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"}) r7 = socket(0x23, 0x5, 0x0) sendmsg$AUDIT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) [ 581.458571] ALSA: seq fatal error: cannot create timer (-19) 06:34:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:01 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:f']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:01 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f00000000c0)=0x84) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(khazad)\x00'}, 0xfffffffffffffe8c) accept4(r5, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:01 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:01 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:02 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f00000000c0)=0x84) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(khazad)\x00'}, 0xfffffffffffffe8c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 582.032621] overlayfs: failed to resolve 'f': -2 [ 582.039479] ALSA: seq fatal error: cannot create timer (-19) 06:34:02 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f00000000c0)=0x84) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:02 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:f']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 582.110912] ALSA: seq fatal error: cannot create timer (-19) [ 582.252401] overlayfs: failed to resolve 'f': -2 06:34:02 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:f']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:02 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f00000000c0)=0x84) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 582.288679] ALSA: seq fatal error: cannot create timer (-19) [ 582.430604] overlayfs: failed to resolve 'f': -2 [ 582.458862] ALSA: seq fatal error: cannot create timer (-19) 06:34:02 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f00000000c0)=0x84) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:02 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="3a258211f663a7720400000000000000b0f781659f8056d1d3fc72298e4b3f000000b7056f000040f87bc2fdff2c45ff01a10000c71e8fa05b2382df8e325effff8356443d7cdcfeea7d21090000ca2e572c399b37790cfb078708f8f31e327c06f5770000000000000000000000000000000000000000ce11b3e3aec46f668d4a0edf0be0d3fb7a17d9007e38bb65ea81bf7a835fc9aad84f5b443e67d008221d546ac37310470f3e92914f4eff8ab264fc0fb5d36edba31a61f4ceb75078e7cc464a97efb7c1483141d23ce68745b80ba4f3a28fbfb8ef68b3652754786ec49fd91b9c8ff254e6a36c2f1e501f302c59603046485e481de41687e7009c9cc17a69f0a5b3287acb12fda86d53a89211754c1b12072fc2db2e4924d7c226ea0ea541109906db451af5db4cf5d9a37020a46e3aaf3ffa293742c4610c8a2ec1e3039b4a0e000000000022277a39e9c0ab70b2e732eaa400520cb680e3b5c79e77bf707dc3aa8a45ee7b79ddf77f2c7cfe47eae647a8eee5f732632c1edb9e0ce7b1564ec9bc069efba9f6088e568a6070b2b55bf867ea4baa05e21395280d30f61e96a92764f574384f0d95094f840226250dccee26d10c6a886c9a647bcb7022a5ab025dc9e230efb75578ff599c969fbd86d43e69df076a1f8e03d13cac1aecdf44fca113da64117e3584084caefd8c5d7a1d395e2fb4611b6776f08450f50e48f53ce9e7bdf067258fd1f4eebe693a1486d76a03cd92250b93351f4a98d3f6770bc1ed93eea9a9c1bfe791b4d71863aa40bd1a7a1983ffb69e0b7c3b3886ea21048f14bb9132941a3bf2701174847f723ac67bb7f7b1cdc5cd0e2484a3bde638f76f93033ab417e3373f52afbefc5dc64098a7c85b074e11044c0df112bce000726117d620070a47d3ff7f0000c4e50f5b5828612200397b64873de1c923d53a12250383b715ff9ec201bb5feee0ad0066d774c82d210af53e72917383dfdc6a15fd858a9cab304d1bd22e6d8427495c7d362160cc07f946de870023650c9e67588090f4cef0729c8ac9e45f2788bdc4592a06619e5308bc901b102ce63f00000000e3bb675430def12826a6e0284494cf0113a39fc9a508f52ebcb985419e8d8466c538672acd88cb0d0d703550d757898eae575734aba20c97e44226a4586ae08dc5c24fd418000000000000000ab684fcc3694d0dfc55d9e52b4a2a3e70c27ff413870f4373e70e26bc290df72543764841bc723ef0c6c1e43b08e75828c703614c632b2d5827cb0f94778922be626173e914fd15adbf9adcf3147ce2d51cb861b7282f436e48c0afeee8ff3a3081bcd80abdfaa4606e627e20886844f5df6a82c482b9abc10eb59842a99bf1d0018c6260fad654300a0e70f18c095641809131d8e300"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:02 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:fil']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:02 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:02 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f00000000c0)=0x84) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 582.858367] ALSA: seq fatal error: cannot create timer (-19) 06:34:02 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 582.966999] overlayfs: failed to resolve 'fil': -2 06:34:03 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:fil']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:03 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) r3 = dup3(r1, r0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0xe4c637f82f22d6a5, 0x1, 0x1c71, 0x0, 0x6}, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) [ 583.048171] ALSA: seq fatal error: cannot create timer (-19) 06:34:03 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f00000000c0)=0x84) dup(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:03 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f00000000c0)=0x84) dup(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 583.181867] ALSA: seq fatal error: cannot create timer (-19) [ 583.188165] overlayfs: failed to resolve 'fil': -2 