r14, &(0x7f0000000ac0)={&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000700)=""/57, 0x39}, {&(0x7f0000000740)=""/37, 0x25}, {&(0x7f0000000780)=""/32, 0x20}, {&(0x7f0000000ac0)}], 0x6, &(0x7f0000000880)=""/217, 0xd9}, 0x2141) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r15, 0xc0f85403, &(0x7f0000000000)) 20:36:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x80, 0x18}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/arp\x00') r4 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x2, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r2}], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x2, 0x7ff}, 0x10, 0x0, r0, 0x0, &(0x7f00000004c0)=[r3, r4]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='f2fs_truncate_partial_nodes\x00', r0}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)) 20:36:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (rerun: 32) r1 = syz_open_pts(r0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x5) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x31}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x40) dup3(r1, r0, 0x0) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x541b, 0x0) (rerun: 64) 20:36:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCSTI(r0, 0x541d, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) 20:36:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x80, 0x18}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/arp\x00') r4 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x2, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r2}], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x2, 0x7ff}, 0x10, 0x0, r0, 0x0, &(0x7f00000004c0)=[r3, r4]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='f2fs_truncate_partial_nodes\x00', r0}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x80, 0x18}, 0xc) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='net/arp\x00') (async) dup(r1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x2, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r2}], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x2, 0x7ff}, 0x10, 0x0, r0, 0x0, &(0x7f00000004c0)=[r3, r4]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='f2fs_truncate_partial_nodes\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)) (async) 20:36:31 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0xc000, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) openat$cgroup_ro(r6, &(0x7f0000000bc0)='cpuacct.usage_user\x00', 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x8, 0x701b, 0x1, @loopback, @mcast2, 0x7800, 0x80, 0x0, 0x7}}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000240)=0x100000000000000, 0x12) (async) openat$cgroup_ro(r13, &(0x7f0000000a80)='memory.current\x00', 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000b40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000c00)=@bridge_setlink={0xb0, 0x13, 0x4, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r9, 0x20000, 0x50ca0}, [@IFLA_NET_NS_FD={0x8, 0x1c, r11}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}, @IFLA_AF_SPEC={0x80, 0x1a, 0x0, 0x1, [@AF_INET6={0x70, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x8, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @alu={0x7, 0x0, 0x9, 0x8, 0x4, 0x1, 0x10}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1000}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x3f, &(0x7f00000000c0)=""/63, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x3, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r5, r14, 0xffffffffffffffff]}, 0x80) (async) r15 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) recvmsg$can_bcm(r14, &(0x7f0000000ac0)={&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000700)=""/57, 0x39}, {&(0x7f0000000740)=""/37, 0x25}, {&(0x7f0000000780)=""/32, 0x20}, {&(0x7f0000000ac0)}], 0x6, &(0x7f0000000880)=""/217, 0xd9}, 0x2141) ioctl$SNDRV_TIMER_IOCTL_SELECT(r15, 0xc0f85403, &(0x7f0000000000)) 20:36:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCSTI(r0, 0x541d, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) 20:36:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private1, 0x0, 0x0, 0x4e22, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x6c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) (async, rerun: 64) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5437, 0x0) (rerun: 32) 20:36:31 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 20:36:31 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xb0200, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = syz_open_pts(r0, 0x0) (async) syz_open_pts(r0, 0x1) dup3(r2, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x80, 0x18}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/arp\x00') r4 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x2, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r2}], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x2, 0x7ff}, 0x10, 0x0, r0, 0x0, &(0x7f00000004c0)=[r3, r4]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='f2fs_truncate_partial_nodes\x00', r0}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x80, 0x18}, 0xc) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='net/arp\x00') (async) dup(r1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x2, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r2}], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x2, 0x7ff}, 0x10, 0x0, r0, 0x0, &(0x7f00000004c0)=[r3, r4]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='f2fs_truncate_partial_nodes\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)) (async) 20:36:31 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 20:36:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x0, 0xff}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x5386, &(0x7f0000000040)) creat(&(0x7f0000000080)='./file0\x00', 0x148) r4 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x5386, &(0x7f0000000040)) dup3(r1, r4, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 20:36:31 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 20:36:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x31}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x40) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x5) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x31}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x40) (async) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) (async) 20:36:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000d024a81bc46e5eb68b155e3b1a97b489eeebe6635bfa6f1b866c927c0a5d75c2624e874633d5fa9dcb786ccf95cf3944a19a1a9a8259cf618b21c11bbc0f9a8363", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000050001000000000008000800ac1414bb08000200000000001400060000000000000000000000ffffac141400080007007f000001"], 0x48}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x48}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000220000000a00010077b1485f1305"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000380)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x20, r7, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r9, 0x541d, 0x0) 20:36:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0xa, 0x9, 0xfffffffffffffffc, 0x4}, @generic={0x0, 0x8, 0x1, 0x4, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:31 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xb0200, 0x0) (rerun: 64) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x1) (async) dup3(r2, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x0, 0xff}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x5386, &(0x7f0000000040)) (async) creat(&(0x7f0000000080)='./file0\x00', 0x148) (async) r4 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x5386, &(0x7f0000000040)) (async) dup3(r1, r4, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 20:36:31 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251, 0x0, 0x0, '\x00', 0x0, 0x21}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="85000000860000009500fd9f000000008a479a9cc9ca135552516c6a61eb9c85eee435df8b397697a17981c301f2daa876d6451fcc6ea8064707b82c5e9cc34193"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc2, &(0x7f00000009c0)=""/194, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000400)={@private0, 0x5, r5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000778bab7c43cee6580254a275000000ad15890d99650000"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', r5, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r6, r2}, 0x80) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x9, &(0x7f0000000680)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0xfffffffd, 0x6, 0x3ff, 0x4}, 0x10, r6, r7, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xe, 0x9, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000005000000000000000101000085200000020000008d38feffffffffff950000000000000018680000050000000000000004e70000dc702000f0ffffff9500000000000000"], &(0x7f0000000980)='GPL\x00', 0x80, 0x28, &(0x7f0000000c40)=""/40, 0x41000, 0x11, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r6}, 0x80) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r8}, 0x10) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x3, 0x10}, 0xc) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xa, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0x4, 0x8, 0x2, 0xffffffffffffffe0, 0x77387f96da588ff8}, @map_fd={0x18, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x5, 0xd, 0xf, 0x9}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x18, '\x00', r5, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x34, 0x10, &(0x7f0000000540)={0x4, 0x8, 0x1f, 0x2}, 0x10, r6, r8, 0x0, &(0x7f0000000640)=[r1, r9, r10, 0x1, 0x1]}, 0x80) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @jmp={0x5, 0x1, 0x2, 0x8, 0x8, 0xfffffffffffffff0, 0x1}, @alu={0x7, 0x0, 0x2, 0xa, 0xa, 0x6, 0xfffffffffffffff0}, @generic={0x7, 0xf, 0x6, 0x7, 0x400}, @generic={0x0, 0x2, 0x4, 0x6, 0xab}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x86, &(0x7f0000000380)=""/134, 0x40f00, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x8, 0x6, 0x8001}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, r12]}, 0x80) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r13, 0xc0f85403, &(0x7f0000000000)) 20:36:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0xa, 0x9, 0xfffffffffffffffc, 0x4}, @generic={0x0, 0x8, 0x1, 0x4, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x0, 0xff}) (async) r1 = syz_open_pts(r0, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) r3 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x5386, &(0x7f0000000040)) (async) creat(&(0x7f0000000080)='./file0\x00', 0x148) r4 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x5386, &(0x7f0000000040)) dup3(r1, r4, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 20:36:31 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251, 0x0, 0x0, '\x00', 0x0, 0x21}, 0x48) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="85000000860000009500fd9f000000008a479a9cc9ca135552516c6a61eb9c85eee435df8b397697a17981c301f2daa876d6451fcc6ea8064707b82c5e9cc34193"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc2, &(0x7f00000009c0)=""/194, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000400)={@private0, 0x5, r5}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000778bab7c43cee6580254a275000000ad15890d99650000"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', r5, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r6, r2}, 0x80) (async) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x9, &(0x7f0000000680)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0xfffffffd, 0x6, 0x3ff, 0x4}, 0x10, r6, r7, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xe, 0x9, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000005000000000000000101000085200000020000008d38feffffffffff950000000000000018680000050000000000000004e70000dc702000f0ffffff9500000000000000"], &(0x7f0000000980)='GPL\x00', 0x80, 0x28, &(0x7f0000000c40)=""/40, 0x41000, 0x11, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r6}, 0x80) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r8}, 0x10) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x3, 0x10}, 0xc) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xa, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0x4, 0x8, 0x2, 0xffffffffffffffe0, 0x77387f96da588ff8}, @map_fd={0x18, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x5, 0xd, 0xf, 0x9}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x18, '\x00', r5, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x34, 0x10, &(0x7f0000000540)={0x4, 0x8, 0x1f, 0x2}, 0x10, r6, r8, 0x0, &(0x7f0000000640)=[r1, r9, r10, 0x1, 0x1]}, 0x80) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @jmp={0x5, 0x1, 0x2, 0x8, 0x8, 0xfffffffffffffff0, 0x1}, @alu={0x7, 0x0, 0x2, 0xa, 0xa, 0x6, 0xfffffffffffffff0}, @generic={0x7, 0xf, 0x6, 0x7, 0x400}, @generic={0x0, 0x2, 0x4, 0x6, 0xab}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x86, &(0x7f0000000380)=""/134, 0x40f00, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x8, 0x6, 0x8001}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, r12]}, 0x80) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r13, 0xc0f85403, &(0x7f0000000000)) 20:36:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0xa, 0x9, 0xfffffffffffffffc, 0x4}, @generic={0x0, 0x8, 0x1, 0x4, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0xa, 0x9, 0xfffffffffffffffc, 0x4}, @generic={0x0, 0x8, 0x1, 0x4, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) (async) 20:36:31 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251, 0x0, 0x0, '\x00', 0x0, 0x21}, 0x48) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="85000000860000009500fd9f000000008a479a9cc9ca135552516c6a61eb9c85eee435df8b397697a17981c301f2daa876d6451fcc6ea8064707b82c5e9cc34193"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc2, &(0x7f00000009c0)=""/194, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000400)={@private0, 0x5, r5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000778bab7c43cee6580254a275000000ad15890d99650000"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', r5, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r6, r2}, 0x80) (async) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x9, &(0x7f0000000680)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0xfffffffd, 0x6, 0x3ff, 0x4}, 0x10, r6, r7, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xe, 0x9, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000005000000000000000101000085200000020000008d38feffffffffff950000000000000018680000050000000000000004e70000dc702000f0ffffff9500000000000000"], &(0x7f0000000980)='GPL\x00', 0x80, 0x28, &(0x7f0000000c40)=""/40, 0x41000, 0x11, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4005, 0x101, 0x200002}, 0x10, r6}, 0x80) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r8}, 0x10) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x3, 0x10}, 0xc) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xa, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0x4, 0x8, 0x2, 0xffffffffffffffe0, 0x77387f96da588ff8}, @map_fd={0x18, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x5, 0xd, 0xf, 0x9}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x18, '\x00', r5, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x34, 0x10, &(0x7f0000000540)={0x4, 0x8, 0x1f, 0x2}, 0x10, r6, r8, 0x0, &(0x7f0000000640)=[r1, r9, r10, 0x1, 0x1]}, 0x80) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @jmp={0x5, 0x1, 0x2, 0x8, 0x8, 0xfffffffffffffff0, 0x1}, @alu={0x7, 0x0, 0x2, 0xa, 0xa, 0x6, 0xfffffffffffffff0}, @generic={0x7, 0xf, 0x6, 0x7, 0x400}, @generic={0x0, 0x2, 0x4, 0x6, 0xab}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x86, &(0x7f0000000380)=""/134, 0x40f00, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x8, 0x6, 0x8001}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, r12]}, 0x80) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r13, 0xc0f85403, &(0x7f0000000000)) 20:36:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x101}, @exit, @jmp={0x5, 0x0, 0x2, 0x4, 0x4, 0x8, 0xffffffffffffffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x1, 0x101, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0x1]}, 0x80) 20:36:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) 20:36:31 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='mm_migrate_pages_start\x00', r4}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000300)) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000240)=0x100000000000000, 0x12) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0xc, 0x4, 0xa, 0x8, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000100)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xc, 0x7, 0x7f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r6, 0xffffffffffffffff, r7]}, 0x80) 20:36:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000d024a81bc46e5eb68b155e3b1a97b489eeebe6635bfa6f1b866c927c0a5d75c2624e874633d5fa9dcb786ccf95cf3944a19a1a9a8259cf618b21c11bbc0f9a8363", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000050001000000000008000800ac1414bb08000200000000001400060000000000000000000000ffffac141400080007007f000001"], 0x48}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x48}}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r6) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000220000000a00010077b1485f1305"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000380)={'wpan3\x00'}) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x20, r7, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r9, 0x541d, 0x0) 20:36:32 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x4, 0x0, 0xfffffffa, 0x0, 0xfc}) r1 = syz_open_pts(r0, 0x52640) dup3(r1, r0, 0x0) 20:36:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x60, 0x68, 0x1, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x2, 0x0, 0x4}, [@NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xb9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x80000000}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4e5}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040081}, 0x4048) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x8, 0x101, 0x1f, 0x2, 0x7, "035e85e68c7278cd817ec0568bfe871eafb943"}) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xbf) 20:36:32 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x101}, @exit, @jmp={0x5, 0x0, 0x2, 0x4, 0x4, 0x8, 0xffffffffffffffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x1, 0x101, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x101}, @exit, @jmp={0x5, 0x0, 0x2, 0x4, 0x4, 0x8, 0xffffffffffffffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x1, 0x101, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0x1]}, 0x80) (async) 20:36:32 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='mm_migrate_pages_start\x00', r4}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000300)) (async) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000240)=0x100000000000000, 0x12) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0xc, 0x4, 0xa, 0x8, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000100)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xc, 0x7, 0x7f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r6, 0xffffffffffffffff, r7]}, 0x80) 20:36:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000d024a81bc46e5eb68b155e3b1a97b489eeebe6635bfa6f1b866c927c0a5d75c2624e874633d5fa9dcb786ccf95cf3944a19a1a9a8259cf618b21c11bbc0f9a8363", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000050001000000000008000800ac1414bb08000200000000001400060000000000000000000000ffffac141400080007007f000001"], 0x48}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x48}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000220000000a00010077b1485f1305"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000380)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x20, r7, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r9, 0x541d, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) (async) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000d024a81bc46e5eb68b155e3b1a97b489eeebe6635bfa6f1b866c927c0a5d75c2624e874633d5fa9dcb786ccf95cf3944a19a1a9a8259cf618b21c11bbc0f9a8363", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000050001000000000008000800ac1414bb08000200000000001400060000000000000000000000ffffac141400080007007f000001"], 0x48}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3) (async) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x48}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r6) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000220000000a00010077b1485f1305"], 0x20}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000380)={'wpan3\x00'}) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x20, r7, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSTI(r9, 0x541d, 0x0) (async) 20:36:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) 20:36:32 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x101}, @exit, @jmp={0x5, 0x0, 0x2, 0x4, 0x4, 0x8, 0xffffffffffffffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x1, 0x101, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0x1]}, 0x80) 20:36:32 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) sendfile(r2, r1, 