06:34:03 executing program 0: r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @can, @rc={0x1f, @fixed={[], 0x12}, 0x3}, @phonet={0x23, 0x40, 0x20}, 0xff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)='team0\x00', 0x8, 0x20, 0x362}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/crypto\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r7, 0x4010ae74, &(0x7f0000000340)={0xffffffff, 0x800}) r8 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x1, 0x0, 0x3, 0x5000000}}) 06:34:03 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:fil']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:03 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f00000000c0)=0x84) dup(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 583.290701] ALSA: seq fatal error: cannot create timer (-19) [ 583.406182] ALSA: seq fatal error: cannot create timer (-19) [ 583.446887] overlayfs: failed to resolve 'fil': -2 06:34:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:03 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f00000000c0)=0x84) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:03 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:03 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:03 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:03 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:03 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f00000000c0)=0x84) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 583.854367] overlayfs: failed to resolve 'file': -2 06:34:03 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 583.993955] ALSA: seq fatal error: cannot create timer (-19) [ 584.032569] IPVS: ftp: loaded support on port[0] = 21 06:34:04 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f00000000c0)=0x84) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 584.067733] overlayfs: failed to resolve 'file': -2 06:34:04 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8000000a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000180)={0x3, 0x9261}) read$FUSE(r5, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r4, &(0x7f0000003380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setxattr$system_posix_acl(&(0x7f00000001c0)='./bus/file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000010000000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=0xee01, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB="0200f100", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="04f601f3502b47c5a839053b0b000100d82a8491eb7910d416f881586b1b8400000000080093b8dad8001a06a9602893e1b5736e10926e05668c6ba7347dec984466822364db30dd6aaa5830e8fa57987939faeeaaa583a9fff9a43866897978934832c91ca5beab6a353f140bb1b5bb16de0837", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32=r6, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r8, @ANYBLOB="d07633140c0007"], 0x84, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000540)=0xfffffffffffffe71) r10 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r11) syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000240)="6f97ec988575426be1d96bfa5406e9863d024604c4840d3ca43bd60853bdf1757a2c774b0608a7aee42134a9693e73c19acb86f1427b73a696492efe3de7922ba2e76e7ca592e56621", 0x49}, {&(0x7f00000002c0)="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", 0xfc, 0x200}, {&(0x7f00000000c0)="6373fdd835b76601d3011b876da4f0b34a2a54d9fd7e9cc1fa9fe0214aa52ec72864d2e3a5fdcdc05d", 0x29, 0x2}], 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="646d6f64653d3030303030303030303030307e476d477bbcf3503030362c6769643d", @ANYRESDEC=r6, @ANYBLOB="457365636c6162656c2cff7f776e65723e2ec013990af9e3f3d7158330ce43d096e3de4e30bd77e4dd5f85b75f805f1b15eb4af675bb12b891c0c6207c9e4990fdd3eded32913444a95245dbba", @ANYRESDEC=r9, @ANYBLOB=',fowner<', @ANYRESDEC=r11, @ANYBLOB="2c6673757569643d33366431376337652d393761392d303330612d553163612d37326605306562622c736d61636b66737472616e736d7574653d257b2c6f626a5f757365723d255e27240f2b2d3a252e2e2f253a2a2f25252e2c7375626a5f757365723d2f6465762f736e642f736571002c61707072616973655f747970653d696d617369672c00"]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x2, 0x4, 0x1, 0x7fff}, 0x3}) 06:34:04 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 584.178423] ALSA: seq fatal error: cannot create timer (-19) 06:34:04 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 584.326869] overlayfs: failed to resolve 'file': -2 [ 584.365610] ALSA: seq fatal error: cannot create timer (-19) 06:34:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:04 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:04 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:04 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:04 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:04 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 584.782111] ALSA: seq fatal error: cannot create timer (-19) [ 584.807239] overlayfs: failed to resolve './file1': -2 06:34:04 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:04 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 584.882284] ALSA: seq fatal error: cannot create timer (-19) 06:34:04 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 584.950106] overlayfs: failed to resolve './file1': -2 [ 585.021350] ALSA: seq fatal error: cannot create timer (-19) [ 585.058539] UDF-fs: bad mount option "dmode=000000000000~GmG{¼óP006" or missing value [ 585.082410] overlayfs: failed to resolve './file1': -2 06:34:05 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:05 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0xa2200, 0x3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000340)={0x7, 'lo\x00', {0x2}, 0xbb}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x6, 0x0, 'queue0\x00', 0x1e6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000940)=0x8) lsetxattr$trusted_overlay_redirect(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./file0\x00', 0x8, 0x3) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e21, 0x10001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, [0x80000000, 0x5, 0x800, 0x1, 0x9, 0x5, 0x7, 0x1e, 0x9, 0x100, 0x1df2ebaa, 0xd30, 0x9, 0x1000, 0x200000000]}, &(0x7f0000000000)=0x100) 06:34:05 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 585.288157] ALSA: seq fatal error: cannot create timer (-19) 06:34:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:05 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:05 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:05 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:05 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:05 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:05 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 585.639745] ALSA: seq fatal error: cannot create timer (-19) 06:34:05 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:05 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 585.720045] ALSA: seq fatal error: cannot create timer (-19) 06:34:05 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 585.777531] ALSA: seq fatal error: cannot create timer (-19) [ 585.880855] ALSA: seq fatal error: cannot create timer (-19) 06:34:06 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2) 06:34:06 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:06 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:06 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:06 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:06 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 586.521738] ALSA: seq fatal error: cannot create timer (-19) 06:34:06 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000ed030000000000000000000065f8195bf574f24f0223f86a80754f65638a11c2745676fb65c7b7478d11ca74db0d8a230cc23c45e5251ad0cc8276476420d8ce4ad04400a7c67c806a8225cea2f2012021db88b3ccdfc0440f062fbdeeb5b590fb723b6c7081fb7de247a25fdb9f3e8dc8437cd418cfb485cc3026518befe906df8e54ce780a72993af304e7b76cc64a47b2fb97b2258c46100eb09a276e53c300073077b6ae6fafe59c0d941c5040a94fb7d875abcf726170eb634193dd6234c48c8314fbd2224471a213d47bbabe7b"], 0x44}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:06 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:06 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:06 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:06 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 586.709696] overlayfs: missing 'lowerdir' 06:34:06 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x20000000) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x60, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}]}, 0x60}, 0x1, 0x0, 0x0, 0x40048c0}, 0x4000) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000640)={0x3, &(0x7f00000002c0)=""/141, &(0x7f00000005c0)=[{0x3fe00000, 0x35, 0x5, &(0x7f0000000380)=""/53}, {0x8, 0xf3, 0x1, &(0x7f00000003c0)=""/243}, {0x4a2, 0xe0, 0x7f, &(0x7f00000004c0)=""/224}]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:06 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 586.866772] overlayfs: missing 'lowerdir' [ 586.930977] ALSA: seq fatal error: cannot create timer (-19) 06:34:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:07 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:07 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:07 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:07 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 587.419908] overlayfs: missing 'lowerdir' 06:34:07 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x109080, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 587.542644] overlayfs: missing 'lowerdir' 06:34:07 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:07 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:07 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x280) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0x74}, 0x4) [ 587.745074] overlayfs: missing 'lowerdir' [ 588.082360] IPVS: ftp: loaded support on port[0] = 21 06:34:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:08 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:08 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:08 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000240)={{0x1, 0x1, 0x7, 0x1, 0x4}, 0x0, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept(r2, &(0x7f00000000c0)=@nfc, &(0x7f0000000040)=0x80) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x10000, 0x78, 0x7a3, 0x104, r2, 0x27, [], 0x0, r4, 0x4, 0x0, 0x4}, 0x40) 06:34:08 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:08 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:08 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:08 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x700080, 0x0) [ 588.426562] overlayfs: missing 'lowerdir' 06:34:08 