0x0, 0xb38) 20:36:32 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='mm_migrate_pages_start\x00', r4}, 0x10) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000300)) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000240)=0x100000000000000, 0x12) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0xc, 0x4, 0xa, 0x8, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000100)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xc, 0x7, 0x7f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r6, 0xffffffffffffffff, r7]}, 0x80) 20:36:32 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) sendfile(r2, r1, 0x0, 0xb38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) (async) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) sendfile(r2, r1, 0x0, 0xb38) (async) 20:36:32 executing program 5: r0 = socket(0xa, 0x1, 0x0) close(r0) sendmmsg$inet_sctp(r0, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20000000000000008400000002000000000004"], 0x20}], 0x1, 0x0) poll(&(0x7f0000001340)=[{r0}], 0x1, 0x0) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x1, 0x2, 0x4, 0xfc, "43356b11d7bc61cb5cb436862db68a9af8dde984ca7b324be286216517abcb22e6528fa7ce5eb9602968e9004f063386f546970a2ba40fa850e7a0c794bfce", 0x1}, 0x60) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x541d, 0x0) 20:36:32 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400600, 0x7f) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x400000, 0x94) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f00000000c0)=@framed={{}, [@exit, @ldst={0x0, 0x0, 0x2, 0x0, 0xb, 0xfffffffffffffffc, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0x80, 0x1}, @map_fd={0x18, 0x14, 0x1, 0x0, r0}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x3b, 0x10, 0x0}, 0x83) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0xc0f85403, &(0x7f0000000000)) 20:36:33 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async, rerun: 32) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (rerun: 32) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCXONC(r0, 0x540a, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x4, 0x0, 0xfffffffa, 0x0, 0xfc}) (async, rerun: 32) r1 = syz_open_pts(r0, 0x52640) (rerun: 32) dup3(r1, r0, 0x0) 20:36:33 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) sendfile(r2, r1, 0x0, 0xb38) 20:36:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) close(r0) sendmmsg$inet_sctp(r0, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20000000000000008400000002000000000004"], 0x20}], 0x1, 0x0) poll(&(0x7f0000001340)=[{r0}], 0x1, 0x0) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x1, 0x2, 0x4, 0xfc, "43356b11d7bc61cb5cb436862db68a9af8dde984ca7b324be286216517abcb22e6528fa7ce5eb9602968e9004f063386f546970a2ba40fa850e7a0c794bfce", 0x1}, 0x60) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x541d, 0x0) socket(0xa, 0x1, 0x0) (async) close(r0) (async) sendmmsg$inet_sctp(r0, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20000000000000008400000002000000000004"], 0x20}], 0x1, 0x0) (async) poll(&(0x7f0000001340)=[{r0}], 0x1, 0x0) (async) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x1, 0x2, 0x4, 0xfc, "43356b11d7bc61cb5cb436862db68a9af8dde984ca7b324be286216517abcb22e6528fa7ce5eb9602968e9004f063386f546970a2ba40fa850e7a0c794bfce", 0x1}, 0x60) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSTI(r1, 0x541d, 0x0) (async) 20:36:33 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400600, 0x7f) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x400000, 0x94) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f00000000c0)=@framed={{}, [@exit, @ldst={0x0, 0x0, 0x2, 0x0, 0xb, 0xfffffffffffffffc, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0x80, 0x1}, @map_fd={0x18, 0x14, 0x1, 0x0, r0}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x3b, 0x10, 0x0}, 0x83) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0xc0f85403, &(0x7f0000000000)) 20:36:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) 20:36:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x60, 0x68, 0x1, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x2, 0x0, 0x4}, [@NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xb9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x80000000}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4e5}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040081}, 0x4048) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x8, 0x101, 0x1f, 0x2, 0x7, "035e85e68c7278cd817ec0568bfe871eafb943"}) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xbf) 20:36:33 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400600, 0x7f) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x400000, 0x94) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f00000000c0)=@framed={{}, [@exit, @ldst={0x0, 0x0, 0x2, 0x0, 0xb, 0xfffffffffffffffc, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0x80, 0x1}, @map_fd={0x18, 0x14, 0x1, 0x0, r0}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x3b, 0x10, 0x0}, 0x83) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0xc0f85403, &(0x7f0000000000)) 20:36:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) close(r0) sendmmsg$inet_sctp(r0, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20000000000000008400000002000000000004"], 0x20}], 0x1, 0x0) (async) poll(&(0x7f0000001340)=[{r0}], 0x1, 0x0) (async) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x1, 0x2, 0x4, 0xfc, "43356b11d7bc61cb5cb436862db68a9af8dde984ca7b324be286216517abcb22e6528fa7ce5eb9602968e9004f063386f546970a2ba40fa850e7a0c794bfce", 0x1}, 0x60) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x541d, 0x0) 20:36:33 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x40, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0xb, 0xa, 0x7, 0xfffffffffffffff4, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000080)='syzkaller\x00', 0x10001, 0x33, &(0x7f00000000c0)=""/51, 0x41000, 0x10, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000140)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xc, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)) 20:36:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x9b1e, 0xaf, 0x10001, 0x6, 0x0, "934aa5d50b40ed15bafeff7f00005071c9797c"}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 20:36:33 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x40, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0xb, 0xa, 0x7, 0xfffffffffffffff4, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000080)='syzkaller\x00', 0x10001, 0x33, &(0x7f00000000c0)=""/51, 0x41000, 0x10, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000140)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xc, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x40, 0x18}, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0xb, 0xa, 0x7, 0xfffffffffffffff4, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000080)='syzkaller\x00', 0x10001, 0x33, &(0x7f00000000c0)=""/51, 0x41000, 0x10, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000140)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xc, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)) (async) 20:36:33 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x4, 0x0, 0xfffffffa, 0x0, 0xfc}) r1 = syz_open_pts(r0, 0x52640) dup3(r1, r0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCXONC(r0, 0x540a, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x4, 0x0, 0xfffffffa, 0x0, 0xfc}) (async) syz_open_pts(r0, 0x52640) (async) dup3(r1, r0, 0x0) (async) 20:36:33 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000fbff0095000000000000009602c141559346692920d82e27ba21c4bf87977866959c2c889396c2f1189546c7958c0afda4e948143ff1c011e6bd76f981733f833987f76e12bba8c3580255c40f67b335022dd50ac9ce29970d86bc3f33aa52fec612588596ddda0d99a83ce74dc9e866fb68ca90189efb1f84ced93c71765015df951cf0ce152a27f3b4eb4f135d412939"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='xprt_retransmit\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="09000000010000002e2f66696c653000b199afd7040af47b418fc359102e6d902d0f98247e3a6023d1d111e0d335396e1ccc7429d9af052669c74c65d0d263255e24dba3cb04497e9f3e30e6b732a9d58840d55f00ef62b70f2a26880b6791a1583c9f90dd1c4edf1637f71571bbb660a29347b022773551ade75bf7b9d23b9f73e3619054e8140cfd4f48892ecbb88e7692480e7b884a6812c3ddef7c10743b48d78d5c5e96227191c8f42db89a7ef92a941727a72a307ff16374f1abbb223ca6cfbe0c1ea848e833454cc7ac119d2cf26e9fd3f2f4bbdef69ac36057ed235b7af1050198b8a44f711667f79353649eb128edf9"]) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=@newlinkprop={0x80, 0x6c, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x880, 0x4}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb9c}, @IFLA_MAP={0x24, 0xe, {0x1ff, 0x0, 0x7, 0x1ff, 0x7f, 0x8}}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_batadv\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000880ea97b866bfaa960818cc9bfb107e6000000000a0001d300aaaaaaaabaaa00"], 0x2c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@empty, 0x55, r5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0xc0f85403, &(0x7f0000000000)) 20:36:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x9b1e, 0xaf, 0x10001, 0x6, 0x0, "934aa5d50b40ed15bafeff7f00005071c9797c"}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 20:36:33 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x40, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0xb, 0xa, 0x7, 0xfffffffffffffff4, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000080)='syzkaller\x00', 0x10001, 0x33, &(0x7f00000000c0)=""/51, 0x41000, 0x10, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000140)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xc, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async, rerun: 64) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)) 20:36:33 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/75) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)) [ 606.694502][T22343] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 20:36:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x80000) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x60, 0x68, 0x1, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x2, 0x0, 0x4}, [@NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xb9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x80000000}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4e5}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040081}, 0x4048) (async, rerun: 64) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x8, 0x101, 0x1f, 0x2, 0x7, "035e85e68c7278cd817ec0568bfe871eafb943"}) (async, rerun: 64) dup3(r1, r0, 0x0) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5437, 0x0) (rerun: 64) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xbf) 20:36:33 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000fbff0095000000000000009602c141559346692920d82e27ba21c4bf87977866959c2c889396c2f1189546c7958c0afda4e948143ff1c011e6bd76f981733f833987f76e12bba8c3580255c40f67b335022dd50ac9ce29970d86bc3f33aa52fec612588596ddda0d99a83ce74dc9e866fb68ca90189efb1f84ced93c71765015df951cf0ce152a27f3b4eb4f135d412939"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='xprt_retransmit\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="09000000010000002e2f66696c653000b199afd7040af47b418fc359102e6d902d0f98247e3a6023d1d111e0d335396e1ccc7429d9af052669c74c65d0d263255e24dba3cb04497e9f3e30e6b732a9d58840d55f00ef62b70f2a26880b6791a1583c9f90dd1c4edf1637f71571bbb660a29347b022773551ade75bf7b9d23b9f73e3619054e8140cfd4f48892ecbb88e7692480e7b884a6812c3ddef7c10743b48d78d5c5e96227191c8f42db89a7ef92a941727a72a307ff16374f1abbb223ca6cfbe0c1ea848e833454cc7ac119d2cf26e9fd3f2f4bbdef69ac36057ed235b7af1050198b8a44f711667f79353649eb128edf9"]) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=@newlinkprop={0x80, 0x6c, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x880, 0x4}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb9c}, @IFLA_MAP={0x24, 0xe, {0x1ff, 0x0, 0x7, 0x1ff, 0x7f, 0x8}}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_batadv\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000880ea97b866bfaa960818cc9bfb107e6000000000a0001d300aaaaaaaabaaa00"], 0x2c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@empty, 0x55, r5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000fbff0095000000000000009602c141559346692920d82e27ba21c4bf87977866959c2c889396c2f1189546c7958c0afda4e948143ff1c011e6bd76f981733f833987f76e12bba8c3580255c40f67b335022dd50ac9ce29970d86bc3f33aa52fec612588596ddda0d99a83ce74dc9e866fb68ca90189efb1f84ced93c71765015df951cf0ce152a27f3b4eb4f135d412939"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='xprt_retransmit\x00', r3}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="09000000010000002e2f66696c653000b199afd7040af47b418fc359102e6d902d0f98247e3a6023d1d111e0d335396e1ccc7429d9af052669c74c65d0d263255e24dba3cb04497e9f3e30e6b732a9d58840d55f00ef62b70f2a26880b6791a1583c9f90dd1c4edf1637f71571bbb660a29347b022773551ade75bf7b9d23b9f73e3619054e8140cfd4f48892ecbb88e7692480e7b884a6812c3ddef7c10743b48d78d5c5e96227191c8f42db89a7ef92a941727a72a307ff16374f1abbb223ca6cfbe0c1ea848e833454cc7ac119d2cf26e9fd3f2f4bbdef69ac36057ed235b7af1050198b8a44f711667f79353649eb128edf9"]) (async) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=@newlinkprop={0x80, 0x6c, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x880, 0x4}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb9c}, @IFLA_MAP={0x24, 0xe, {0x1ff, 0x0, 0x7, 0x1ff, 0x7f, 0x8}}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_batadv\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000880ea97b866bfaa960818cc9bfb107e6000000000a0001d300aaaaaaaabaaa00"], 0x2c}}, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@empty, 0x55, r5}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x9b1e, 0xaf, 0x10001, 0x6, 0x0, "934aa5d50b40ed15bafeff7f00005071c9797c"}) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 20:36:33 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000040)=@raw=[@generic={0x1, 0x6, 0x3, 0x54b7, 0x202ab}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ldst={0x1, 0x0, 0x1, 0xf, 0xb, 0xffffffffffffffc0, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x2, 0x7, 0xa, 0x6, 0x8}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x3f, 0x0, 0x80000000}) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 20:36:33 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000fbff0095000000000000009602c141559346692920d82e27ba21c4bf87977866959c2c889396c2f1189546c7958c0afda4e948143ff1c011e6bd76f981733f833987f76e12bba8c3580255c40f67b335022dd50ac9ce29970d86bc3f33aa52fec612588596ddda0d99a83ce74dc9e866fb68ca90189efb1f84ced93c71765015df951cf0ce152a27f3b4eb4f135d412939"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='xprt_retransmit\x00', r3}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="09000000010000002e2f66696c653000b199afd7040af47b418fc359102e6d902d0f98247e3a6023d1d111e0d335396e1ccc7429d9af052669c74c65d0d263255e24dba3cb04497e9f3e30e6b732a9d58840d55f00ef62b70f2a26880b6791a1583c9f90dd1c4edf1637f71571bbb660a29347b022773551ade75bf7b9d23b9f73e3619054e8140cfd4f48892ecbb88e7692480e7b884a6812c3ddef7c10743b48d78d5c5e96227191c8f42db89a7ef92a941727a72a307ff16374f1abbb223ca6cfbe0c1ea848e833454cc7ac119d2cf26e9fd3f2f4bbdef69ac36057ed235b7af1050198b8a44f711667f79353649eb128edf9"]) (async) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=@newlinkprop={0x80, 0x6c, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x880, 0x4}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb9c}, @IFLA_MAP={0x24, 0xe, {0x1ff, 0x0, 0x7, 0x1ff, 0x7f, 0x8}}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_batadv\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_EVENT={0x8, 0x2c, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000880ea97b866bfaa960818cc9bfb107e6000000000a0001d300aaaaaaaabaaa00"], 0x2c}}, 0x0) (async, rerun: 32) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@empty, 0x55, r5}) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0xc0f85403, &(0x7f0000000000)) 20:36:33 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000040)=@raw=[@generic={0x1, 0x6, 0x3, 0x54b7, 0x202ab}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ldst={0x1, 0x0, 0x1, 0xf, 0xb, 0xffffffffffffffc0, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x2, 0x7, 0xa, 0x6, 0x8}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x3f, 0x0, 0x80000000}) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) [ 606.810882][T22376] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 20:36:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) (async) 20:36:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000500)={0x0, 0x0, 0x93, 0x3, @scatter={0x5, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f0000000140)=""/112, 0x70}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000280)=""/182, 0xb6}]}, &(0x7f00000003c0)="72226b7e4b4f5c960841354f4f0ea1bbeab0cd8f3da7019773c8444055bc6854a4de2e7c8a4b43ce97db0e2f3df424a27bbd3710cf442af007ab85673507ccf3074ed233e34033d1c3c50ade1b30b36783431aa1a26fb5ca5929adbf5d41e1e84efc71848df55e9693472395ae2633b372697540e11d4394bd89e0092ece86d3223354cc9947359ed85d87348bc62892b17446", &(0x7f0000000480)=""/67, 0x9, 0x10001, 0x0, &(0x7f0000000080)}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 20:36:33 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/75) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) (async) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)) 20:36:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x80000) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:33 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r1, 0x0, 0x3, &(0x7f00000000c0)='^%\x00'}, 0x30) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x581c0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x200100) 20:36:33 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000040)=@raw=[@generic={0x1, 0x6, 0x3, 0x54b7, 0x202ab}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ldst={0x1, 0x0, 0x1, 0xf, 0xb, 0xffffffffffffffc0, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x2, 0x7, 0xa, 0x6, 0x8}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x3f, 0x0, 0x80000000}) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xfffffffffffffe63) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x21) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)) r6 = fsmount(r5, 0x0, 0xc) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000080)={0x8, 0x4, 0x9, 0x6, 0x10, "8e86689a6c58d76561575eb028c03c5270dfa3"}) 20:36:33 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r1, 0x0, 0x3, &(0x7f00000000c0)='^%\x00'}, 0x30) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x581c0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x200100) 20:36:33 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/143) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)) 20:36:33 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r1, 0x0, 0x3, &(0x7f00000000c0)='^%\x00'}, 0x30) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x581c0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x200100) 20:36:33 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/143) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)) 20:36:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x80000) ioctl$TIOCSTI(r0, 0x541b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x80000) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) (async) 20:36:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000500)={0x0, 0x0, 0x93, 0x3, @scatter={0x5, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f0000000140)=""/112, 0x70}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000280)=""/182, 0xb6}]}, &(0x7f00000003c0)="72226b7e4b4f5c960841354f4f0ea1bbeab0cd8f3da7019773c8444055bc6854a4de2e7c8a4b43ce97db0e2f3df424a27bbd3710cf442af007ab85673507ccf3074ed233e34033d1c3c50ade1b30b36783431aa1a26fb5ca5929adbf5d41e1e84efc71848df55e9693472395ae2633b372697540e11d4394bd89e0092ece86d3223354cc9947359ed85d87348bc62892b17446", &(0x7f0000000480)=""/67, 0x9, 0x10001, 0x0, &(0x7f0000000080)}) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:34 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/143) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)) 20:36:34 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6075, 0x20}}, './file0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x8, 0x0}, 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x5, 0xfffffffffffffff9}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000240)=0x100000000000000, 0x12) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xbfb}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @ldst={0x3, 0x3, 0x2, 0x4, 0x19, 0x80}, @jmp={0x5, 0x0, 0x9, 0x4, 0x2, 0xffffffffffffffc0, 0xfffffffffffffff0}, @generic={0x5, 0x9, 0x1, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xf9, &(0x7f0000000380)=""/249, 0x41000, 0xa, '\x00', 0x0, 0x8, r2, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x6, 0x3f, 0x7fff}, 0x10, r3, r5, 0x0, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0x1, 0x1, r6, r0, r8, r9]}, 0x80) 20:36:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x18ca) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:34 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async, rerun: 64) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 64) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/75) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async, rerun: 64) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async, rerun: 32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)) (rerun: 32) 20:36:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xfffffffffffffe63) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x21) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)) r6 = fsmount(r5, 0x0, 0xc) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000080)={0x8, 0x4, 0x9, 0x6, 0x10, "8e86689a6c58d76561575eb028c03c5270dfa3"}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r1, 0x0) (async) dup3(r2, r1, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xfffffffffffffe63) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r3, 0x0) (async) dup3(r4, r3, 0x0) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x21) (async) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)) (async) fsmount(r5, 0x0, 0xc) (async) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000080)={0x8, 0x4, 0x9, 0x6, 0x10, "8e86689a6c58d76561575eb028c03c5270dfa3"}) (async) 20:36:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x18ca) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x18ca) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) (async) 20:36:34 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6075, 0x20}}, './file0\x00'}) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x8, 0x0}, 0x8) (async, rerun: 32) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x5, 0xfffffffffffffff9}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000240)=0x100000000000000, 0x12) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xbfb}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @ldst={0x3, 0x3, 0x2, 0x4, 0x19, 0x80}, @jmp={0x5, 0x0, 0x9, 0x4, 0x2, 0xffffffffffffffc0, 0xfffffffffffffff0}, @generic={0x5, 0x9, 0x1, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xf9, &(0x7f0000000380)=""/249, 0x41000, 0xa, '\x00', 0x0, 0x8, r2, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x6, 0x3f, 0x7fff}, 0x10, r3, r5, 0x0, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0x1, 0x1, r6, r0, r8, r9]}, 0x80) 20:36:34 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x3c, 0x64, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0x9, 0x6}, {0xd, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x3c}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x18ca) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:34 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000140)={0xd, 0x9}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept4$inet6(r1, 0x0, 0x0, 0x0) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:34 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6075, 0x20}}, './file0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x8, 0x0}, 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x5, 0xfffffffffffffff9}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000240)=0x100000000000000, 0x12) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xbfb}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @ldst={0x3, 0x3, 0x2, 0x4, 0x19, 0x80}, @jmp={0x5, 0x0, 0x9, 0x4, 0x2, 0xffffffffffffffc0, 0xfffffffffffffff0}, @generic={0x5, 0x9, 0x1, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xf9, &(0x7f0000000380)=""/249, 0x41000, 0xa, '\x00', 0x0, 0x8, r2, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x6, 0x3f, 0x7fff}, 0x10, r3, r5, 0x0, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0x1, 0x1, r6, r0, r8, r9]}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6075, 0x20}}, './file0\x00'}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x8}, 0x8) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x5, 0xfffffffffffffff9}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r7, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r8, &(0x7f0000000240)=0x100000000000000, 0x12) (async) pipe2$watch_queue(&(0x7f0000000500), 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xbfb}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @ldst={0x3, 0x3, 0x2, 0x4, 0x19, 0x80}, @jmp={0x5, 0x0, 0x9, 0x4, 0x2, 0xffffffffffffffc0, 0xfffffffffffffff0}, @generic={0x5, 0x9, 0x1, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xf9, &(0x7f0000000380)=""/249, 0x41000, 0xa, '\x00', 0x0, 0x8, r2, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x6, 0x3f, 0x7fff}, 0x10, r3, r5, 0x0, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0x1, 0x1, r6, r0, r8, r9]}, 0x80) (async) 20:36:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000500)={0x0, 0x0, 0x93, 0x3, @scatter={0x5, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f0000000140)=""/112, 0x70}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000280)=""/182, 0xb6}]}, &(0x7f00000003c0)="72226b7e4b4f5c960841354f4f0ea1bbeab0cd8f3da7019773c8444055bc6854a4de2e7c8a4b43ce97db0e2f3df424a27bbd3710cf442af007ab85673507ccf3074ed233e34033d1c3c50ade1b30b36783431aa1a26fb5ca5929adbf5d41e1e84efc71848df55e9693472395ae2633b372697540e11d4394bd89e0092ece86d3223354cc9947359ed85d87348bc62892b17446", &(0x7f0000000480)=""/67, 0x9, 0x10001, 0x0, &(0x7f0000000080)}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000500)={0x0, 0x0, 0x93, 0x3, @scatter={0x5, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f0000000140)=""/112, 0x70}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000280)=""/182, 0xb6}]}, &(0x7f00000003c0)="72226b7e4b4f5c960841354f4f0ea1bbeab0cd8f3da7019773c8444055bc6854a4de2e7c8a4b43ce97db0e2f3df424a27bbd3710cf442af007ab85673507ccf3074ed233e34033d1c3c50ade1b30b36783431aa1a26fb5ca5929adbf5d41e1e84efc71848df55e9693472395ae2633b372697540e11d4394bd89e0092ece86d3223354cc9947359ed85d87348bc62892b17446", &(0x7f0000000480)=""/67, 0x9, 0x10001, 0x0, &(0x7f0000000080)}) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 20:36:34 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x3c, 0x64, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0x9, 0x6}, {0xd, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x3c}}, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0xa951) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:34 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x3c, 0x64, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0x9, 0x6}, {0xd, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x3c}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:34 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000080)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000100)={{0x0, 0x1, 0x1, 0x3}, 0xfffffffffffff800, 0x2, 0x3}) 20:36:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async, rerun: 64) r2 = syz_open_pts(r1, 0x0) (rerun: 64) dup3(r2, r1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xfffffffffffffe63) (async, rerun: 64) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) (async, rerun: 64) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x21) (async) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)) (async) r6 = fsmount(r5, 0x0, 0xc) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000080)={0x8, 0x4, 0x9, 0x6, 0x10, "8e86689a6c58d76561575eb028c03c5270dfa3"}) 20:36:34 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = fcntl$dupfd(r3, 0x406, r1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x5, 0x6, 0xfffffffe, 0x0, 0x5}) r5 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000040)={0x6, 0x358, 0x1, 0x0, 0x2}) 20:36:34 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000080)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000100)={{0x0, 0x1, 0x1, 0x3}, 0xfffffffffffff800, 0x2, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000080)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000100)={{0x0, 0x1, 0x1, 0x3}, 0xfffffffffffff800, 0x2, 0x3}) (async) 20:36:34 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = fcntl$dupfd(r3, 0x406, r1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x5, 0x6, 0xfffffffe, 0x0, 0x5}) (async) r5 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000040)={0x6, 0x358, 0x1, 0x0, 0x2}) 20:36:34 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000080)) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000100)={{0x0, 0x1, 0x1, 0x3}, 0xfffffffffffff800, 0x2, 0x3}) 20:36:34 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000140)={0xd, 0x9}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept4$inet6(r1, 0x0, 0x0, 0x0) (async) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:34 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = fcntl$dupfd(r3, 0x406, r1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x5, 0x6, 0xfffffffe, 0x0, 0x5}) (async) r5 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000040)={0x6, 0x358, 0x1, 0x0, 0x2}) 20:36:34 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x8, &(0x7f0000000040)=@framed={{}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x1, 0x623430eb6ec6aac1, 0x0, 0x5, 0xffffffffffffffda, 0xfffffffffffffffc}, @exit, @ldst={0x2, 0x2, 0x0, 0xa, 0xb, 0x0, 0x10}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xbc46737a85c4b3fe, r0, 0x57958000) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) fstat(r1, &(0x7f0000000080)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) 20:36:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2506c0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='!emory.current\x00') r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x3f, 0x7, 0x7f, 0x0, 0x2, 0xa2810, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x2, 0x7fffffffffffffff}, 0x2402, 0x1, 0x80, 0x2, 0xfffffffffffffbff, 0x1, 0x7fff, 0x0, 0x4, 0x0, 0x3}, r5, 0x4, r4, 0x1) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)) r7 = syz_open_pts(r6, 0x0) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0xc2041, 0x1, 0x4}, 0x18) dup3(r0, r8, 0x0) dup3(r7, r6, 0x0) readv(r6, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$KDGKBLED(r6, 0x4b64, &(0x7f0000000140)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x9) r9 = syz_open_procfs(r1, &(0x7f0000000180)='fdinfo/3\x00') readv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) write$binfmt_misc(r9, &(0x7f0000000240)={'syz0', "5c40b391cf8dfa806b631fd89adad2222a7991fe1b539facad9a2852e104a32f2a2ac15e31d0240ab1ba1c0b59085de03703c8278518687ffe9902e4"}, 0x40) ioctl$TIOCSTI(r0, 0x541d, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE(r10, 0x5000940c, 0x0) 20:36:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x9) syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) socket(0x14, 0x5, 0xffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r5) 20:36:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0xa951) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$TIOCSTI(r0, 0x541b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0xa951) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) (async) 20:36:34 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000140)={0xd, 0x9}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept4$inet6(r1, 0x0, 0x0, 0x0) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000140)={0xd, 0x9}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) accept4$inet6(r1, 0x0, 0x0, 0x0) (async) syz_open_pts(r0, 0x0) (async) dup3(r2, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) 20:36:34 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000740)={[0x3]}, 0x8, 0x80000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) r8 = creat(&(0x7f0000000780)='./file0\x00', 0x2dae86372c1b2d7c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000500)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffd52}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000580)='syzkaller\x00', 0x7ff, 0x9a, &(0x7f00000005c0)=""/154, 0x40f00, 0x4, '\x00', r2, 0x0, r4, 0x8, &(0x7f00000006c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xe, 0x4, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r5, r7, 0xffffffffffffffff, r8]}, 0x80) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000004c0)) write$cgroup_int(r10, &(0x7f0000000240)=0x100000000000000, 0x12) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000240)=0x100000000000000, 0x12) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r16 = openat$cgroup_ro(r15, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r16, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8ce5, 0x0, 0x0, 0x0, 0x80}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1f38, 0x0, 0x0, 0x0, 0x10, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xa, 0x6a79, 0x1f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0x1, 0x1, r14, r16, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r17 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r17, 0x40345410, &(0x7f0000000000)) 20:36:34 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_int(r1, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000740)={[0x3]}, 0x8, 0x80000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) r8 = creat(&(0x7f0000000780)='./file0\x00', 0x2dae86372c1b2d7c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000500)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffd52}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000580)='syzkaller\x00', 0x7ff, 0x9a, &(0x7f00000005c0)=""/154, 0x40f00, 0x4, '\x00', r2, 0x0, r4, 0x8, &(0x7f00000006c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xe, 0x4, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r5, r7, 0xffffffffffffffff, r8]}, 0x80) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000004c0)) (async) write$cgroup_int(r10, &(0x7f0000000240)=0x100000000000000, 0x12) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r16 = openat$cgroup_ro(r15, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r16, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8ce5, 0x0, 0x0, 0x0, 0x80}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1f38, 0x0, 0x0, 0x0, 0x10, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xa, 0x6a79, 0x1f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0x1, 0x1, r14, r16, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r17 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r17, 0x40345410, &(0x7f0000000000)) 20:36:35 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x8, &(0x7f0000000040)=@framed={{}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x1, 0x623430eb6ec6aac1, 0x0, 0x5, 0xffffffffffffffda, 0xfffffffffffffffc}, @exit, @ldst={0x2, 0x2, 0x0, 0xa, 0xb, 0x0, 0x10}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xbc46737a85c4b3fe, r0, 0x57958000) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) fstat(r1, &(0x7f0000000080)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x8, &(0x7f0000000040)=@framed={{}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x1, 0x623430eb6ec6aac1, 0x0, 0x5, 0xffffffffffffffda, 0xfffffffffffffffc}, @exit, @ldst={0x2, 0x2, 0x0, 0xa, 0xb, 0x0, 0x10}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xbc46737a85c4b3fe, r0, 0x57958000) (async) socket$inet6_sctp(0xa, 0x0, 0x84) (async) fstat(r1, &(0x7f0000000080)) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) (async) [ 608.323894][ T23] audit: type=1400 audit(1668976594.957:454): avc: denied { create } for pid=22570 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 20:36:35 executing program 4: shmget(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000001c0)=0xfffffff7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x810040) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xd) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_int(r1, &(0x7f0000000240)=0x100000000000000, 0x12) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) (async, rerun: 32) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000740)={[0x3]}, 0x8, 0x80000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) r8 = creat(&(0x7f0000000780)='./file0\x00', 0x2dae86372c1b2d7c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000500)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffd52}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000580)='syzkaller\x00', 0x7ff, 0x9a, &(0x7f00000005c0)=""/154, 0x40f00, 0x4, '\x00', r2, 0x0, r4, 0x8, &(0x7f00000006c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xe, 0x4, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r5, r7, 0xffffffffffffffff, r8]}, 0x80) (async, rerun: 64) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r10 = openat$cgroup_ro(r9, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000004c0)) (async, rerun: 64) write$cgroup_int(r10, &(0x7f0000000240)=0x100000000000000, 0x12) (async, rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000240)=0x100000000000000, 0x12) (async, rerun: 64) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r16 = openat$cgroup_ro(r15, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r16, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8ce5, 0x0, 0x0, 0x0, 0x80}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1f38, 0x0, 0x0, 0x0, 0x10, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xa, 0x6a79, 0x1f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0x1, 0x1, r14, r16, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async, rerun: 64) r17 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r17, 0x40345410, &(0x7f0000000000)) 20:36:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0xa951) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:35 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x8, &(0x7f0000000040)=@framed={{}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x1, 0x623430eb6ec6aac1, 0x0, 0x5, 0xffffffffffffffda, 0xfffffffffffffffc}, @exit, @ldst={0x2, 0x2, 0x0, 0xa, 0xb, 0x0, 0x10}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xbc46737a85c4b3fe, r0, 0x57958000) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) fstat(r1, &(0x7f0000000080)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x8, &(0x7f0000000040)=@framed={{}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x1, 0x623430eb6ec6aac1, 0x0, 0x5, 0xffffffffffffffda, 0xfffffffffffffffc}, @exit, @ldst={0x2, 0x2, 0x0, 0xa, 0xb, 0x0, 0x10}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xbc46737a85c4b3fe, r0, 0x57958000) (async) socket$inet6_sctp(0xa, 0x0, 0x84) (async) fstat(r1, &(0x7f0000000080)) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:35 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2506c0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) (async) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='!emory.current\x00') (async, rerun: 32) r5 = getpid() (rerun: 32) sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x3f, 0x7, 0x7f, 0x0, 0x2, 0xa2810, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x2, 0x7fffffffffffffff}, 0x2402, 0x1, 0x80, 0x2, 0xfffffffffffffbff, 0x1, 0x7fff, 0x0, 0x4, 0x0, 0x3}, r5, 0x4, r4, 0x1) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)) r7 = syz_open_pts(r6, 0x0) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0xc2041, 0x1, 0x4}, 0x18) dup3(r0, r8, 0x0) (async) dup3(r7, r6, 0x0) readv(r6, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$KDGKBLED(r6, 0x4b64, &(0x7f0000000140)) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x9) r9 = syz_open_procfs(r1, &(0x7f0000000180)='fdinfo/3\x00') readv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) (async) write$binfmt_misc(r9, &(0x7f0000000240)={'syz0', "5c40b391cf8dfa806b631fd89adad2222a7991fe1b539facad9a2852e104a32f2a2ac15e31d0240ab1ba1c0b59085de03703c8278518687ffe9902e4"}, 0x40) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE(r10, 0x5000940c, 0x0) 20:36:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x9) syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) (async, rerun: 32) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) (rerun: 32) socket(0x14, 0x5, 0xffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r5) 20:36:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001280)={0x0, @l2tp={0x2, 0x2, @empty=0xfd000000, 0x3}, @l2tp={0x2, 0x0, @local, 0x1}, @hci={0x1f, 0x0, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f000001a1c0)='syz_tun\x00'}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001d40)={{}, r6, 0xe, @inherit={0x58, &(0x7f0000001980)=ANY=[@ANYRESHEX, @ANYRESDEC=r5, @ANYRESDEC]}, @subvolid=0x1}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000840)={{r5, 0x5, 0x0, 0x8000000000000000, 0x0, 0x10001, 0xffff, 0x1f, 0x6, 0x10001, 0x6, 0x8, 0x0, 0xfffffffffffffffc, 0x9}}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r8, {r9}}, './file0\x00'}) r10 = openat$cgroup_ro(r7, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000240)=0x100000000000000, 0x12) openat$cgroup_int(r10, &(0x7f0000000680)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='freezer.self_freezing\x00', 0x0, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000240)=0x100000000000000, 0x12) sendmsg$IPSET_CMD_GET_BYNAME(r13, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0xe, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r14 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x590, 0x0, 0x0, 0x0, 0xbd4}]}, &(0x7f00000000c0)='GPL\x00', 0x80000000, 0xd6, &(0x7f00000004c0)=""/214, 0x41100, 0x14, '\x00', r2, 0xb, r4, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x9, 