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:08 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:08 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 588.540685] ALSA: seq fatal error: cannot create timer (-19) 06:34:08 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 588.620950] ALSA: seq fatal error: cannot create timer (-19) [ 588.674637] overlayfs: missing 'lowerdir' 06:34:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:09 executing program 0: fchmod(0xffffffffffffffff, 0x40) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = socket$inet6(0xa, 0x3, 0xc2ca) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x9, 0x9, 0xff, 0x4}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x9, 0x10}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:09 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:09 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:09 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:09 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:09 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 589.325453] overlayfs: missing 'lowerdir' 06:34:09 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:09 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:09 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:09 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 589.599048] overlayfs: missing 'lowerdir' 06:34:09 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 589.860638] overlayfs: missing 'lowerdir' 06:34:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000000)={0x20, 0x7, 0x9, 0x7fff, 0x8, 0x4}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:10 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:10 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:10 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:10 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:10 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 590.239006] overlayfs: missing 'lowerdir' 06:34:10 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:10 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x3350c1, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x52ba02) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) syz_mount_image$udf(&(0x7f00000000c0)='udf\x00', &(0x7f0000000240)='./file0\x00', 0x6, 0x8, &(0x7f0000002580)=[{&(0x7f0000000280)="6e7cbd6463b2ae52133013b2ff0dc82b3342d2a854f24be616bf011d8943430d929e1b492299", 0x26, 0x8}, {&(0x7f00000002c0)="15f83ee34cec3e51d383e46b05501ddcd715f81280273b0d82d642", 0x1b, 0x9}, {&(0x7f0000000300)="428ab2c9e03852491373934d71b07c08174db575da90ed53483ea3dd7dcfdb944f835c221d430e0ba2f8b427747e6e2c561afda70f1b10353349", 0x3a, 0x602906fb}, {&(0x7f0000000340)="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", 0x1000, 0x5}, {&(0x7f0000001340)="26e913a1cf8e1abafc4cdff3b120134cb3e30a1a4695a72d14e65f18251c673c66ff90dab674cd142bb36c701f4a8dbd2797e6e5d4bc3fb34eee7c732d6b561de886b59e2ae3b0efbf70ecb049291827270e0ab5e904a60ce8527c4c5cfacd56354489f4e4bd66a90ec0367ed8d78d58b0532109837a562a85fb7b81b9c1bbf60ca91ce6cfb645dc0e9f16ea5c641d01a2eaa92560fc7dd226a15b21cd18a99b1871b088acfc1f952ca523d96fed641023bdb7a20e15c692f5792494d7a86a1595970a95a3287669e6b5e5e1a2b501b3", 0xd0, 0xfffffffffffffff8}, {&(0x7f0000001440)="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", 0x1000, 0x4}, {&(0x7f0000002440)="fb15e5265f1a11e0228ed629734f2cc62d523324497bb84ae0b1cd658d1b43d5f5d94a8286c76bd90ae7141f70471c6811d38073b026511d25176435bcd25632c7b840896ed2841c22ee02c4b449adc17835309b92a5e43c30977cebc46535181dee905d707aafe2d3e1d6f9905c1c", 0x6f}, {&(0x7f00000024c0)="49bb4139f62d786ff8d27db777fa49fc06dcc169560b0928ffdd7bb20e71cb3ede473d6e9071babcf00644b1b580ad1356e1b36f1a4cceef7722844cfd47dcdff77cb7942b7277fab639453bc526a2f919ef4f8402f98a5a8b4cc9d0cdb91b3fd13042cbae6ee164ee2c58e160907f0090d8cd6a4649de90ad79ec3c804f80bf894a6d936438d9c36bf54a0ba4f51e521a633b91321431681a3f49295279f686053b651e462b5ebb3355a4d8", 0xac, 0xc6a0}], 0x2042004, &(0x7f0000002640)=ANY=[@ANYBLOB='noadinicb,longad,>Wask=00000000000000000000000,{ession=00000000000,session=0000000!000000000006,uid=\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r5, @ANYBLOB=',\x00']) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mmap(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x200000c, 0x80010, r6, 0x23af7000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:10 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:10 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 590.489570] overlayfs: missing 'lowerdir' 06:34:10 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 590.740265] overlayfs: unrecognized mount option "lower" or missing value 06:34:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x1000, 0x0, 0x5000000}}) r3 = socket$alg(0x26, 0x5, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000000)) 06:34:11 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:11 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:11 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 591.146070] overlayfs: unrecognized mount option "lower" or missing value 06:34:11 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:11 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) sendmmsg$nfc_llcp(r3, &(0x7f0000000e00)=[{&(0x7f0000000000)={0x27, 0x0, 0x0, 0x6, 0x6, 0x1, "38b12d8a5ac35da0b48bb4bbb88c4b43fdb89d257a8f1c655994c6e1fa7efcd1333e30d9f4d39fcccd6de8a64f0b119567e5bb46bdffe87ea77f3fcd1d7765", 0x35}, 0x60, &(0x7f00000000c0)=[{&(0x7f0000000240)="3ea5cfa5b84afa7b60bfb53f337667c84b522107b12289dd225b000717258bf8e2500f614adf8cb3474a29a2e0d39a8086f1850dd2d782b38415cf27725301909cd225974490a0e44aece5244cafc8151bc002014b13cfc6a29a59e8179c4690c04b229bd45412d87a7d936cf3488fbe41977078351635091f787341d6856858a4633f35e5de6b4c5c2da5d0f63d07dc4948c1d54f9c21e26915d96e02fc4b2f13337976d10682829bfff37144f7cb983224007178fbcc0e32a04402a458da58d73a81fed7020854d638bfaeb0e4e84b0c", 0xd1}, {&(0x7f0000000340)="c971408012144c612f72758bcb081e91b44610b27047e0abd58104c25c75197fed560ee7eb77a1c78dc6d032e66de6e2f284d28e34b1c9f56edb6db513ad643f50a0c2d508a28bf008baa8a5c65bfc933c443a1e26dd35fa2bdf00ef43de31d92f53da51ac0572a410200d4acb6e131aa6cc1b1fa2f96ea1670dd8cf9b12b0924d3f884568d19c0325bccf03f9d7db4f763fe8fc73dfddae7640c7c85ac019f8c43d49c661362fbe4a2c3c119c2e1066cd34ec72a46f91616bf1fddd11bba70445bf", 0xc2}], 0x2, &(0x7f0000000440)={0xd0, 0x117, 0x3f, "aa82fe4e1a485fce1e3784bb5c9cbe595f019686aec8cf42da8638f4526d70d6a05646db5a6dcc7f4968cbafaa8490d13f5839bea55025a6b6e68894e15d5189025436ecc1a94b28b7a3af66607b5dd744fd1a9acc6f064b9d43713082ac328ff010ba740ed564d5282031e37fcca698107cdf95ebd46655a92a93f90056ab1ddc761a52f16dfc1fb6eab527a1988f3bc315390ebdf2aaa3e3d12f0c00d84616947610d93a2aadf1e4dd3d84b0b5655a9fe7b5ab54aa82415aaadf16746ab769"}, 0xd0, 0x4000}, {&(0x7f0000000540)={0x27, 0x0, 0x2, 0x1, 0x2b, 0x6, "91e5acc302223ce33d4fe87088749704b46d8299af3752eb94e5a329a8db62b4de0682bd4195bbaed47949a1e97430776a64c744067e3793ae71d910044135", 0x24}, 0x60, &(0x7f0000000a80)=[{&(0x7f00000005c0)="54ceaea204b2c17013eaba76b0aaa495eb4a211ce4bec2d1dda332a12624379f019b174d2403d3c299d9f12fdec780b699c0e14b4268dba355821eaa8bbd1eed1553d8092d0379091e01cb7e9a18d0b5ceab83173a92769fcbfd19748f1df62d663dcf2b922b", 0x66}, {&(0x7f0000000640)="bf2a4381d3c8a9559d9e8024e7948b821957336da25efc51dcf13ab7b41024f2979857df7176e95d1d9ff11cc85ff2", 0x2f}, {&(0x7f0000000680)="08099f1cc38b900e1a8a21314c7652ad1ad0ad1e43e88d6e11d5d4f17d87494351b7b1a29d96832fea309e2f7731163ce2b0596f8a69f716fe118c3c1dab60c99f2a1c2b0cfb44de8771ad097c941ce531eebc76bc80c722a7b8322d22051f77fbd0f7373b47340080efc87be2a89d29b3dad94904d5e52f1a94018fd32bbaee00358e679ad353795e898640568a4064dd23257352e7616a3685a9be2f5e57335030744e2e7f6903bc", 0xa9}, {&(0x7f0000000740)="2e11c559bf00d298795ae1d22171f9b3238eaed20ad6d3d77506f35239fdc22657fd1c871bc9c509b8d6b26586ce4191d6fc8d976f419c6e95185ce93bc396181638b4a9484327176cd2b6b11a5be99890f1992fa9d4be0661bec37349", 0x5d}, {&(0x7f00000007c0)="60496ef6867e24f20d3187b0c4044048d2e4058d713009bbdb36933151e304e1f255cd60d7c8c88addc7437413c86e23e02d9670dcca6604c434ec3871a8f1a3b18763c9a6e7e506302b0c145814f7c85f9772a957310bc7ce3066bdf6a9f2dc458c28834e4dc18848c5214491659b8b7d04e4806703c24ad1786de9e487169b3f0a7ea582e5d9b70f76360858640c4481ec45ee38576cc65dc618d8d59b4ceec5ae96eae1c10a845270b42c8e2618f4e9f1f76a46956038ec470984d7d33269c60d", 0xc2}, {&(0x7f00000008c0)="b57a69c3c0271036f7c09403fb2fbead4000650a54eeff8a8aa1042aafedbd7536c1530755faa82ca49f396d99565e350562152cc0aabfde1dd5f2b691bc17c9c2a474d40c41dbaddb924f8d5e62e385a37551594b00b342ef7ac178920f490f45f9b31179d41356387890630bad01cd7a26c4dcb9b87e2cc8d9931577c5ee4f4d40", 0x82}, {&(0x7f0000000980)="d4de543908e3678a316bd34603a892c139269f7946433fb1448d79054f4eb05c9e7892cb9a6f648fcf793bfff05f1eccf40b752f9513bc9441c631c0734cb4c88f6bfb70c433469fd41ed09f11e6b25455be7a066d88d89ed177ddf5cd294624e9bf9107c86ef4e42591bbd9f945cc8670351b56a1fa9d861baa4420de640ed1762418d863059581fc485a111c153d163a8699bd37161e445f0de2d3b3534d6cbe24843448d16381e33eeee984f0d27058b67aa701cd4a32f2155f079ddb700e92cb30d8d0f9806564c7ee9d991a7ac85e7bd86f02ea4caae57eac4bad2e280cb187", 0xe2}], 0x7}, {&(0x7f0000000b00)={0x27, 0x0, 0x1, 0x1, 0x7f, 0x7, "84afa66fc20e53a10e26551dfb04fb692cd581b8e9f73910da1a71fd2bdfc21828453fb6be83c02a84438df05c97ac8dc531f0a742038acd26624108d4e453", 0x22}, 0x60, &(0x7f0000000cc0)=[{&(0x7f0000000b80)="1476bbaa697a05b5a64111bf69add271cecc1f4b4829a8e8bd9b59ade1e06883e30efb1c6873de7d62420bedcb029ab6e21fff810783ae066ab0dd7bbb5aac2f73a21013277e2e33c82c8b731f92eaa601b903643397644f99111a654593c0d1220d7ff96cc500f86ed761879ce7dc929beabf419d38abc0408a227993699f63419707c98ae77c68075cdaa2d89572990406e57c6893beadb0b882160b3b112389ab00abc39eb44bffbbe4c5168eb47625bf281e77ebfba60bbe52405149f0af0817fa41c67031678228ae500102f98d5388c78fb9075c5f48925cdacdb4eda5a03aab378e4ffcb737d2a458", 0xec}, {&(0x7f0000000c80)="d52710997333be2268c86686dfe06dd0ad7769ed0641556bd1e8281a558055391dd07b00ec153cc108", 0x29}], 0x2, &(0x7f0000000d00)={0xd8, 0x111, 0x1f, "2ef7376df8f82574ac03f2479ecb96a473cedc810efff9413230ca9eb34148384321531f796ce7b6cb7062ba41e431f71e401a7b80e1319998582ed958d5db108d3178e0350325d69b884016f2a48a279ffa3e3b5dd1bcb73e7e8d3871dbece2598a254e5c999eac420269d7190312e4f8997e447315287252aab0224a44894a667200fe24413b90705af4ec2ce3e9b288393bd12b3d7c9135b64470f11b34d7f299827bcde50c8221c1a8887d5e08b40eca81fcf10dcbda72fb78a033ad0d6652"}, 0xd8, 0x4000000}], 0x3, 0x840) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:11 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:11 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 591.302987] ALSA: seq fatal error: cannot create timer (-19) 06:34:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:11 