0x5, 0x4}, 0x10, 0x0, r10, 0x0, &(0x7f00000005c0)=[r11, 0xffffffffffffffff, r13, r14, r15, 0x1, 0x1, 0x1, 0x1]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r16 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r16, 0x40345410, &(0x7f0000000000)) 20:36:35 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x9, 0xdc28, 0x0, 0x2, 0xa, "7068e871f3087fe3459b24c418ff59d8a6bbfe"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:35 executing program 4: shmget(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) (async, rerun: 32) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async, rerun: 32) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000001c0)=0xfffffff7) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) (async) r2 = syz_open_pts(r0, 0x810040) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xd) (async) dup3(r1, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:35 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:35 executing program 4: shmget(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000001c0)=0xfffffff7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x810040) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xd) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) shmget(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000001c0)=0xfffffff7) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) syz_open_pts(r0, 0x810040) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xd) (async) dup3(r1, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) 20:36:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) (async, rerun: 32) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001280)={0x0, @l2tp={0x2, 0x2, @empty=0xfd000000, 0x3}, @l2tp={0x2, 0x0, @local, 0x1}, @hci={0x1f, 0x0, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f000001a1c0)='syz_tun\x00'}) (rerun: 32) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"]) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001d40)={{}, r6, 0xe, @inherit={0x58, &(0x7f0000001980)=ANY=[@ANYRESHEX, @ANYRESDEC=r5, @ANYRESDEC]}, @subvolid=0x1}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000840)={{r5, 0x5, 0x0, 0x8000000000000000, 0x0, 0x10001, 0xffff, 0x1f, 0x6, 0x10001, 0x6, 0x8, 0x0, 0xfffffffffffffffc, 0x9}}) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r9 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r8, {r9}}, './file0\x00'}) (async, rerun: 64) r10 = openat$cgroup_ro(r7, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_int(r10, &(0x7f0000000240)=0x100000000000000, 0x12) (async, rerun: 64) openat$cgroup_int(r10, &(0x7f0000000680)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) (rerun: 64) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='freezer.self_freezing\x00', 0x0, 0x0) (async) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000240)=0x100000000000000, 0x12) (async) sendmsg$IPSET_CMD_GET_BYNAME(r13, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0xe, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) (async) r14 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x590, 0x0, 0x0, 0x0, 0xbd4}]}, &(0x7f00000000c0)='GPL\x00', 0x80000000, 0xd6, &(0x7f00000004c0)=""/214, 0x41100, 0x14, '\x00', r2, 0xb, r4, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x9, 0x5, 0x4}, 0x10, 0x0, r10, 0x0, &(0x7f00000005c0)=[r11, 0xffffffffffffffff, r13, r14, r15, 0x1, 0x1, 0x1, 0x1]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r16 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r16, 0x40345410, &(0x7f0000000000)) 20:36:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001280)={0x0, @l2tp={0x2, 0x2, @empty=0xfd000000, 0x3}, @l2tp={0x2, 0x0, @local, 0x1}, @hci={0x1f, 0x0, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f000001a1c0)='syz_tun\x00'}) (async) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"]) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001d40)={{}, r6, 0xe, @inherit={0x58, &(0x7f0000001980)=ANY=[@ANYRESHEX, @ANYRESDEC=r5, @ANYRESDEC]}, @subvolid=0x1}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000840)={{r5, 0x5, 0x0, 0x8000000000000000, 0x0, 0x10001, 0xffff, 0x1f, 0x6, 0x10001, 0x6, 0x8, 0x0, 0xfffffffffffffffc, 0x9}}) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r8, {r9}}, './file0\x00'}) r10 = openat$cgroup_ro(r7, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000240)=0x100000000000000, 0x12) (async, rerun: 64) openat$cgroup_int(r10, &(0x7f0000000680)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) (async, rerun: 64) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='freezer.self_freezing\x00', 0x0, 0x0) (async, rerun: 64) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r13 = openat$cgroup_ro(r12, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000240)=0x100000000000000, 0x12) (async, rerun: 64) sendmsg$IPSET_CMD_GET_BYNAME(r13, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0xe, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) (rerun: 64) r14 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x590, 0x0, 0x0, 0x0, 0xbd4}]}, &(0x7f00000000c0)='GPL\x00', 0x80000000, 0xd6, &(0x7f00000004c0)=""/214, 0x41100, 0x14, '\x00', r2, 0xb, r4, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x9, 0x5, 0x4}, 0x10, 0x0, r10, 0x0, &(0x7f00000005c0)=[r11, 0xffffffffffffffff, r13, r14, r15, 0x1, 0x1, 0x1, 0x1]}, 0x80) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async, rerun: 32) r16 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r16, 0x40345410, &(0x7f0000000000)) 20:36:35 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000200000000080000000000000000ff66593a000000194d6fb699e8a9b5109092c481f800b8c93cc279c62299a67b15d9e0ad789aa63ebc34e1ce93c0974eb93b56ee59ca28cdad01c9dc8a70b6784120bb12ef8616"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000006dbccc9b5eaf94f8b83d656512641b"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) pipe2$9p(&(0x7f0000000040), 0x4000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2506c0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async, rerun: 64) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) (async) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='!emory.current\x00') (async, rerun: 64) r5 = getpid() (rerun: 64) sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) (async) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x3f, 0x7, 0x7f, 0x0, 0x2, 0xa2810, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x2, 0x7fffffffffffffff}, 0x2402, 0x1, 0x80, 0x2, 0xfffffffffffffbff, 0x1, 0x7fff, 0x0, 0x4, 0x0, 0x3}, r5, 0x4, r4, 0x1) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)) (async, rerun: 64) r7 = syz_open_pts(r6, 0x0) (async) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0xc2041, 0x1, 0x4}, 0x18) dup3(r0, r8, 0x0) (async) dup3(r7, r6, 0x0) (async) readv(r6, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$KDGKBLED(r6, 0x4b64, &(0x7f0000000140)) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x9) (async) r9 = syz_open_procfs(r1, &(0x7f0000000180)='fdinfo/3\x00') (async) readv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) write$binfmt_misc(r9, &(0x7f0000000240)={'syz0', "5c40b391cf8dfa806b631fd89adad2222a7991fe1b539facad9a2852e104a32f2a2ac15e31d0240ab1ba1c0b59085de03703c8278518687ffe9902e4"}, 0x40) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async, rerun: 64) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE(r10, 0x5000940c, 0x0) 20:36:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x9) syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) (async) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) (async) socket(0x14, 0x5, 0xffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r5) 20:36:35 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000200000000080000000000000000ff66593a000000194d6fb699e8a9b5109092c481f800b8c93cc279c62299a67b15d9e0ad789aa63ebc34e1ce93c0974eb93b56ee59ca28cdad01c9dc8a70b6784120bb12ef8616"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000006dbccc9b5eaf94f8b83d656512641b"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x4000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) (async, rerun: 32) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (rerun: 32) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x9, 0xdc28, 0x0, 0x2, 0xa, "7068e871f3087fe3459b24c418ff59d8a6bbfe"}) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:36 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000200000000080000000000000000ff66593a000000194d6fb699e8a9b5109092c481f800b8c93cc279c62299a67b15d9e0ad789aa63ebc34e1ce93c0974eb93b56ee59ca28cdad01c9dc8a70b6784120bb12ef8616"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:36 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "49ffffffffff1355810000f2ff060100fbad8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x444202, 0x2c) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000001c0)={0x7f, 0x1, 0xdd, 0xffff0eea, 0x4, "8afda968dcf12b3c9a283b68adc9e219acd380", 0xaa5, 0x4}) 20:36:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:36 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000006dbccc9b5eaf94f8b83d656512641b"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) pipe2$9p(&(0x7f0000000040), 0x4000) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xff, 0xf20, 0xffffffe0, 0x100, 0x15, "d2ba3502a34de0761ba0a20533a8a7d78913c9"}) 20:36:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xff, 0xf20, 0xffffffe0, 0x100, 0x15, "d2ba3502a34de0761ba0a20533a8a7d78913c9"}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xff, 0xf20, 0xffffffe0, 0x100, 0x15, "d2ba3502a34de0761ba0a20533a8a7d78913c9"}) (async) 20:36:36 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:36 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x9, 0x0, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x81, 0x0, 0x1, 0x7f, 0x0, 0x7, 0xa4009, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x4, 0x9}, 0x10094, 0x80000000, 0xffff, 0x1, 0x8a, 0xfff, 0x3f, 0x0, 0x2, 0x0, 0x9}, r2, 0xb, r3, 0x1) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) socket$nl_netfilter(0x10, 0x3, 0xc) 20:36:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xff, 0xf20, 0xffffffe0, 0x100, 0x15, "d2ba3502a34de0761ba0a20533a8a7d78913c9"}) 20:36:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x9, 0xdc28, 0x0, 0x2, 0xa, "7068e871f3087fe3459b24c418ff59d8a6bbfe"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x9, 0xdc28, 0x0, 0x2, 0xa, "7068e871f3087fe3459b24c418ff59d8a6bbfe"}) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) (async) 20:36:36 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:36 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x9, 0x0, 0x7}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x81, 0x0, 0x1, 0x7f, 0x0, 0x7, 0xa4009, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x4, 0x9}, 0x10094, 0x80000000, 0xffff, 0x1, 0x8a, 0xfff, 0x3f, 0x0, 0x2, 0x0, 0x9}, r2, 0xb, r3, 0x1) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 20:36:36 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:36 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "49ffffffffff1355810000f2ff060100fbad8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x444202, 0x2c) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000001c0)={0x7f, 0x1, 0xdd, 0xffff0eea, 0x4, "8afda968dcf12b3c9a283b68adc9e219acd380", 0xaa5, 0x4}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "49ffffffffff1355810000f2ff060100fbad8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) open(&(0x7f0000000140)='./file0\x00', 0x444202, 0x2c) (async) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000001c0)={0x7f, 0x1, 0xdd, 0xffff0eea, 0x4, "8afda968dcf12b3c9a283b68adc9e219acd380", 0xaa5, 0x4}) (async) 20:36:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r4 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x5386, &(0x7f0000000040)) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000180)=0x2) fadvise64(r4, 0x9, 0x0, 0x2) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x4, 0x5, 0x5f, 0x6, 0x7, "4c94685142cf08e0ee3013cbbf5f0c8d0f6af1"}) faccessat2(r3, &(0x7f0000000440)='./file0\x00', 0x14a, 0x1300) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000003c0)={0x0, 0xfffffffffffffffc, 0x6, 0x40, @buffer={0x0, 0x62, &(0x7f00000001c0)=""/98}, &(0x7f0000000240)="7d88b7143468", &(0x7f0000000280)=""/210, 0xfffffffa, 0x23, 0x1, &(0x7f0000000380)}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x11) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:36 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x9, 0x0, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x81, 0x0, 0x1, 0x7f, 0x0, 0x7, 0xa4009, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x4, 0x9}, 0x10094, 0x80000000, 0xffff, 0x1, 0x8a, 0xfff, 0x3f, 0x0, 0x2, 0x0, 0x9}, r2, 0xb, r3, 0x1) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x9, 0x0, 0x7}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) (async) getpid() (async) sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x81, 0x0, 0x1, 0x7f, 0x0, 0x7, 0xa4009, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x4, 0x9}, 0x10094, 0x80000000, 0xffff, 0x1, 0x8a, 0xfff, 0x3f, 0x0, 0x2, 0x0, 0x9}, r2, 0xb, r3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) 20:36:36 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r1, 0x0, 0x6, &(0x7f0000000040)='kfree\x00'}, 0x30) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) 20:36:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x2000000, 0x0, 0xffffffff, 0x0, 0x4}) r1 = syz_open_pts(r0, 0x410401) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:36 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "49ffffffffff1355810000f2ff060100fbad8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x444202, 0x2c) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000001c0)={0x7f, 0x1, 0xdd, 0xffff0eea, 0x4, "8afda968dcf12b3c9a283b68adc9e219acd380", 0xaa5, 0x4}) 20:36:36 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r1, 0x0, 0x6, &(0x7f0000000040)='kfree\x00'}, 0x30) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) 20:36:36 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r1, 0x0, 0x6, &(0x7f0000000040)='kfree\x00'}, 0x30) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r1, 0x0, 0x6, &(0x7f0000000040)='kfree\x00'}, 0x30) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:36 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)) 20:36:36 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)) 20:36:36 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2b08c2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000000c0)={0x1, 0x1, 0x8, 0x2, 0xffffffff}) 20:36:37 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2b08c2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000000c0)={0x1, 0x1, 0x8, 0x2, 0xffffffff}) 20:36:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:37 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)) (async) 20:36:37 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2b08c2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000000c0)={0x1, 0x1, 0x8, 0x2, 0xffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2b08c2) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000000c0)={0x1, 0x1, 0x8, 0x2, 0xffffffff}) (async) 20:36:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async, rerun: 32) r2 = syz_open_pts(r1, 0x0) (rerun: 32) r3 = dup3(r2, r1, 0x0) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r4 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x5386, &(0x7f0000000040)) (async) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000180)=0x2) (async, rerun: 64) fadvise64(r4, 0x9, 0x0, 0x2) (rerun: 64) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x4, 0x5, 0x5f, 0x6, 0x7, "4c94685142cf08e0ee3013cbbf5f0c8d0f6af1"}) faccessat2(r3, &(0x7f0000000440)='./file0\x00', 0x14a, 0x1300) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f00000003c0)={0x0, 0xfffffffffffffffc, 0x6, 0x40, @buffer={0x0, 0x62, &(0x7f00000001c0)=""/98}, &(0x7f0000000240)="7d88b7143468", &(0x7f0000000280)=""/210, 0xfffffffa, 0x23, 0x1, &(0x7f0000000380)}) (async, rerun: 32) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 32) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x11) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:37 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) io_setup(0xa, &(0x7f0000000080)=0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) close(r3) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000280)={0x40000000, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000300)="ce", 0x1}]) dup3(0xffffffffffffffff, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/188, 0xbc}], 0x1) 20:36:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x2000000, 0x0, 0xffffffff, 0x0, 0x4}) (async) r1 = syz_open_pts(r0, 0x410401) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:37 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000000000000060c3ca2c2b4dce56288347e39bd3ee275f1163b79e8b2dc8d8d491890cd7480a81b5721d973b466887726fac5544451d5a1299c7fed5d686e40000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:37 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0xbe, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='i2c_slave\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0xc0f85403, &(0x7f0000000000)) 20:36:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)) 20:36:37 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0xbe, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='i2c_slave\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000240)=0xbe, 0x12) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='i2c_slave\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:37 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000000000000060c3ca2c2b4dce56288347e39bd3ee275f1163b79e8b2dc8d8d491890cd7480a81b5721d973b466887726fac5544451d5a1299c7fed5d686e40000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000000000000060c3ca2c2b4dce56288347e39bd3ee275f1163b79e8b2dc8d8d491890cd7480a81b5721d973b466887726fac5544451d5a1299c7fed5d686e40000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xf) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) (async) [ 611.180396][ T23] audit: type=1400 audit(1668976597.817:455): avc: denied { bind } for pid=22832 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 20:36:37 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000000000000060c3ca2c2b4dce56288347e39bd3ee275f1163b79e8b2dc8d8d491890cd7480a81b5721d973b466887726fac5544451d5a1299c7fed5d686e40000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (rerun: 32) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async, rerun: 32) r2 = syz_open_pts(r1, 0x0) (rerun: 32) r3 = dup3(r2, r1, 0x0) (async) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r4 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x5386, &(0x7f0000000040)) (async) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000180)=0x2) (async) fadvise64(r4, 0x9, 0x0, 0x2) (async, rerun: 32) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x4, 0x5, 0x5f, 0x6, 0x7, "4c94685142cf08e0ee3013cbbf5f0c8d0f6af1"}) (async, rerun: 32) faccessat2(r3, &(0x7f0000000440)='./file0\x00', 0x14a, 0x1300) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f00000003c0)={0x0, 0xfffffffffffffffc, 0x6, 0x40, @buffer={0x0, 0x62, &(0x7f00000001c0)=""/98}, &(0x7f0000000240)="7d88b7143468", &(0x7f0000000280)=""/210, 0xfffffffa, 0x23, 0x1, &(0x7f0000000380)}) (async) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x11) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x2000000, 0x0, 0xffffffff, 0x0, 0x4}) r1 = syz_open_pts(r0, 0x410401) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x2000000, 0x0, 0xffffffff, 0x0, 0x4}) (async) syz_open_pts(r0, 0x410401) (async) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) (async) 20:36:37 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0xbe, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='i2c_slave\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000240)=0xbe, 0x12) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='i2c_slave\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:37 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x8}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xa3, &(0x7f0000000040)=""/163, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:38 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) io_setup(0xa, &(0x7f0000000080)=0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) close(r3) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000280)={0x40000000, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000300)="ce", 0x1}]) dup3(0xffffffffffffffff, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/188, 0xbc}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) io_setup(0xa, &(0x7f0000000080)) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) (async) close(r3) (async) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000280)={0x40000000, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000300)="ce", 0x1}]) (async) dup3(0xffffffffffffffff, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/188, 0xbc}], 0x1) (async) 20:36:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)) (async) 20:36:38 