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 591.431178] overlayfs: unrecognized mount option "lower" or missing value [ 591.569315] IPVS: ftp: loaded support on port[0] = 21 06:34:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:12 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:12 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff, 0x52801) 06:34:12 executing program 5: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:12 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:12 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:12 executing program 5: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:12 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerd']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:12 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:12 executing program 5: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 592.364574] overlayfs: unrecognized mount option "lowerd" or missing value 06:34:12 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerd']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:12 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x90200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x81, 0x0, {0x2, 0x0, 0x80000000, 0x0, 0x5000000}}) [ 592.547731] overlayfs: unrecognized mount option "lowerd" or missing value 06:34:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:12 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r2, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}]}, 0x60}}, 0x8000) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000040)={0xf}) 06:34:12 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, 0x0) 06:34:12 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:12 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerd']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:12 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:12 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, 0x0) [ 593.042558] overlayfs: unrecognized mount option "lowerd" or missing value 06:34:13 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, 0x0) 06:34:13 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:13 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 593.216303] overlayfs: unrecognized mount option "lowerdir=" or missing value 06:34:13 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:13 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 593.348347] overlayfs: unrecognized mount option "lowerdir=" or missing value 06:34:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:13 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', '.\x00'}, 0x7) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000000c0)={0x19, 0x0, {0x3, 0x0, 0x80000000, 0x2, 0x10000}}) 06:34:13 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:13 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:13 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:13 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:13 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2aa602, 0x0) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:13 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 593.957236] overlayfs: unrecognized mount option "lowerdir=" or missing value 06:34:14 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1}, 0x100}) 06:34:14 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1}, 0x100}) 06:34:14 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 06:34:14 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 594.262359] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 594.687675] IPVS: ftp: loaded support on port[0] = 21 06:34:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:14 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1}, 0x100}) 06:34:14 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000340)=[{0x6, 0x1f, 0xf8, 0x81, @time={0x4be, 0x7f}, {0x0, 0x8}, {0x40}, @control={0x8, 0x7fcca233, 0x3}}, {0x8, 0x40, 0x88, 0xfd, @tick=0xfffff1c5, {0x1, 0x9}, {0x7, 0xfe}, @ext={0xeb, &(0x7f0000000240)="6b4cb43597e9230440c579a1a888d484669a51ef908b2d43b00a2ddb82ab1610a42edcae709fa15cd591bd53e464025d773079ee38a79196525d87e787b5ece46ed1031899f01bdedcb630d9664920335a98426eef85743fc48b3d3a5a71a4be4b9732dde74752c825b335a505ffe3a5112d19da54484dd821ca7f927fa7c32f664f27be9e4b36db94df83dd61f4b53b255f8e9d0d9c76ee19bbfc220e5f21462fa08257b3c0bec366cdb5cbb229984980a2d0539f5b69df698c3c6683e0ccfb75d6cbe8e225bba4f16a25355d0332c1485a639bdd30c7493232b2f843c0bc896fa84f38eacc52a2d7e62b"}}, {0x5, 0x80, 0x9, 0x1, @time={0xff, 0x3}, {0x81}, {0x40, 0x80}, @result={0xfaa8, 0x90000000}}, {0x0, 0xff, 0xe, 0x4, @tick=0x3, {0x0, 0x4}, {0x9, 0x1}, @time=@time={0x3, 0x7ff}}, {0x5, 0x6, 0x31, 0x7f, @time={0x10001}, {0x81, 0x5}, {0x8, 0x85}, @control={0x3f, 0x1000, 0x7}}, {0x5, 0x53, 0xf8, 0x80, @time={0x5, 0x62}, {0x3f, 0xbc}, {0x4, 0x4}, @result={0x9, 0x5}}, {0x1, 0x67, 0x81, 0x29, @time={0x8, 0x1f}, {0x4, 0x5}, {0x1, 0xfc}, @result={0x3, 0x3}}], 0xc4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) r2 = dup(r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x204, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6f, 0x3, "93d5236cf4d13ca3bf8a0da6f8860aaad6923a828dcae395cf392895b35a09ea9201d731c868e96bdf9f9e76f74e510828885f20d14824de0615e37e81bdeda9cf78ea006b150bf2871a30892c39b7a0945b57cb21e4ac70bff3cdf39460d522320e8a9c168002a2f28c69"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x91ac}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x81, @mcast2, 0xe0000000}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x51}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0001}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, [], 0x1}, 0x100}}}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcd63}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc456}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd77}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000003) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000006c0)={'batadv0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:14 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:14 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:14 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:14 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:14 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000003}, 0x2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$binfmt_misc(r3, &(0x7f0000000240)={'syz0', "c07cd097f9cb2f877fc580cf183c65ebecc0499e9c9b3fa8caa555a2c0a327d46bf744f4a5abe906a36bba3bdfe78e92b7367a6963aa1d23d210815c6373078a1b346229f640f4625aed5f1e806df944e3219ac80d07c836c3ade3836efdb42794b139099d3e82c8bd9f02f78f6a38684fe690e0b0d921275052221a41fe838b35f55e8d5b24f76bd770c83e3d9b6a73f660ce3223cdf627a753c9"}, 0x9f) 06:34:14 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:14 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}}) [ 594.897109] overlayfs: unrecognized mount option "lowerdir=" or missing value 06:34:14 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 594.942553] overlayfs: unrecognized mount option "lowerdir=" or missing value 06:34:15 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:15 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0xffff, 0x1, 0x1, 'queue1\x00', 0x81}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x4040, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f00000000c0)={0x20, 0xc95, 0x8, 0x7fffffff, 0x5, "223c388edb9a5b79210a137dc1d946b401df0e", 0x3, 0xffffffcb}) r3 = dup(r1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:15 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="3a258211f663a7720400000000000000b0f781659f8056d1d3fc72298e4b3f000000b7056f000040f87bc2fdff2c45ff01a10000c71e8fa05b2382df8e325effff8356443d7cdcfeea7d21090000ca2e572c399b37790cfb078708f8f31e327c06f5770000000000000000000000000000000000000000ce11b3e3aec46f668d4a0edf0be0d3fb7a17d9007e38bb65ea81bf7a835fc9aad84f5b443e67d008221d546ac37310470f3e92914f4eff8ab264fc0fb5d36edba31a61f4ceb75078e7cc464a97efb7c1483141d23ce68745b80ba4f3a28fbfb8ef68b3652754786ec49fd91b9c8ff254e6a36c2f1e501f302c59603046485e481de41687e7009c9cc17a69f0a5b3287acb12fda86d53a89211754c1b12072fc2db2e4924d7c226ea0ea541109906db451af5db4cf5d9a37020a46e3aaf3ffa293742c4610c8a2ec1e3039b4a0e000000000022277a39e9c0ab70b2e732eaa400520cb680e3b5c79e77bf707dc3aa8a45ee7b79ddf77f2c7cfe47eae647a8eee5f732632c1edb9e0ce7b1564ec9bc069efba9f6088e568a6070b2b55bf867ea4baa05e21395280d30f61e96a92764f574384f0d95094f840226250dccee26d10c6a886c9a647bcb7022a5ab025dc9e230efb75578ff599c969fbd86d43e69df076a1f8e03d13cac1aecdf44fca113da64117e3584084caefd8c5d7a1d395e2fb4611b6776f08450f50e48f53ce9e7bdf067258fd1f4eebe693a1486d76a03cd92250b93351f4a98d3f6770bc1ed93eea9a9c1bfe791b4d71863aa40bd1a7a1983ffb69e0b7c3b3886ea21048f14bb9132941a3bf2701174847f723ac67bb7f7b1cdc5cd0e2484a3bde638f76f93033ab417e3373f52afbefc5dc64098a7c85b074e11044c0df112bce000726117d620070a47d3ff7f0000c4e50f5b5828612200397b64873de1c923d53a12250383b715ff9ec201bb5feee0ad0066d774c82d210af53e72917383dfdc6a15fd858a9cab304d1bd22e6d8427495c7d362160cc07f946de870023650c9e67588090f4cef0729c8ac9e45f2788bdc4592a06619e5308bc901b102ce63f00000000e3bb675430def12826a6e0284494cf0113a39fc9a508f52ebcb985419e8d8466c538672acd88cb0d0d703550d757898eae575734aba20c97e44226a4586ae08dc5c24fd418000000000000000ab684fcc3694d0dfc55d9e52b4a2a3e70c27ff413870f4373e70e26bc290df72543764841bc723ef0c6c1e43b08e75828c703614c632b2d5827cb0f94778922be626173e914fd15adbf9adcf3147ce2d51cb861b7282f436e48c0afeee8ff3a3081bcd80abdfaa4606e627e20886844f5df6a82c482b9abc10eb59842a99bf1d0018c6260fad654300a0e70f18c095641809131d8e300"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:15 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:15 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:15 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockname$netrom(r3, &(0x7f0000000240)={{0x3, @rose}, [@rose, @bcast, @null, @remote, @rose, @bcast, @bcast, @netrom]}, &(0x7f0000000040)=0x48) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:15 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:16 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, 0x0, &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:16 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$unix(r4, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000bc0)={&(0x7f00000000c0)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, [], 0x1}, 0x5}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000400)="81eebb0c8259d890ec6beb4a0f02d0840671339561648e568ba5ac74657485642429daa4553d9d5a96f54170ef6884cc581c7f8319dfcbbac949ce693892ef1302cde72c1b52c33c46e61c6568", 