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=@updsa={0x18c, 0x1a, 0x1, 0x70bd26, 0x25dfdbfd, {{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x4e21, 0x0, 0x4e21, 0x7, 0x2, 0xa0, 0x4dc19edd54f91bf0, 0xd7, r2, r4}, {@in=@empty, 0x4d4, 0x2b}, @in=@loopback, {0x1000, 0x9, 0x3, 0xfffffffffffffffb, 0x7, 0xfff, 0xfe6c, 0xfffffffffffffffb}, {0x80000000, 0xc0, 0x6, 0xffffffffffff8000}, {0x5a, 0x54, 0x8}, 0x70bd25, 0x0, 0xa, 0x0, 0x1, 0x2c}, [@algo_aead={0x7f, 0x12, {{'aegis128-generic\x00'}, 0x198, 0x0, "5e9befaa1cdf5aae1fba13fe064ffd576901f094337ecc2d7301088ef3195279758afeaae8ccdef31d5ea12407b8d81da2b527"}}, @offload={0xc, 0x1c, {r6}}, @tfcpad={0x8, 0x16, 0x7}, @proto={0x5, 0x19, 0x2b}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x137002, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:38 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x8}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xa3, &(0x7f0000000040)=""/163, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x8}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xa3, &(0x7f0000000040)=""/163, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) (async) 20:36:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x3, 0x3, 0x0, 0x0, 0x14}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x137002, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x137002, 0x0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) 20:36:38 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=@updsa={0x18c, 0x1a, 0x1, 0x70bd26, 0x25dfdbfd, {{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x4e21, 0x0, 0x4e21, 0x7, 0x2, 0xa0, 0x4dc19edd54f91bf0, 0xd7, r2, r4}, {@in=@empty, 0x4d4, 0x2b}, @in=@loopback, {0x1000, 0x9, 0x3, 0xfffffffffffffffb, 0x7, 0xfff, 0xfe6c, 0xfffffffffffffffb}, {0x80000000, 0xc0, 0x6, 0xffffffffffff8000}, {0x5a, 0x54, 0x8}, 0x70bd25, 0x0, 0xa, 0x0, 0x1, 0x2c}, [@algo_aead={0x7f, 0x12, {{'aegis128-generic\x00'}, 0x198, 0x0, "5e9befaa1cdf5aae1fba13fe064ffd576901f094337ecc2d7301088ef3195279758afeaae8ccdef31d5ea12407b8d81da2b527"}}, @offload={0xc, 0x1c, {r6}}, @tfcpad={0x8, 0x16, 0x7}, @proto={0x5, 0x19, 0x2b}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:38 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x8}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xa3, &(0x7f0000000040)=""/163, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x137002, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:38 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=@updsa={0x18c, 0x1a, 0x1, 0x70bd26, 0x25dfdbfd, {{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x4e21, 0x0, 0x4e21, 0x7, 0x2, 0xa0, 0x4dc19edd54f91bf0, 0xd7, r2, r4}, {@in=@empty, 0x4d4, 0x2b}, @in=@loopback, {0x1000, 0x9, 0x3, 0xfffffffffffffffb, 0x7, 0xfff, 0xfe6c, 0xfffffffffffffffb}, {0x80000000, 0xc0, 0x6, 0xffffffffffff8000}, {0x5a, 0x54, 0x8}, 0x70bd25, 0x0, 0xa, 0x0, 0x1, 0x2c}, [@algo_aead={0x7f, 0x12, {{'aegis128-generic\x00'}, 0x198, 0x0, "5e9befaa1cdf5aae1fba13fe064ffd576901f094337ecc2d7301088ef3195279758afeaae8ccdef31d5ea12407b8d81da2b527"}}, @offload={0xc, 0x1c, {r6}}, @tfcpad={0x8, 0x16, 0x7}, @proto={0x5, 0x19, 0x2b}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:38 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000009500"/24], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0xffffff0e}}, './file0\x00'}) r6 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r6, 0x5386, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) 20:36:38 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) io_setup(0xa, &(0x7f0000000080)=0x0) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) close(r3) (async) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000280)={0x40000000, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000300)="ce", 0x1}]) (async) dup3(0xffffffffffffffff, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/188, 0xbc}], 0x1) 20:36:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20880, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)) 20:36:38 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25a5}, @map_fd, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}]}, &(0x7f0000000500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000540)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x5, 0x92, 0x7ff}, 0x10}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0x5, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xae}, @map_fd={0x18, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000640)='GPL\x00', 0xffffffff, 0x93, &(0x7f00000000c0)=""/147, 0x41100, 0x10, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0xfffffffe, 0x4, 0x4, 0x80b}, 0x10, 0x0, r0}, 0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:38 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000009500"/24], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) (async) r3 = fcntl$dupfd(r1, 0x406, r0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0xffffff0e}}, './file0\x00'}) r6 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r6, 0x5386, &(0x7f0000000040)) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) 20:36:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x3, 0x3, 0x0, 0x0, 0x14}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x3, 0x3, 0x0, 0x0, 0x14}) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) (async) 20:36:39 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25a5}, @map_fd, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}]}, &(0x7f0000000500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000540)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x5, 0x92, 0x7ff}, 0x10}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0x5, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xae}, @map_fd={0x18, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000640)='GPL\x00', 0xffffffff, 0x93, &(0x7f00000000c0)=""/147, 0x41100, 0x10, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0xfffffffe, 0x4, 0x4, 0x80b}, 0x10, 0x0, r0}, 0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25a5}, @map_fd, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}]}, &(0x7f0000000500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000540)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x5, 0x92, 0x7ff}, 0x10}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0x5, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xae}, @map_fd={0x18, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000640)='GPL\x00', 0xffffffff, 0x93, &(0x7f00000000c0)=""/147, 0x41100, 0x10, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0xfffffffe, 0x4, 0x4, 0x80b}, 0x10, 0x0, r0}, 0x80) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:39 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000009500"/24], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) (async, rerun: 64) r3 = fcntl$dupfd(r1, 0x406, r0) (rerun: 64) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0xffffff0e}}, './file0\x00'}) (async) r6 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r6, 0x5386, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) 20:36:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20880, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r2 = syz_open_dev$sg(&(0x7f0000659000), 0xff, 0x44000) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESDEC=r2], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r1, 0x0) dup3(r3, r1, 0x0) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x1, 0x0, "0000000000ff3fddffffff00"}) r4 = syz_open_pts(r0, 0x0) dup3(r4, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:39 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async, rerun: 64) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async, rerun: 64) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25a5}, @map_fd, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}]}, &(0x7f0000000500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000540)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x5, 0x92, 0x7ff}, 0x10}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0x5, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xae}, @map_fd={0x18, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000640)='GPL\x00', 0xffffffff, 0x93, &(0x7f00000000c0)=""/147, 0x41100, 0x10, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0xfffffffe, 0x4, 0x4, 0x80b}, 0x10, 0x0, r0}, 0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20880, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:39 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1835b2082ff10000000000000000000000009b000095feffa62c8ed07a7ef33ed05ee094110316ccf6b94c51e505cfdb5205bf31e5d2dc47fccdbdeb70f724dd9fb22d607d1efa6a35"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0xfffffffffffffffc, 0x12) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x2, 0x1, 0x5, 0x0, 0xfffffffb}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:39 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1835b2082ff10000000000000000000000009b000095feffa62c8ed07a7ef33ed05ee094110316ccf6b94c51e505cfdb5205bf31e5d2dc47fccdbdeb70f724dd9fb22d607d1efa6a35"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0xfffffffffffffffc, 0x12) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x2, 0x1, 0x5, 0x0, 0xfffffffb}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:39 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) r2 = fcntl$dupfd(r0, 0x406, r1) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x84880) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0x0, 0xa, 0x5, 0xffffffffffffffe0, 0xffffffffffffffff}], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0xbd, &(0x7f00000000c0)=""/189, 0x41000, 0x4, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000300)={0x5, 0x5ffa}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x10, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 20:36:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0xe2000) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x8, 0x9, 0x4, 0x4, 0x15, "1f8d5f488700622df6afdc75ecd71693d907d0"}) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:39 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) r2 = fcntl$dupfd(r0, 0x406, r1) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x84880) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0x0, 0xa, 0x5, 0xffffffffffffffe0, 0xffffffffffffffff}], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0xbd, &(0x7f00000000c0)=""/189, 0x41000, 0x4, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000300)={0x5, 0x5ffa}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x10, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 20:36:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x3, 0x3, 0x0, 0x0, 0x14}) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0xe2000) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x8, 0x9, 0x4, 0x4, 0x15, "1f8d5f488700622df6afdc75ecd71693d907d0"}) ioctl$TIOCSTI(r0, 0x541d, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_open_pts(r0, 0xe2000) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x8, 0x9, 0x4, 0x4, 0x15, "1f8d5f488700622df6afdc75ecd71693d907d0"}) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) 20:36:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000659000), 0xff, 0x44000) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESDEC=r2], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) r3 = syz_open_pts(r1, 0x0) dup3(r3, r1, 0x0) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x1, 0x0, "0000000000ff3fddffffff00"}) r4 = syz_open_pts(r0, 0x0) dup3(r4, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:39 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1835b2082ff10000000000000000000000009b000095feffa62c8ed07a7ef33ed05ee094110316ccf6b94c51e505cfdb5205bf31e5d2dc47fccdbdeb70f724dd9fb22d607d1efa6a35"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0xfffffffffffffffc, 0x12) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x2, 0x1, 0x5, 0x0, 0xfffffffb}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1835b2082ff10000000000000000000000009b000095feffa62c8ed07a7ef33ed05ee094110316ccf6b94c51e505cfdb5205bf31e5d2dc47fccdbdeb70f724dd9fb22d607d1efa6a35"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000240)=0xfffffffffffffffc, 0x12) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x2, 0x1, 0x5, 0x0, 0xfffffffb}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:39 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) r2 = fcntl$dupfd(r0, 0x406, r1) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x84880) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0x0, 0xa, 0x5, 0xffffffffffffffe0, 0xffffffffffffffff}], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0xbd, &(0x7f00000000c0)=""/189, 0x41000, 0x4, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000300)={0x5, 0x5ffa}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x10, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) (async) fcntl$dupfd(r0, 0x406, r1) (async) pipe2(&(0x7f00000003c0), 0x84880) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0x0, 0xa, 0x5, 0xffffffffffffffe0, 0xffffffffffffffff}], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0xbd, &(0x7f00000000c0)=""/189, 0x41000, 0x4, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000300)={0x5, 0x5ffa}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x10, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) 20:36:40 executing program 2: mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) 20:36:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0xe2000) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x8, 0x9, 0x4, 0x4, 0x15, "1f8d5f488700622df6afdc75ecd71693d907d0"}) ioctl$TIOCSTI(r0, 0x541d, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_open_pts(r0, 0xe2000) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x8, 0x9, 0x4, 0x4, 0x15, "1f8d5f488700622df6afdc75ecd71693d907d0"}) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) 20:36:40 executing program 2: mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) 20:36:40 executing program 2: mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) (rerun: 32) 20:36:40 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000001009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) fcntl$setflags(r1, 0x2, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x6}}, @func={0x5, 0x0, 0x0, 0xc, 0x1}, @typedef={0xd, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f00000000c0)=""/162, 0x4d, 0xa2}, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) 20:36:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) r1 = syz_open_pts(r0, 0x24000) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x8000000000000000, 0x40900) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000000)={0x0, 0x3, [0x2, 0x1e4, 0x4bf, 0x5, 0x0, 0x58]}) syz_open_pts(r1, 0x2040) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)="352582cfa38ed757f4fec090c9dbc98aa81a7d943fd805ae6484bc62f12a98d4608c8c049369799abf9e3e676dc89ce96a5d981731212b252976b52c5ddccf80fb68d7e3824973b3304bc5284c05a7a1bc0d3901a38a19cc202a624c13f91cf0e5d5a7c077965549ebee5dcde785a80e22f5ac8f161ba725355439e55ac86cbc129523783ab4fde705227648fc41216090e113aabc704d05a9cce748d63abcfca2e87592ee3657f5eb4fb19643f3a220540de7edde772a203f790d74b0abacb5e94986d8a523dd677f14d876cc7ab682ebe40fcb4dc0890aad2453e443bea02ab16aa1fda660db6adcb705a5550dd3ca", 0xf0}, {&(0x7f0000000200)="b10d8fcb5c6fa9b84b7c0952ecd0b0c8b88a0519edfa27acf9c3f7a624f15c34d548ac3d60c9fe3252e49f3e005d8bf47b9fa87257e29b39f13d61690f6f0e8ee3a43d11b8bbef5bc68371f96ecca5f807e562c89d75d6e521ca3255baff686457faac51ccc1e0658c16126c1078377249a18113edfd1d9b56da4205a059842473", 0x81}, {&(0x7f0000000080)="84682585358a", 0x6}, {&(0x7f00000002c0)="1e2ef88971804cab0faf102589d654daa9bfed98824c51eb6d1c1262aaa0f35bc55bfd74a6cf341863787bb83330effe66241e277ad8feb58710729a50f5e99598ce7c62fb9a8c85e91eb3d3cc145007b7bf31c49ffd6d024359e2850d837e60fe70d24e665d8ba794f5c4e9879c033d8ab2e220efc66fef3043eb98f62e927cfb471a63a6e26ac96a88fc1428b5d7f5a8c46426c7490720e97278af18e9d25733de6f8e1af4f817170f9a80f325feb887bf7f1e6294c60275ade570ef2d951bb3aa880e7a3942188bdcc6725b10cfa6b9597ee03b", 0xd5}], 0x4) 20:36:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r2 = syz_open_dev$sg(&(0x7f0000659000), 0xff, 0x44000) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESDEC=r2], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r1, 0x0) dup3(r3, r1, 0x0) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x1, 0x0, "0000000000ff3fddffffff00"}) r4 = syz_open_pts(r0, 0x0) dup3(r4, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) syz_open_dev$sg(&(0x7f0000659000), 0xff, 0x44000) (async) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESDEC=r2], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r1, 0x0) (async) dup3(r3, r1, 0x0) (async) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x1, 0x0, "0000000000ff3fddffffff00"}) (async) syz_open_pts(r0, 0x0) (async) dup3(r4, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 20:36:40 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000001009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) fcntl$setflags(r1, 0x2, 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x6}}, @func={0x5, 0x0, 0x0, 0xc, 0x1}, @typedef={0xd, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f00000000c0)=""/162, 0x4d, 0xa2}, 0x20) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) 20:36:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) r1 = syz_open_pts(r0, 0x24000) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x8000000000000000, 0x40900) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000000)={0x0, 0x3, [0x2, 0x1e4, 0x4bf, 0x5, 0x0, 0x58]}) syz_open_pts(r1, 0x2040) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)="352582cfa38ed757f4fec090c9dbc98aa81a7d943fd805ae6484bc62f12a98d4608c8c049369799abf9e3e676dc89ce96a5d981731212b252976b52c5ddccf80fb68d7e3824973b3304bc5284c05a7a1bc0d3901a38a19cc202a624c13f91cf0e5d5a7c077965549ebee5dcde785a80e22f5ac8f161ba725355439e55ac86cbc129523783ab4fde705227648fc41216090e113aabc704d05a9cce748d63abcfca2e87592ee3657f5eb4fb19643f3a220540de7edde772a203f790d74b0abacb5e94986d8a523dd677f14d876cc7ab682ebe40fcb4dc0890aad2453e443bea02ab16aa1fda660db6adcb705a5550dd3ca", 0xf0}, {&(0x7f0000000200)="b10d8fcb5c6fa9b84b7c0952ecd0b0c8b88a0519edfa27acf9c3f7a624f15c34d548ac3d60c9fe3252e49f3e005d8bf47b9fa87257e29b39f13d61690f6f0e8ee3a43d11b8bbef5bc68371f96ecca5f807e562c89d75d6e521ca3255baff686457faac51ccc1e0658c16126c1078377249a18113edfd1d9b56da4205a059842473", 0x81}, {&(0x7f0000000080)="84682585358a", 0x6}, {&(0x7f00000002c0)="1e2ef88971804cab0faf102589d654daa9bfed98824c51eb6d1c1262aaa0f35bc55bfd74a6cf341863787bb83330effe66241e277ad8feb58710729a50f5e99598ce7c62fb9a8c85e91eb3d3cc145007b7bf31c49ffd6d024359e2850d837e60fe70d24e665d8ba794f5c4e9879c033d8ab2e220efc66fef3043eb98f62e927cfb471a63a6e26ac96a88fc1428b5d7f5a8c46426c7490720e97278af18e9d25733de6f8e1af4f817170f9a80f325feb887bf7f1e6294c60275ade570ef2d951bb3aa880e7a3942188bdcc6725b10cfa6b9597ee03b", 0xd5}], 0x4) 20:36:40 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="2cff24cf20e5bb5576122c81e688e4", @ANYRES32=r4, @ANYBLOB="00000000000000000a000100aaaaaaaaaaaa0000"], 0x2c}}, 0x0) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x2c, 0xc, r4, 0x32}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000380)="ad78c34f3d4d6ccf6fe24a5e1f613d91fc6418b4000e26ed1ac28d1328d51863527e1624caf75b608908534beaf456da540ac9008b2af3da743118a022a312f99060294b32dfdde1b13cd0e824b5a03bb9589b46254110099751137617c698efa42ef9b7e976", 0x66}, {&(0x7f00000004c0)="76b25b33c7d93a87791ebf2dcdcfd1a8e2c0fe6c691bb89bc2585dea6c8ad57e4434a825c02e72b1a679c11c58d9a56b951ad6a54304bedebe1f5dc5b781e29742a70e64a8f860a94bed441b9e28d9573ba02c31ac4fefba1b069f44eb92d2a9fb644448d914c9d14051feb423d94714c80347b622dcad61901eb576388af2639921f534e49dac266f4d01dadd1b49d7258a831fa0da3c2cd8ecfd54e7a5619a88b2709d3ede13d674458eaf17899b34c57748e5dea0b9d238e155f1970c99e8ca5d71b599b6d9c2b4a15ee56357e77c", 0xd0}], 0x2, 0x0, 0x0, 0x4010}, 0x44840) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x2, 0xf2e, 0x0, 0x6}, 0x8, 0x6, 'id1\x00', 'timer0\x00', 0x0, 0x0, 0x200, 0x7}) 20:36:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) r1 = syz_open_pts(r0, 0x24000) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x8000000000000000, 0x40900) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000000)={0x0, 0x3, [0x2, 0x1e4, 0x4bf, 0x5, 0x0, 0x58]}) syz_open_pts(r1, 0x2040) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)="352582cfa38ed757f4fec090c9dbc98aa81a7d943fd805ae6484bc62f12a98d4608c8c049369799abf9e3e676dc89ce96a5d981731212b252976b52c5ddccf80fb68d7e3824973b3304bc5284c05a7a1bc0d3901a38a19cc202a624c13f91cf0e5d5a7c077965549ebee5dcde785a80e22f5ac8f161ba725355439e55ac86cbc129523783ab4fde705227648fc41216090e113aabc704d05a9cce748d63abcfca2e87592ee3657f5eb4fb19643f3a220540de7edde772a203f790d74b0abacb5e94986d8a523dd677f14d876cc7ab682ebe40fcb4dc0890aad2453e443bea02ab16aa1fda660db6adcb705a5550dd3ca", 0xf0}, {&(0x7f0000000200)="b10d8fcb5c6fa9b84b7c0952ecd0b0c8b88a0519edfa27acf9c3f7a624f15c34d548ac3d60c9fe3252e49f3e005d8bf47b9fa87257e29b39f13d61690f6f0e8ee3a43d11b8bbef5bc68371f96ecca5f807e562c89d75d6e521ca3255baff686457faac51ccc1e0658c16126c1078377249a18113edfd1d9b56da4205a059842473", 0x81}, {&(0x7f0000000080)="84682585358a", 0x6}, {&(0x7f00000002c0)="1e2ef88971804cab0faf102589d654daa9bfed98824c51eb6d1c1262aaa0f35bc55bfd74a6cf341863787bb83330effe66241e277ad8feb58710729a50f5e99598ce7c62fb9a8c85e91eb3d3cc145007b7bf31c49ffd6d024359e2850d837e60fe70d24e665d8ba794f5c4e9879c033d8ab2e220efc66fef3043eb98f62e927cfb471a63a6e26ac96a88fc1428b5d7f5a8c46426c7490720e97278af18e9d25733de6f8e1af4f817170f9a80f325feb887bf7f1e6294c60275ade570ef2d951bb3aa880e7a3942188bdcc6725b10cfa6b9597ee03b", 0xd5}], 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) syz_open_pts(r0, 0x24000) (async) syz_open_dev$sg(&(0x7f0000659000), 0x8000000000000000, 0x40900) (async) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000000)={0x0, 0x3, [0x2, 0x1e4, 0x4bf, 0x5, 0x0, 0x58]}) (async) syz_open_pts(r1, 0x2040) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)="352582cfa38ed757f4fec090c9dbc98aa81a7d943fd805ae6484bc62f12a98d4608c8c049369799abf9e3e676dc89ce96a5d981731212b252976b52c5ddccf80fb68d7e3824973b3304bc5284c05a7a1bc0d3901a38a19cc202a624c13f91cf0e5d5a7c077965549ebee5dcde785a80e22f5ac8f161ba725355439e55ac86cbc129523783ab4fde705227648fc41216090e113aabc704d05a9cce748d63abcfca2e87592ee3657f5eb4fb19643f3a220540de7edde772a203f790d74b0abacb5e94986d8a523dd677f14d876cc7ab682ebe40fcb4dc0890aad2453e443bea02ab16aa1fda660db6adcb705a5550dd3ca", 0xf0}, {&(0x7f0000000200)="b10d8fcb5c6fa9b84b7c0952ecd0b0c8b88a0519edfa27acf9c3f7a624f15c34d548ac3d60c9fe3252e49f3e005d8bf47b9fa87257e29b39f13d61690f6f0e8ee3a43d11b8bbef5bc68371f96ecca5f807e562c89d75d6e521ca3255baff686457faac51ccc1e0658c16126c1078377249a18113edfd1d9b56da4205a059842473", 0x81}, {&(0x7f0000000080)="84682585358a", 0x6}, {&(0x7f00000002c0)="1e2ef88971804cab0faf102589d654daa9bfed98824c51eb6d1c1262aaa0f35bc55bfd74a6cf341863787bb83330effe66241e277ad8feb58710729a50f5e99598ce7c62fb9a8c85e91eb3d3cc145007b7bf31c49ffd6d024359e2850d837e60fe70d24e665d8ba794f5c4e9879c033d8ab2e220efc66fef3043eb98f62e927cfb471a63a6e26ac96a88fc1428b5d7f5a8c46426c7490720e97278af18e9d25733de6f8e1af4f817170f9a80f325feb887bf7f1e6294c60275ade570ef2d951bb3aa880e7a3942188bdcc6725b10cfa6b9597ee03b", 0xd5}], 0x4) (async) 20:36:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) syz_open_pts(r2, 0x9a801) r4 = dup3(r1, r0, 0x0) r5 = accept4$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x80000) close(r5) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, "492eecef74ff663220cda6e3eb65f70e04fc8e"}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) r7 = socket(0xa, 0x1, 0x0) close(r7) sendmmsg$inet_sctp(r7, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2035aec89daaf3ffffffffffffff"], 0x20}], 0x1, 0x0) poll(&(0x7f0000001340)=[{r7}], 0x1, 0x0) getpeername$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1500, 0x0) connect$pptp(r8, &(0x7f0000000240)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)) ioctl$TCFLSH(r1, 0x540b, 0x2) r9 = syz_open_pts(r6, 0x0) dup3(r9, r6, 0x0) readv(r6, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1) 20:36:40 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000001009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) fcntl$setflags(r1, 0x2, 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x6}}, @func={0x5, 0x0, 0x0, 0xc, 0x1}, @typedef={0xd, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f00000000c0)=""/162, 0x4d, 0xa2}, 0x20) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) 20:36:40 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="2cff24cf20e5bb5576122c81e688e4", @ANYRES32=r4, @ANYBLOB="00000000000000000a000100aaaaaaaaaaaa0000"], 0x2c}}, 0x0) (async) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x2c, 0xc, r4, 0x32}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000380)="ad78c34f3d4d6ccf6fe24a5e1f613d91fc6418b4000e26ed1ac28d1328d51863527e1624caf75b608908534beaf456da540ac9008b2af3da743118a022a312f99060294b32dfdde1b13cd0e824b5a03bb9589b46254110099751137617c698efa42ef9b7e976", 0x66}, {&(0x7f00000004c0)="76b25b33c7d93a87791ebf2dcdcfd1a8e2c0fe6c691bb89bc2585dea6c8ad57e4434a825c02e72b1a679c11c58d9a56b951ad6a54304bedebe1f5dc5b781e29742a70e64a8f860a94bed441b9e28d9573ba02c31ac4fefba1b069f44eb92d2a9fb644448d914c9d14051feb423d94714c80347b622dcad61901eb576388af2639921f534e49dac266f4d01dadd1b49d7258a831fa0da3c2cd8ecfd54e7a5619a88b2709d3ede13d674458eaf17899b34c57748e5dea0b9d238e155f1970c99e8ca5d71b599b6d9c2b4a15ee56357e77c", 0xd0}], 0x2, 0x0, 0x0, 0x4010}, 0x44840) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x2, 0xf2e, 0x0, 0x6}, 0x8, 0x6, 'id1\x00', 'timer0\x00', 0x0, 0x0, 0x200, 0x7}) 20:36:40 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 20:36:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7, 0x96, 0x7fc0000, 0x0, 0xd, "33b74529ab9da67522c4dc6e015856504380a3"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x4) 20:36:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}) dup3(0xffffffffffffffff, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:41 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="2cff24cf20e5bb5576122c81e688e4", @ANYRES32=r4, @ANYBLOB="00000000000000000a000100aaaaaaaaaaaa0000"], 0x2c}}, 0x0) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x2c, 0xc, r4, 0x32}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000380)="ad78c34f3d4d6ccf6fe24a5e1f613d91fc6418b4000e26ed1ac28d1328d51863527e1624caf75b608908534beaf456da540ac9008b2af3da743118a022a312f99060294b32dfdde1b13cd0e824b5a03bb9589b46254110099751137617c698efa42ef9b7e976", 0x66}, {&(0x7f00000004c0)="76b25b33c7d93a87791ebf2dcdcfd1a8e2c0fe6c691bb89bc2585dea6c8ad57e4434a825c02e72b1a679c11c58d9a56b951ad6a54304bedebe1f5dc5b781e29742a70e64a8f860a94bed441b9e28d9573ba02c31ac4fefba1b069f44eb92d2a9fb644448d914c9d14051feb423d94714c80347b622dcad61901eb576388af2639921f534e49dac266f4d01dadd1b49d7258a831fa0da3c2cd8ecfd54e7a5619a88b2709d3ede13d674458eaf17899b34c57748e5dea0b9d238e155f1970c99e8ca5d71b599b6d9c2b4a15ee56357e77c", 0xd0}], 0x2, 0x0, 0x0, 0x4010}, 0x44840) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x2, 0xf2e, 0x0, 0x6}, 0x8, 0x6, 'id1\x00', 'timer0\x00', 0x0, 0x0, 0x200, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'macsec0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="2cff24cf20e5bb5576122c81e688e4", @ANYRES32=r4, @ANYBLOB="00000000000000000a000100aaaaaaaaaaaa0000"], 0x2c}}, 0x0) (async) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x2c, 0xc, r4, 0x32}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000380)="ad78c34f3d4d6ccf6fe24a5e1f613d91fc6418b4000e26ed1ac28d1328d51863527e1624caf75b608908534beaf456da540ac9008b2af3da743118a022a312f99060294b32dfdde1b13cd0e824b5a03bb9589b46254110099751137617c698efa42ef9b7e976", 0x66}, {&(0x7f00000004c0)="76b25b33c7d93a87791ebf2dcdcfd1a8e2c0fe6c691bb89bc2585dea6c8ad57e4434a825c02e72b1a679c11c58d9a56b951ad6a54304bedebe1f5dc5b781e29742a70e64a8f860a94bed441b9e28d9573ba02c31ac4fefba1b069f44eb92d2a9fb644448d914c9d14051feb423d94714c80347b622dcad61901eb576388af2639921f534e49dac266f4d01dadd1b49d7258a831fa0da3c2cd8ecfd54e7a5619a88b2709d3ede13d674458eaf17899b34c57748e5dea0b9d238e155f1970c99e8ca5d71b599b6d9c2b4a15ee56357e77c", 0xd0}], 0x2, 0x0, 0x0, 0x4010}, 0x44840) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r7, &(0x7f0000000240)=0x100000000000000, 0x12) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x2, 0xf2e, 0x0, 0x6}, 0x8, 0x6, 'id1\x00', 'timer0\x00', 0x0, 0x0, 0x200, 0x7}) (async) 20:36:41 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 20:36:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x12) 20:36:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) syz_open_pts(r2, 0x9a801) r4 = dup3(r1, r0, 0x0) r5 = accept4$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x80000) close(r5) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, "492eecef74ff663220cda6e3eb65f70e04fc8e"}) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) (async) r7 = socket(0xa, 0x1, 0x0) close(r7) sendmmsg$inet_sctp(r7, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2035aec89daaf3ffffffffffffff"], 0x20}], 0x1, 0x0) (async) poll(&(0x7f0000001340)=[{r7}], 0x1, 0x0) (async) getpeername$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1500, 0x0) connect$pptp(r8, &(0x7f0000000240)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) (async) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)) ioctl$TCFLSH(r1, 0x540b, 0x2) r9 = syz_open_pts(r6, 0x0) dup3(r9, r6, 0x0) readv(r6, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1) 20:36:41 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 20:36:41 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7, 0x96, 0x7fc0000, 0x0, 0xd, "33b74529ab9da67522c4dc6e015856504380a3"}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x4) 20:36:41 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000800000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:41 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000800000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:41 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:41 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000800000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}) (async) dup3(0xffffffffffffffff, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) (async) 20:36:42 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) (async) 20:36:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async, rerun: 64) r1 = syz_open_pts(r0, 0x0) (rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) (async) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) syz_open_pts(r2, 0x9a801) (async) r4 = dup3(r1, r0, 0x0) r5 = accept4$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x80000) close(r5) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, "492eecef74ff663220cda6e3eb65f70e04fc8e"}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) (async) r7 = socket(0xa, 0x1, 0x0) close(r7) (async, rerun: 32) sendmmsg$inet_sctp(r7, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2035aec89daaf3ffffffffffffff"], 0x20}], 0x1, 0x0) (async, rerun: 32) poll(&(0x7f0000001340)=[{r7}], 0x1, 0x0) getpeername$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) (async) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1500, 0x0) connect$pptp(r8, &(0x7f0000000240)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) (async) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)) (async) ioctl$TCFLSH(r1, 0x540b, 0x2) (async) r9 = syz_open_pts(r6, 0x0) dup3(r9, r6, 0x0) readv(r6, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1) 20:36:42 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0x5]}, 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)={{0x0, 0x0, 0xe2, 0x3}}) 20:36:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x12) 20:36:42 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xa3, &(0x7f0000000040)=""/163, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:42 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0x5]}, 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)={{0x0, 0x0, 0xe2, 0x3}}) 20:36:42 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) r1 = signalfd(r0, &(0x7f0000000040)={[0x5]}, 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)={{0x0, 0x0, 0xe2, 0x3}}) 20:36:42 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xa3, &(0x7f0000000040)=""/163, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async, rerun: 64) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7, 0x96, 0x7fc0000, 0x0, 0xd, "33b74529ab9da67522c4dc6e015856504380a3"}) (async, rerun: 64) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (rerun: 64) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) (async, rerun: 64) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x4) (rerun: 64) 20:36:42 executing program 2: times(&(0x7f0000000040)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) times(&(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:42 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x4) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4aeb01, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x5, 0x0, 0x1, 0x2, 0x13, "17d41e7bcf819894af78bc56ba7ddf8ba7b118"}) syz_open_pts(r2, 0x80000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r0, 0x0) syz_open_pts(r3, 0x4000) dup3(r3, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x7, 0x9, 0x5, 0x20, 0x18, "c3c8b9d2a6db6d7b"}) r2 = syz_open_pts(r0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite\x00') ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x10) dup3(r2, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:42 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xa3, &(0x7f0000000040)=""/163, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:42 executing program 2: times(&(0x7f0000000040)) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) times(&(0x7f0000000080)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:42 executing program 2: times(&(0x7f0000000040)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) times(&(0x7f0000000080)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x12) 20:36:43 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x1, 0x6, 0xb, 0x1, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0x0, 0x5, 0x5, 0x18, 0x1}, @generic={0x81, 0x4, 0xa, 0x80, 0x2b7}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) 20:36:43 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x9, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @alu={0x4, 0x0, 0xc, 0x2, 0xa, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0xa}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='skb_copy_datagram_iovec\x00', r0}, 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000100)={0x2, 0x1, 0xa06, 0x1, 0x2}) 20:36:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2}) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x7, 0x9, 0x5, 0x20, 0x18, "c3c8b9d2a6db6d7b"}) (async) r2 = syz_open_pts(r0, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite\x00') ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x10) (async, rerun: 32) dup3(r2, r0, 0x0) (rerun: 32) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x604300, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:43 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x4) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4aeb01, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x5, 0x0, 0x1, 0x2, 0x13, "17d41e7bcf819894af78bc56ba7ddf8ba7b118"}) (async) syz_open_pts(r2, 0x80000) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r3 = syz_open_pts(r0, 0x0) syz_open_pts(r3, 0x4000) (async) dup3(r3, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:43 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x9, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @alu={0x4, 0x0, 0xc, 0x2, 0xa, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0xa}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='skb_copy_datagram_iovec\x00', r0}, 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000100)={0x2, 0x1, 0xa06, 0x1, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x9, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @alu={0x4, 0x0, 0xc, 0x2, 0xa, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0xa}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='skb_copy_datagram_iovec\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000100)={0x2, 0x1, 0xa06, 0x1, 0x2}) (async) 20:36:43 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x1, 0x6, 0xb, 0x1, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0x0, 0x5, 0x5, 0x18, 0x1}, @generic={0x81, 0x4, 0xa, 0x80, 0x2b7}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) 20:36:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x7f, 0x9, 0x3, 0x5, 0x14, "a8fe0a188f8d05704a45ec5fac37bbe6f001b9"}) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x7, 0x9, 0x5, 0x20, 0x18, "c3c8b9d2a6db6d7b"}) (async) r2 = syz_open_pts(r0, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite\x00') ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x10) dup3(r2, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:43 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x9, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @alu={0x4, 0x0, 0xc, 0x2, 0xa, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0xa}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='skb_copy_datagram_iovec\x00', r0}, 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000100)={0x2, 0x1, 0xa06, 0x1, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x9, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @alu={0x4, 0x0, 0xc, 0x2, 0xa, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0xa}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='skb_copy_datagram_iovec\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000100)={0x2, 0x1, 0xa06, 0x1, 0x2}) (async) 20:36:43 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) r6 = syz_io_uring_complete(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc1, &(0x7f0000000380)=""/193, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x1, r3, 0x1, r5, r6]}, 0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x604300, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) 20:36:43 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x1, 0x6, 0xb, 0x1, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0x0, 0x5, 0x5, 0x18, 0x1}, @generic={0x81, 0x4, 0xa, 0x80, 0x2b7}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) 20:36:43 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x4) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4aeb01, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x5, 0x0, 0x1, 0x2, 0x13, "17d41e7bcf819894af78bc56ba7ddf8ba7b118"}) syz_open_pts(r2, 0x80000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r0, 0x0) syz_open_pts(r3, 0x4000) dup3(r3, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x4) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4aeb01, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r1, 0x0) (async) dup3(r2, r1, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x5, 0x0, 0x1, 0x2, 0x13, "17d41e7bcf819894af78bc56ba7ddf8ba7b118"}) (async) syz_open_pts(r2, 0x80000) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) syz_open_pts(r3, 0x4000) (async) dup3(r3, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) 20:36:43 executing program 0: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000004c0)="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", 0x1000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="d29827d669b1a3e000000000001273153a518903bf5b4687bb3bf07985796f1ea115"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58, &(0x7f0000000080)}, 0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @private=0xa010102}, 0x5505b16a396e9eeb, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000140)='geneve0\x00', 0x4, 0x4, 0x40}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)) 20:36:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x604300, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x604300, 0x0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) 20:36:43 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r6 = syz_io_uring_complete(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc1, &(0x7f0000000380)=""/193, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x1, r3, 0x1, r5, r6]}, 0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x301000, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x30ba00) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:43 executing program 0: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000004c0)="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", 0x1000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="d29827d669b1a3e000000000001273153a518903bf5b4687bb3bf07985796f1ea115"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58, &(0x7f0000000080)}, 0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @private=0xa010102}, 0x5505b16a396e9eeb, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000140)='geneve0\x00', 0x4, 0x4, 0x40}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000004c0)="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", 0x1000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="d29827d669b1a3e000000000001273153a518903bf5b4687bb3bf07985796f1ea115"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58, &(0x7f0000000080)}, 0x10) (async) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @private=0xa010102}, 0x5505b16a396e9eeb, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000140)='geneve0\x00', 0x4, 0x4, 0x40}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)) (async) 20:36:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x7f, 0x9, 0x3, 0x5, 0x14, "a8fe0a188f8d05704a45ec5fac37bbe6f001b9"}) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:44 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x5386, &(0x7f0000000040)) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYBLOB="d25d29fa26b28c26b0172f14e21fc7f0e9da45f6c264c13041233220bf4a85552ee43c1364dc1667ea5dc14ecf324d0899bd8d977dd4601e2c85cd4b40043526cfb254bb2021dab90d9559dc67b0e77e21ccdbc3f985304174020404f8beae5af23d3f813f"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000140)={0xb5, 0x81, 0x3f, 0x0, 0x0, "9dbcfffc9750b17e4152c19a2613df0763e9b3", 0x4}) 20:36:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4f8161, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_pts(r1, 0x101000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 20:36:44 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async) r6 = syz_io_uring_complete(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc1, &(0x7f0000000380)=""/193, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x1, r3, 0x1, r5, r6]}, 0x80) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x301000, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x30ba00) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:44 executing program 0: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000004c0)="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", 0x1000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="d29827d669b1a3e000000000001273153a518903bf5b4687bb3bf07985796f1ea115"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58, &(0x7f0000000080)}, 0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @private=0xa010102}, 0x5505b16a396e9eeb, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000140)='geneve0\x00', 0x4, 0x4, 0x40}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000004c0)="fada7f30bbe61665977ca5f82372612de5359bab352b0248a4c9984fe6661765ad21a48b7701a224fcbb2ddc5de5c46bc3e092adcc334d5611e4b81b83f8ce3f537a16669a9935c9b2485ba1e1e1d9d36d828de3205b83091945b4a68ea5ac74355776e77d6462c585a5327481ba99abfad07f8cfbeac1429466f3017aba637c958084f321071c1a81c035379a431b83f0c5fea5cdfe5c44c65cfcea33cb367b6477902a4fe0a1e97ad10a0adb6903fd9b7eeffc4cad916e2673238ec5a290e19004f991ae6ce1fb7425dff7e6af4cbb08d337741c9a10ebe5143ddf7211b05c47ec5f16e2f1ba07ebdcc89dcb26404fc0484ac1d55d2a176aa8a989b2329392afdf78f1bcefd878be14f7be4792e1b87a1b5b4b289122046dcfaa9b4dc0857814575e3bca820a9f4c570ae47d19dcb3aad24b5731b432ee810961d11aced9cd64685bec37d13760b19e1a4a66d8208fe6f68be2e42404b449bf4df2ef0a7080b75990f86d89e7bd95245ba4966fc511dc58ed7a3688460d1c56b59101428b02016e09d837b3c69023c1aff1ebcb07358d321584f45d959aebd4589e3c04195bcef6e0d6a902e181446bfa4bf6d38882e365176de3e69a5586bc6a453a5ac21067586a48ce2e2fcf0576aabade9d7c953a393366b71acab6a0e894e94d4ad21f5402e46680056501d688430984f8ec9428efb372ba3aaa6378b91031fb226cc884135acbdef7c2476a94b8c5ff641a188d998003bfc9ffd8bc0bfd471b94d390001d5927b41abf9c3239cfaf2ada24ddfc702034cd0605be42a7ee4e71e061d9dc5916e35da30016114c34bd6a6ec2d7dbfd95f60ddf2b88a855ad846e31961b6a652746c8fa8a9b30eeb87164503856b55204c52470d18c872e73410badd4723380e3647cd9ac43c94a331276c6ad4fe2931bd50b8409d775dcdc32eaba0b5bafa499af1d2a2647e247753a7f15d786de5bd901312c0cfbc6f91189f0a247bdda594c95d145ac1ffab830ec00d306bde1e7e565338f70c335f8782474421a1216bf2c546ed3344b76d51f2e2d69cec3e453a7b265dd4a2b5dd27276d5ba73510cb91a02535c23243582c3ec9afe2008477410a6797066e8ba8e237e679045aa1c872b2f6fa1c473fe9b02e3f76750db64379275c1c505a5b06f1941c1db366bca5b860226870df19b0a44ba75b2302221271aeb4188ba6abfbbd5e6f0fe0071b653ef51e5e658ea9da014f51750e91136c5b050d8eafef76adb8a0631eac84cae138ecf472e0f1de39113f15ae7617f457ed81519afc72e4c2a1b4ee0509412b83d7f53a643e4bb769026420b0a49f1513b867dd422de6f0730396444f0968ee06e53468b19eaa21f219da7f8b5b42416c7d4831d1853c876af49322f8cd5072beabf1c19f9209485e4e964f07b77a8452b4321b1036d201fce745b3246c49cb9c52951b4465e8e96581e68495d3c56b62326fee9eeb1a9e1a0c8fe475d0f8761b2bdded4a83f6b5f6449021ce42680e44fede2493a58645c9285502dca86a4dd489e127b27c6dc2df4799d3aad6f5f5b7ece413dd0eb85aaab3c40dce27ab4357bf2f9e203cf25ff7880d54b0a168e0b3757ae1ae4be14f59ae82f8aeae1e92f90ec656a988731313a8ab4e055c8c5bdce485bd54dec51c5d2e084d1bcc13dd85b6236b919c6d97b81e886bca2276f0f4d338d33d2cb8d1023149574a125b35679814e785ebd0f5ec0a19eb47d474be0e43477b75ca571d09263a855cd28e7a5fa2c515cca5b1d12aac2c0f9dcdbb89b47bfcba023d195706217d31efcd7274ddedb614bd74b4f679509f3710acda2f792c75b7dc1412587a8e10e0b911a16b003b8f844950eac62118dc8d14d1af06f4618f06d446c7563d889bd4437f73c4011a35bb57e85cf3a7bc0b3b9fc8d6bf785fa04efc55224afa06b4e58adfe7c187580229d61f520086e98d63ffceac22845226c6948ec8ab422f6e86590b532153666c650de58bdb0f87ee097dac64521c106ae2b703d38a14a7c4b8f16c1932043d16fe2e33e875c098c563601dee364f346a3be738485945168d984bd14dec3ff9f19748bbc692d25182ce55db35c7907c95a39775627ebe8c6d3897dcaf55f6eb47ba6c67a8803e384bd90b64c6d667d10450023f9a7482ef8a2108dee94f61a9a660e85de482597a522de68ed2862d45caf832a47537fa1f94de40798ad114bd9527568636147244fdac4c0b531de8487d610975e845cac44bc54a75445db2e6331ea8ed9f25a4c3c7a39bcdf3c678332545f239ea59eaed7f3fa7e98463121d6af4a4e54e97ccd08b5ac9504b59f3f7369104f0bd6c1d06cdf344e844c75e524f614a9b44beffd2512cd8b1099810219af00a843b44f3648acaa1d7fa38ec0d381d5f14c6b2d1be8b6f9ff761d11ef850f40ce68e833984a6938b1b6145e57ed29a78e9983fd1526b3e49b4b20151aaeb9fd339fb1031654a317c747e2ec656d34f2c1a88761769ca629514387c4a8c98ac992183f5be467567a51f425c9c9b3c95fc7fd742930b4b54537fdfee229a8cd38da13ee6b3a2c19c3041b44a2e423d40e413aa5132140aeca2b53799245c290af1bda34f3aacda5a7eca85a2b0ad5e3a06bb5712f1e6c3d99305fef8d9afa0454bc24495471205a7610e32c1a42e57e2cab72053aa7a248fdc72190d8f87d54718c73dc915edc1446c7abb4b95837b7ff1efc6de84e993d2c4e3ff4938dd6913b811e172378bb6a4ac4c751aa255ece2d86777d2f10e902a83789762889c4c3472816fc0b986a4064f87b8e929111237036ee7157cb6f89652374df5a81c3567293184da6f4fd8b4399ce60567be1fe9855f050aa81f6ec7ddd0c69a3f21498a530f94ad1dec22cbdeae563cb9618ac6d081a7449e73a9e58583459180f6d723de34d91c5910a39725a16c1fd81421c59f5434114846712777660944c6b3e5c4b6468258edaf4c92c9521b3e847c1695629a4de1778685d5cf45a0ed83b50d6079a13fd9f27c17ccb87c5550a2701088a33044ae0f994ffc36439460076f169a974fef2a734f48650967532dbb14af3bcd4edba01e038a0d4fbf88a39402e484f5ea358192d0aeee581941a23f6bec1201473796460f2f52629002fd4dd7abdf2cc2b152c0703e380407dba98fe390f119c1193c9144d16d569ae1bce06fb22727c0cb041c3aaa3d8ea6fe9c57e77d80026df074acc07ca17543350636f2be2a7dc0a3f86f22ea009fc809b297774ea8af29b2666b994bb2c3407f65350a6587ad6f04d0c9350734f0e6d93b105391400d6674ba7ec44eed5bd7a2bdbac3b404ff9a6475768277ed9be594dfab9a0311df4ebca9c2b811d1b6f1ce65bb2d28bfc6e69ffc27fcee3af511923d78b04af9d040f3c2d54dc07b4c986a77fb3f539e39d2270840d135803dea8db2a244bffaae31a1214e7e3bfb2a30f08789e42fa0e9708e165ce86e08d7c5623950e24cfb404cfd277856aa31f457121b51dfa137d445ec7ea84bb69060a561b71ba5ca76965d166bcce4f01aba1d156b21653aa9c8578a2f1a62893dd811d677306befb416fe9f5fedb01d7f117de02769b10b3591f3d02800536518edfa5de75c13e59681e5a394f6ff4d6d79373a924ee3abc13a0eea6bed0faf8b4a8c29a886473168e694748187b1cb696c3eec714755caba818240e3fa4788787a31ed1a7bdaad495404951c94d55a55be628fc400f514561173ebda85e573e0800d3e87d745e409316e3b2e6fd1d263ce3aa313344fd4193eb96d4cd378e4f61ca8a8429c2cf4f2e26df36f5ec1f8acf6473f447698096631309a8ed08b01054d456f84f3a079923b2752059ce2ce2d4e88b2e5fe5e52c69c7016ffa3802362be49a7c49b6258447828e3fc17e847ecd3f5157926323051b6757789bb155a09721d3ac08fd090f7f893f79832a46fd8fd60b57a7a14e0e59e4c8032209c9e658853201f9355d30c7cc98a16373fa5d7b8f0e7abbef7f30259434864053537517554d0ca85efd4c582433b8ba0be6cf6162c391a18487e6929b19890bc31ff4a106acb3468c4d5dd287206eda476f8fdcbbf38141d29f51b0a07fcf43f7ee5fa1dc815273b5fadc37fc3da4773d19847310f6263823cdd9168463f04637706c35a9775c376d59fd18fb363dc11226630cdbf6663065021f48d56e369f1d6af84928b26eaee89a9e8a4fdea5d36e26cb8071bbb2aa22c503088db1389f28b1db33ed0b62b96395833178042fc3d73fb6ffb28c1a2f3ff0092269f2134cd4d7875c751b7b7bdd63cee9367a6c5f7e710843a7294c4a4af718a7876ba548090bd47ae5f9a166cc70021228b73f898dade82bc9a7e81ff349db74269483261edc0168d1aa80351796e895f6faf0559054ff16e8ab0022fb0899d1d0c6255ee39fc4517fc936975f7fc8557c9118640c9a100c8009234f563fa77c0f8aa0741198fe6e829969437f2b08700ad9cf3f38cec5f21585a640ae710d7c26a3fc757135cd2c36ab7f8bac3a5c435ecc7c6c62ed073023718bd1941801163c0a76e2399aad062bad9d23db39985f91263784f4c2c6df7124f27e002dfbb5c90c87032bad2fcb5359382709625819eb3f9835bd4fedbfde1f3fa7b7a5296ec74dd2675126a1808936b6ddfe8e1f2f019fe8ff6b5ea6ecd06a63e5fc73c7e1f3df6775108ec5dd9a9f798652e41bca1ca8c57374ebdfbc051358864bf8daca1498b2788bc4d8cdc645f09f4478905d03655602aa9ca940b9293ce3581db250ed6f95a2ab30ec20ea94b4fe2c0b8723114a4a50a5e02e9a5dd671d8e56dd9ad1d7fb4212ef3f2963f810258ac86077414b1ed136f6e138d7dfc5458c2b0509ca4911a2293ade51b3f212e043dfaca31b0de5d085c41972ff0c74c031293ccf75de7d73f8b578e0dddd7b7171ff2ea8936abe5bd52c87668faadee70c32dea38df616a2e725364a260c398a878dc65f8f36e83c41daf203fc27a925bf4e378dc7ddb85cfa52a8496363a57ac00b5be24a4050ee48db4337d76f0671be01ed6f59d383f056964a8ce9e3f194b7f9afe16bf98b3d59bdb0e37984d4a9b4c55eca87b5448ee244f1fcdc868cdbc1cce2952ce445b89b841c38b5ae175308f4d9afa5016b22ad932f91f5c34a419462606e9ca59cf1413b474944a36dffff544b20f8fb692535b795b1494fe3d3d49e78002655d0841ce171fbc3e27a1f6a288fb2d0897d70bf070d6e538fd316cefab46479695e7ab7792c4cec73f44290dd7cc9af8d63c41a7209217f9275eac83dbe94989754ce4da9c640e1700260d57c66efa14d720f6555037f80263f06d9ccb9df512aea1a3fc384579280704461986598b9befe3f5faebdc56eb41053f965026d6a8fa47e8bcad5aa807c10cecc502cbfb2f1ae8477e3bbb5e2a14144255797e681cd5bd33c72f431af291bd19797b4fc722479cde82cba76290d17453fda56fd7e8138a053d120ffeed080f8562453cf19fa1abadaf59c14dc110be73beaf7d9c9938151d897f1fc98abf1aa08d0d08f9c832cedfa3d9910e34c3bd31e3110fcfb8542a063f3b366027ed85883523b2959a17d59305a7e4e5022fc7e56f32e5ff935e9982a89ab18f0e74e08a89a2fb34b72c3792dc63b2ae627b3d713495fadde54326e222d6bbefee6aff441a5c8907c93d967bd7cc32a3901a59d3945e3a83ab02eb906469deb4f556bcb31eed6741862dd13451e253859a560b4141e3b80969f9f73f36921acc1d374518d2624883be803ad2404bbb3880bfd9", 0x1000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="d29827d669b1a3e000000000001273153a518903bf5b4687bb3bf07985796f1ea115"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58, &(0x7f0000000080)}, 0x10) (async) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @private=0xa010102}, 0x5505b16a396e9eeb, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000140)='geneve0\x00', 0x4, 0x4, 0x40}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)) (async) 20:36:44 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='track_foreign_dirty\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4f8161, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_pts(r1, 0x101000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 20:36:44 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000040)) 20:36:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x301000, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x30ba00) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) [ 617.535113][ T5550] ================================================================== [ 617.543232][ T5550] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 617.551481][ T5550] [ 617.553798][ T5550] write to 0xffff888107b74522 of 1 bytes by task 23346 on cpu 0: [ 617.561503][ T5550] tty_set_termios+0x4d3/0x8a0 [ 617.566291][ T5550] set_termios+0x251/0x280 [ 617.570699][ T5550] tty_mode_ioctl+0x405/0x470 [ 617.575369][ T5550] n_tty_ioctl_helper+0x83/0x340 [ 617.580298][ T5550] n_tty_ioctl+0xfc/0x1f0 [ 617.584712][ T5550] tty_ioctl+0x6e9/0x940 [ 617.588940][ T5550] __se_sys_ioctl+0xcb/0x140 [ 617.593521][ T5550] __x64_sys_ioctl+0x3f/0x50 [ 617.598120][ T5550] do_syscall_64+0x2b/0x70 [ 617.602529][ T5550] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 617.608419][ T5550] [ 617.610732][ T5550] read to 0xffff888107b74522 of 1 bytes by task 5550 on cpu 1: [ 617.618258][ T5550] n_tty_lookahead_flow_ctrl+0x1bd/0x2f0 [ 617.623891][ T5550] tty_port_default_lookahead_buf+0x81/0xb0 [ 617.629791][ T5550] flush_to_ldisc+0x33e/0x470 [ 617.634475][ T5550] process_one_work+0x3d3/0x720 [ 617.639343][ T5550] worker_thread+0x618/0xa70 [ 617.643933][ T5550] kthread+0x1a9/0x1e0 [ 617.647993][ T5550] ret_from_fork+0x1f/0x30 [ 617.652402][ T5550] [ 617.654722][ T5550] value changed: 0x13 -> 0x52 [ 617.659380][ T5550] [ 617.661687][ T5550] Reported by Kernel Concurrency Sanitizer on: [ 617.667820][ T5550] CPU: 1 PID: 5550 Comm: kworker/u4:20 Not tainted 6.1.0-rc5-syzkaller-00326-g77c51ba552a1-dirty #0 20:36:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) splice(r1, &(0x7f0000000000)=0x7, r2, &(0x7f0000000040)=0xfffffffffffffff9, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 20:36:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4f8161, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_pts(r1, 0x101000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4f8161, 0x0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_pts(r1, 0x101000) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) [ 617.678838][ T5550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 617.688884][ T5550] Workqueue: events_unbound flush_to_ldisc [ 617.694689][ T5550] ================================================================== 20:36:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x7f, 0x9, 0x3, 0x5, 0x14, "a8fe0a188f8d05704a45ec5fac37bbe6f001b9"}) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:44 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='track_foreign_dirty\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:44 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async, rerun: 32) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000040)) 20:36:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) dup(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) readv(r3, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TIOCSTI(r3, 0x541d, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) syz_open_pts(r5, 0x4000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x7) 20:36:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) splice(r1, &(0x7f0000000000)=0x7, r2, &(0x7f0000000040)=0xfffffffffffffff9, 0xffffffffffffffff, 0x0) (async) dup3(r1, r0, 0x0) 20:36:44 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x5386, &(0x7f0000000040)) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYBLOB="d25d29fa26b28c26b0172f14e21fc7f0e9da45f6c264c13041233220bf4a85552ee43c1364dc1667ea5dc14ecf324d0899bd8d977dd4601e2c85cd4b40043526cfb254bb2021dab90d9559dc67b0e77e21ccdbc3f985304174020404f8beae5af23d3f813f"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000140)={0xb5, 0x81, 0x3f, 0x0, 0x0, "9dbcfffc9750b17e4152c19a2613df0763e9b3", 0x4}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) ioctl$TCXONC(r0, 0x540a, 0x1) (async) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r1, 0x5386, &(0x7f0000000040)) (async) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYBLOB="d25d29fa26b28c26b0172f14e21fc7f0e9da45f6c264c13041233220bf4a85552ee43c1364dc1667ea5dc14ecf324d0899bd8d977dd4601e2c85cd4b40043526cfb254bb2021dab90d9559dc67b0e77e21ccdbc3f985304174020404f8beae5af23d3f813f"], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r0, 0x0) (async) dup3(r3, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000140)={0xb5, 0x81, 0x3f, 0x0, 0x0, "9dbcfffc9750b17e4152c19a2613df0763e9b3", 0x4}) (async) 20:36:45 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000040)) 20:36:45 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='track_foreign_dirty\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:45 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x8000000000000001) 20:36:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) splice(r1, &(0x7f0000000000)=0x7, r2, &(0x7f0000000040)=0xfffffffffffffff9, 0xffffffffffffffff, 0x0) (async) dup3(r1, r0, 0x0) 20:36:45 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x6, 0x80, 0x7, 0x32, 0x1, 0x6, '\x00', 0x0, r1, 0x2, 0x1, 0x2, 0xd}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) 20:36:45 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x8000000000000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x8000000000000001) (async) 20:36:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000140)="1a3e167a10af62186bd11a9528b3a764458fe3103a2c2a9f55da124fe44997cd4df686c949649bc030e72ccb489d1842ff3194250023478fde464f5d31ea60c0117a1ecb665749af9e3ddeadba53c645b048567decabdc1444d017022d753e") write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x10, "006f81bbaaff23d0bcc11adb1f7d677700"}) dup3(0xffffffffffffffff, r0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:45 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) (async) r1 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x5386, &(0x7f0000000040)) (async) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYBLOB="d25d29fa26b28c26b0172f14e21fc7f0e9da45f6c264c13041233220bf4a85552ee43c1364dc1667ea5dc14ecf324d0899bd8d977dd4601e2c85cd4b40043526cfb254bb2021dab90d9559dc67b0e77e21ccdbc3f985304174020404f8beae5af23d3f813f"], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000140)={0xb5, 0x81, 0x3f, 0x0, 0x0, "9dbcfffc9750b17e4152c19a2613df0763e9b3", 0x4}) 20:36:45 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x6, 0x80, 0x7, 0x32, 0x1, 0x6, '\x00', 0x0, r1, 0x2, 0x1, 0x2, 0xd}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) 20:36:45 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000000)) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x8000000000000001) 20:36:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x35, 0x5, 0x1, 0x100, 0x3, 0x100000, r3}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)) r5 = syz_open_pts(r4, 0x0) dup3(r5, r4, 0x0) ioctl$TIOCSTI(r4, 0x5437, 0x0) 20:36:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) dup(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) readv(r3, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TIOCSTI(r3, 0x541d, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) syz_open_pts(r5, 0x4000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x7) syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) (async) dup(r0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r1, 0x0) (async) dup3(r2, r1, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r3, 0x0) (async) dup3(r4, r3, 0x0) (async) readv(r3, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TIOCSTI(r3, 0x541d, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) (async) syz_open_pts(r5, 0x4000) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x7) (async) 20:36:45 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x6, 0x80, 0x7, 0x32, 0x1, 0x6, '\x00', 0x0, r1, 0x2, 0x1, 0x2, 0xd}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x6, 0x80, 0x7, 0x32, 0x1, 0x6, '\x00', 0x0, r1, 0x2, 0x1, 0x2, 0xd}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) (async) 20:36:45 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="182000000000000000000000000000009500000000000000724b9b2bde441f4b10403eecdca86c1312b461b2371d83324593d27ff26acafab55cb3ef0be7b38276a97864efcbba8f961fae3ae9bc97c09753da789e568ec9db2160c1143eb567d7e042b5e72c70de964752ff36c5a433887ff6282cb5dc5e83c5342e560ff879b6778c99b50d37171b064901b7e5ede22293128ca92358d2eac69e74f8b34cef26ea7db10b64"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:45 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = getpid() r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r3, &(0x7f0000000300)="81d79b30a7956e83fdf5e3c0fcf57f5bdd109537c062eb156f7d76d9ab8e62ea537ec370db8a90ddeeebc2fe81ada6d15edda448f8d4", &(0x7f00000004c0)=""/135}, 0x20) sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x12800, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, r4, 0x0, 0xf, &(0x7f0000000080)='/dev/snd/timer\x00'}, 0x30) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x3}}) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x80, 0x9, 0x8, 0x1, 0x100, 0x5}, {0x8021, 0x3, 0x1ff, 0x5, 0x2b4, 0x3}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 20:36:45 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="182000000000000000000000000000009500000000000000724b9b2bde441f4b10403eecdca86c1312b461b2371d83324593d27ff26acafab55cb3ef0be7b38276a97864efcbba8f961fae3ae9bc97c09753da789e568ec9db2160c1143eb567d7e042b5e72c70de964752ff36c5a433887ff6282cb5dc5e83c5342e560ff879b6778c99b50d37171b064901b7e5ede22293128ca92358d2eac69e74f8b34cef26ea7db10b64"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:45 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async, rerun: 64) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async, rerun: 64) r2 = getpid() (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r3, &(0x7f0000000300)="81d79b30a7956e83fdf5e3c0fcf57f5bdd109537c062eb156f7d76d9ab8e62ea537ec370db8a90ddeeebc2fe81ada6d15edda448f8d4", &(0x7f00000004c0)=""/135}, 0x20) (async) sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x12800, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, r4, 0x0, 0xf, &(0x7f0000000080)='/dev/snd/timer\x00'}, 0x30) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x3}}) (async) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x80, 0x9, 0x8, 0x1, 0x100, 0x5}, {0x8021, 0x3, 0x1ff, 0x5, 0x2b4, 0x3}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 20:36:46 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="182000000000000000000000000000009500000000000000724b9b2bde441f4b10403eecdca86c1312b461b2371d83324593d27ff26acafab55cb3ef0be7b38276a97864efcbba8f961fae3ae9bc97c09753da789e568ec9db2160c1143eb567d7e042b5e72c70de964752ff36c5a433887ff6282cb5dc5e83c5342e560ff879b6778c99b50d37171b064901b7e5ede22293128ca92358d2eac69e74f8b34cef26ea7db10b64"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="182000000000000000000000000000009500000000000000724b9b2bde441f4b10403eecdca86c1312b461b2371d83324593d27ff26acafab55cb3ef0be7b38276a97864efcbba8f961fae3ae9bc97c09753da789e568ec9db2160c1143eb567d7e042b5e72c70de964752ff36c5a433887ff6282cb5dc5e83c5342e560ff879b6778c99b50d37171b064901b7e5ede22293128ca92358d2eac69e74f8b34cef26ea7db10b64"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101000) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) 20:36:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000140)="1a3e167a10af62186bd11a9528b3a764458fe3103a2c2a9f55da124fe44997cd4df686c949649bc030e72ccb489d1842ff3194250023478fde464f5d31ea60c0117a1ecb665749af9e3ddeadba53c645b048567decabdc1444d017022d753e") (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x10, "006f81bbaaff23d0bcc11adb1f7d677700"}) (async, rerun: 32) dup3(0xffffffffffffffff, r0, 0x0) (async, rerun: 32) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:46 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000267bd7000ff2c000000127e537c705e5cc9a860476025d9d5f4babe08c3e8d9dbdf251a008da803b952fc00000014"], 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x40060) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r1, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1402}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1000}]}, 0x3c}}, 0x8000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000180)=@raw=[@generic={0x1, 0x9, 0x2, 0x1, 0x8}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='alloc_extent_state\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0xc0f85403, &(0x7f0000000000)) r6 = syz_open_dev$vcsn(&(0x7f0000000380), 0xbf, 0x400000) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f00000003c0)=0x9, 0x4) 20:36:46 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async, rerun: 32) r2 = getpid() (async, rerun: 32) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r3, &(0x7f0000000300)="81d79b30a7956e83fdf5e3c0fcf57f5bdd109537c062eb156f7d76d9ab8e62ea537ec370db8a90ddeeebc2fe81ada6d15edda448f8d4", &(0x7f00000004c0)=""/135}, 0x20) (async) sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x12800, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, r4, 0x0, 0xf, &(0x7f0000000080)='/dev/snd/timer\x00'}, 0x30) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x3}}) (async, rerun: 32) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x80, 0x9, 0x8, 0x1, 0x100, 0x5}, {0x8021, 0x3, 0x1ff, 0x5, 0x2b4, 0x3}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (rerun: 32) 20:36:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, &(0x7f0000000040)) (async) dup(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) readv(r3, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) (async) ioctl$TIOCSTI(r3, 0x541d, 0x0) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) syz_open_pts(r5, 0x4000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x7) 20:36:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x35, 0x5, 0x1, 0x100, 0x3, 0x100000, r3}) (async, rerun: 32) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (rerun: 32) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)) (async) r5 = syz_open_pts(r4, 0x0) dup3(r5, r4, 0x0) ioctl$TIOCSTI(r4, 0x5437, 0x0) 20:36:46 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:46 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000040)="4638cb674980d297daace4b8ed318853ea5dc17504510622a1b33254f3b0aa9b0082fd85c87ca3e422be65af5bb3cdf2645d095ac9", &(0x7f0000000080)=""/182}, 0x20) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f00000004c0)="2b32f1854db07180aa9ce1ac1b0e4aa15f680cb79e771da73726150c9b127bb7d7d8c8d926b300b2bde2ef982b3d69a08fc1cc857f022618ebc11dfd615e22acec258684e7470a8676e12df36ae01ec3e7e83bf5ba66b865c6978ee0c4b930ecab41d324d245af7f0b377ab6e64001456b6336c0afdd117d5268a1f3cbb3b01f9e30c46ecedbc273b1d52f69cf748d5500ed2aa169be6179bb61418a7a", &(0x7f0000000300)=@tcp=r2, 0x1}, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x80000081, 0x3}}) 20:36:46 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000267bd7000ff2c000000127e537c705e5cc9a860476025d9d5f4babe08c3e8d9dbdf251a008da803b952fc00000014"], 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x40060) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r1, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1402}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1000}]}, 0x3c}}, 0x8000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000180)=@raw=[@generic={0x1, 0x9, 0x2, 0x1, 0x8}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='alloc_extent_state\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0xc0f85403, &(0x7f0000000000)) r6 = syz_open_dev$vcsn(&(0x7f0000000380), 0xbf, 0x400000) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f00000003c0)=0x9, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000267bd7000ff2c000000127e537c705e5cc9a860476025d9d5f4babe08c3e8d9dbdf251a008da803b952fc00000014"], 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x40060) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r1, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1402}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1000}]}, 0x3c}}, 0x8000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000180)=@raw=[@generic={0x1, 0x9, 0x2, 0x1, 0x8}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='alloc_extent_state\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0xc0f85403, &(0x7f0000000000)) (async) syz_open_dev$vcsn(&(0x7f0000000380), 0xbf, 0x400000) (async) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f00000003c0)=0x9, 0x4) (async) 20:36:46 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000040)="4638cb674980d297daace4b8ed318853ea5dc17504510622a1b33254f3b0aa9b0082fd85c87ca3e422be65af5bb3cdf2645d095ac9", &(0x7f0000000080)=""/182}, 0x20) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f00000004c0)="2b32f1854db07180aa9ce1ac1b0e4aa15f680cb79e771da73726150c9b127bb7d7d8c8d926b300b2bde2ef982b3d69a08fc1cc857f022618ebc11dfd615e22acec258684e7470a8676e12df36ae01ec3e7e83bf5ba66b865c6978ee0c4b930ecab41d324d245af7f0b377ab6e64001456b6336c0afdd117d5268a1f3cbb3b01f9e30c46ecedbc273b1d52f69cf748d5500ed2aa169be6179bb61418a7a", &(0x7f0000000300)=@tcp=r2, 0x1}, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x80000081, 0x3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000040)="4638cb674980d297daace4b8ed318853ea5dc17504510622a1b33254f3b0aa9b0082fd85c87ca3e422be65af5bb3cdf2645d095ac9", &(0x7f0000000080)=""/182}, 0x20) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f00000004c0)="2b32f1854db07180aa9ce1ac1b0e4aa15f680cb79e771da73726150c9b127bb7d7d8c8d926b300b2bde2ef982b3d69a08fc1cc857f022618ebc11dfd615e22acec258684e7470a8676e12df36ae01ec3e7e83bf5ba66b865c6978ee0c4b930ecab41d324d245af7f0b377ab6e64001456b6336c0afdd117d5268a1f3cbb3b01f9e30c46ecedbc273b1d52f69cf748d5500ed2aa169be6179bb61418a7a", &(0x7f0000000300)=@tcp=r2, 0x1}, 0x20) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x80000081, 0x3}}) (async) 20:36:46 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000267bd7000ff2c000000127e537c705e5cc9a860476025d9d5f4babe08c3e8d9dbdf251a008da803b952fc00000014"], 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x40060) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r1, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1402}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1000}]}, 0x3c}}, 0x8000) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000180)=@raw=[@generic={0x1, 0x9, 0x2, 0x1, 0x8}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='alloc_extent_state\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0xc0f85403, &(0x7f0000000000)) r6 = syz_open_dev$vcsn(&(0x7f0000000380), 0xbf, 0x400000) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f00000003c0)=0x9, 0x4) 20:36:46 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000040)="4638cb674980d297daace4b8ed318853ea5dc17504510622a1b33254f3b0aa9b0082fd85c87ca3e422be65af5bb3cdf2645d095ac9", &(0x7f0000000080)=""/182}, 0x20) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f00000004c0)="2b32f1854db07180aa9ce1ac1b0e4aa15f680cb79e771da73726150c9b127bb7d7d8c8d926b300b2bde2ef982b3d69a08fc1cc857f022618ebc11dfd615e22acec258684e7470a8676e12df36ae01ec3e7e83bf5ba66b865c6978ee0c4b930ecab41d324d245af7f0b377ab6e64001456b6336c0afdd117d5268a1f3cbb3b01f9e30c46ecedbc273b1d52f69cf748d5500ed2aa169be6179bb61418a7a", &(0x7f0000000300)=@tcp=r2, 0x1}, 0x20) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x80000081, 0x3}}) 20:36:46 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000140)="1a3e167a10af62186bd11a9528b3a764458fe3103a2c2a9f55da124fe44997cd4df686c949649bc030e72ccb489d1842ff3194250023478fde464f5d31ea60c0117a1ecb665749af9e3ddeadba53c645b048567decabdc1444d017022d753e") write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x10, "006f81bbaaff23d0bcc11adb1f7d677700"}) dup3(0xffffffffffffffff, r0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x541b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000140)="1a3e167a10af62186bd11a9528b3a764458fe3103a2c2a9f55da124fe44997cd4df686c949649bc030e72ccb489d1842ff3194250023478fde464f5d31ea60c0117a1ecb665749af9e3ddeadba53c645b048567decabdc1444d017022d753e") (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x10, "006f81bbaaff23d0bcc11adb1f7d677700"}) (async) dup3(0xffffffffffffffff, r0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) (async) 20:36:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x35, 0x5, 0x1, 0x100, 0x3, 0x100000, r3}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)) r5 = syz_open_pts(r4, 0x0) dup3(r5, r4, 0x0) (async) ioctl$TIOCSTI(r4, 0x5437, 0x0) 20:36:46 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x440280, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x17, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff5}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x81, &(0x7f00000000c0)=""/129, 0x41000, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xe, 0x40, 0x6}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f00000004c0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r6]}, 0x80) 20:36:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) 20:36:46 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:47 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) dup3(r1, r0, 0x0) (async) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:47 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x440280, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x17, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff5}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x81, &(0x7f00000000c0)=""/129, 0x41000, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xe, 0x40, 0x6}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f00000004c0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r6]}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x440280, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r6, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x17, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff5}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x81, &(0x7f00000000c0)=""/129, 0x41000, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xe, 0x40, 0x6}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f00000004c0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r6]}, 0x80) (async) 20:36:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x44e100) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:47 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) 20:36:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x408000) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:47 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000380), 0x7, 0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000500), 0x0, 0xc0482) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x7fff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x1000, 0x10, &(0x7f00000000c0)=""/16, 0x41100, 0x10, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000003c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xb, 0x6, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x1, 0x1, r5]}, 0x80) 20:36:47 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000380), 0x7, 0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000500), 0x0, 0xc0482) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x7fff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x1000, 0x10, &(0x7f00000000c0)=""/16, 0x41100, 0x10, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000003c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xb, 0x6, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x1, 0x1, r5]}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) (async) syz_open_dev$vcsn(&(0x7f0000000380), 0x7, 0x2) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000500), 0x0, 0xc0482) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) (async) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x7fff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x1000, 0x10, &(0x7f00000000c0)=""/16, 0x41100, 0x10, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000003c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xb, 0x6, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x1, 0x1, r5]}, 0x80) (async) 20:36:47 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x100000000000000, 0x12) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x440280, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000240)=0x100000000000000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x17, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff5}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x81, &(0x7f00000000c0)=""/129, 0x41000, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xe, 0x40, 0x6}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f00000004c0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r6]}, 0x80) 20:36:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x44e100) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 20:36:47 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) syz_open_pts(r1, 0x0) (async) dup3(r2, r1, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) (async) 20:36:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x44e100) dup3(r1, r0, 0x0) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5437, 0x0) (rerun: 64) 20:36:47 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) (async) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:47 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000000)) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000380), 0x7, 0x2) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000500), 0x0, 0xc0482) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) (async) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000000, 0x12) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x7fff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x1000, 0x10, &(0x7f00000000c0)=""/16, 0x41100, 0x10, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000003c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xb, 0x6, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x1, 0x1, r5]}, 0x80) 20:36:47 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) (async) 20:36:47 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x5386, &(0x7f0000000040)) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYBLOB="d25d29fa26b28c26b0172f14e21fc7f0e9da45f6c264c13041233220bf4a85552ee43c1364dc1667ea5dc14ecf324d0899bd8d977dd4601e2c85cd4b40043526cfb254bb2021dab90d9559dc67b0e77e21ccdbc3f985304174020404f8beae5af23d3f813f"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000140)={0xb5, 0x81, 0x3f, 0x0, 0x0, "9dbcfffc9750b17e4152c19a2613df0763e9b3", 0x4}) 20:36:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x408000) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:47 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x7, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000659000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x5386, &(0x7f0000000040)) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000140)) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000000)) ioctl$SG_BLKTRACESTOP(r2, 0x1275, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000002e00000425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="07001c000c000ba233f3ff08000b0027030000000000000100008008000b0082000000a71028b282bc95b1143f782a214d154a5beeb66850402c07d66c7a6a708d8c2f37d593ee470eb46834dce6c823bd58f0b95e2fa543f6365db4d2d2bf98333a181e21e91749ce7de74ad752a83069aee620d12b955845318b68e88758e79648029173b8f8ea39b4046d9e5148605a420a35b626c9b66ec35f46ba4e46f065c51656b5f51fe4aa8484ee7f53620920ec6b4f58c3e8c0c60d4176de2cd3dcf4b562f179af10e0b12890f759431f99412307194a4f0a191b48d6c6086581731bdba62d7c8aedf88e500747ee9302b19e0e7e3868b0339c"], 0x3c}, 0x1, 0x0, 0x0, 0xaa1ee54e0fc97876}, 0x2401c181) r6 = syz_open_pts(r3, 0x40000) fcntl$setflags(r6, 0x2, 0x1) 20:36:47 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0xff, 0xc32c, 0x1, @dev={0xfe, 0x80, '\x00', 0xb}, @private0, 0x10, 0x700, 0x1, 0x8}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000800)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000840)={0x48c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r10}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}]}, 0x48c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r12 = syz_open_pts(r0, 0x0) dup3(r12, r0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) 20:36:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSTI(r0, 0x541d, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) (async) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) 20:36:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xen_mc_flush_reason\x00', r0}, 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x9}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r3}, "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"}) 20:36:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xen_mc_flush_reason\x00', r0}, 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x9}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r3}, "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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xen_mc_flush_reason\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x9}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r3}, "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"}) (async) 20:36:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xen_mc_flush_reason\x00', r0}, 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x9}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r3}, "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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xen_mc_flush_reason\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x9}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r3}, "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"}) (async) 20:36:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000046f8000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000046f8000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000046f8000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) (async) 20:36:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000046f8000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000046f8000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) (async) 20:36:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2506c0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='!emory.current\x00') r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x3f, 0x7, 0x7f, 0x0, 0x2, 0xa2810, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x2, 0x7fffffffffffffff}, 0x2402, 0x1, 0x80, 0x2, 0xfffffffffffffbff, 0x1, 0x7fff, 0x0, 0x4, 0x0, 0x3}, r5, 0x4, r4, 0x1) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)) r7 = syz_open_pts(r6, 0x0) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0xc2041, 0x1, 0x4}, 0x18) dup3(r0, r8, 0x0) dup3(r7, r6, 0x0) readv(r6, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$KDGKBLED(r6, 0x4b64, &(0x7f0000000140)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x9) r9 = syz_open_procfs(r1, &(0x7f0000000180)='fdinfo/3\x00') readv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) write$binfmt_misc(r9, &(0x7f0000000240)={'syz0', "5c40b391cf8dfa806b631fd89adad2222a7991fe1b539facad9a2852e104a32f2a2ac15e31d0240ab1ba1c0b59085de03703c8278518687ffe9902e4"}, 0x40) ioctl$TIOCSTI(r0, 0x541d, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE(r10, 0x5000940c, 0x0) 20:36:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x408000) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x541b, 0x0) 20:36:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x96, &(0x7f0000000400)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='!emory.current\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0xf, &(0x7f0000000040)='/dev/snd/timer\x00'}, 0x30) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)) 20:36:48 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, "492eecef74ff663220cd26e3e365f70e04fc8e"}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0xff, 0xc32c, 0x1, @dev={0xfe, 0x80, '\x00', 0xb}, @private0, 0x10, 0x700, 0x1, 0x8}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000800)={'vcan0\x00', 0x0}) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000840)={0x48c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0