0x4d}, {&(0x7f0000000480)}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="3d888da7bb7201dad427717685366b7be1a823ab8d590c63240376b8c64ff86fc6f2a28294ceef53eb5925a0cc10003c899a35f26e6c72011e309348f88122d2f4ed96e17bfba5adafdc44084a674ac6c322b5", 0x53}, {&(0x7f0000000580)="81c2e2999f335dd01df4e60e8a46ad5b17acae20ed2406461248e8cb04e39a1219c49c29c9210bec12a9273da1e9b364102b0edbe8b2f036d0f7f60356f7e4251d3bd55bf7c76bb45eeb17cbe078b7880de49acd75832ecacd318c4328f32007663d63e764ab2109bc20718e252379ae5f17e340c476f218fd43677a01b1fe2e88c792b789195bd59497487ddf7cf91e5fedff5b42388262", 0x98}, {&(0x7f0000000640)="e1c960a56415b402a15e338795891c1fb667c19251a83d8e15a2e0396e81e4ba382596ef313c1cf2d62585cc98f46335be46f3722dd3a841a0edaa20c3762b5c61fe70b2d0c67099db", 0x49}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="5432ba5511e53775fcdfb177e3fe4dc1b5370224a54cdb0e2100e978d97c53c31ba8735e1903", 0x26}], 0x8, &(0x7f00000007c0)=[@rthdrdstopts={{0x210, 0x29, 0x37, {0x29, 0x3e, [], [@pad1, @generic={0x3, 0x7b, "0d44b3d7fae5ca1f5c24a19b5e668d4d237fccf3354af873e84c72302c54034d880867e8d8c6ae5d699e03a6f47ef824228816f80592d47c3a9c86780714066f250c060c812bd7389a8b5e44e1c1e02798caaa992a59d65ef8b25b540fb09c919c299f2e632224e1fb0c571dc6f58238d07df88e4664481018fff3"}, @generic={0x7, 0x84, "ee0d402738007279637634be007f028490194009ee61ad0b21520ca15479c19487d5769ad30f3b46ded10a54a6c1811700002922d691bdcbb38863629657759abd6c2d3aa341e525abccd9eb63b6849ba81246144a5f629b18d7ba7a3bd454df7d43d29b528a4a42debd97a727af3593776eaf45f7346b3e5301b82567f3a3974ff0ee87"}, @generic={0x3, 0xd2, "1218cad532e480e7fb2254ba91161008d168ab7db6c8c574581dec617f2eed2bd202b329cd11b250238d72801e35203e7541dabec2bc73c92386bb8ac5e234d31fc1b58f13300c539374c0049e6ff856fa867d5061ebb6863d03fd9b9a9b0fb81fdbaa6c85db8f6434191be552033c42e3315794c8446443a54f5fdbf877ab79964ac270e2071dd80e59c4449b6c847e9bfb6467672fb123fd2a5ff0d32e9b016bb937ba860b79ed73de3b8a3df7dcff931c38790a315bd6beb91e0e9c48aca6c24f95b2b8d240ce5b11ec22ae865130eea0"}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0xc8, 0x29, 0x36, {0x0, 0x15, [], [@jumbo={0xc2, 0x4, 0x7}, @pad1, @pad1, @hao={0xc9, 0x10, @ipv4={[], [], @remote}}, @generic={0x9e, 0x86, "5b184306a3a82df2b231c62e8bcea89490426fb465b244f8cd4c85499983b1a5004dde788421768675e728f63f46648b2f2dabc4c11ad22464a4d43a07e024b31245eb2ea3e7a81bf37d4e230d156371e8614bec99ffbf0b6ec906f9b19bcffa43ea2af21db3d0e4a53acd5ee447aafc1d5521017eb1eb4a0dcac863bb6c64b3d46eb4561391"}, @padn={0x1, 0x1, [0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x80000001}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfff}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hopopts_2292={{0x68, 0x29, 0x36, {0x32, 0x9, [], [@pad1, @pad1, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x30, {0x3, 0xa, 0x3, 0x44d8, [0x3, 0x5, 0x80, 0xfffffffffffffff8, 0x5]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, [], 0x1}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x400}}, @hopopts={{0x40, 0x29, 0x36, {0x2b, 0x4, [], [@enc_lim={0x4, 0x1, 0x3f}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @ipv4={[], [], @multicast1}}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x100}]}}}], 0x3e0}, 0x440c0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={[], 0xaf, 0x9, 0x6, 0x0, 0x40, 0x3000, 0x1, [], 0x128000}) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x32d80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:16 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, 0x0, &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:16 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, 0x0, &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:16 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000000)={0x1a, 0x7, 0x1, {{0xd, '/dev/snd/seq\x00'}, 0x3}}, 0x1a) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:16 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:16 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:16 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) 06:34:16 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:16 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) 06:34:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r5, 0x2, 0x3}, &(0x7f0000000240)=0xc) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:16 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) 06:34:17 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:17 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 597.275132] IPVS: ftp: loaded support on port[0] = 21 06:34:17 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="3a258211f663a7720400000000000000b0f781659f8056d1d3fc72298e4b3f000000b7056f000040f87bc2fdff2c45ff01a10000c71e8fa05b2382df8e325effff8356443d7cdcfeea7d21090000ca2e572c399b37790cfb078708f8f31e327c06f5770000000000000000000000000000000000000000ce11b3e3aec46f668d4a0edf0be0d3fb7a17d9007e38bb65ea81bf7a835fc9aad84f5b443e67d008221d546ac37310470f3e92914f4eff8ab264fc0fb5d36edba31a61f4ceb75078e7cc464a97efb7c1483141d23ce68745b80ba4f3a28fbfb8ef68b3652754786ec49fd91b9c8ff254e6a36c2f1e501f302c59603046485e481de41687e7009c9cc17a69f0a5b3287acb12fda86d53a89211754c1b12072fc2db2e4924d7c226ea0ea541109906db451af5db4cf5d9a37020a46e3aaf3ffa293742c4610c8a2ec1e3039b4a0e000000000022277a39e9c0ab70b2e732eaa400520cb680e3b5c79e77bf707dc3aa8a45ee7b79ddf77f2c7cfe47eae647a8eee5f732632c1edb9e0ce7b1564ec9bc069efba9f6088e568a6070b2b55bf867ea4baa05e21395280d30f61e96a92764f574384f0d95094f840226250dccee26d10c6a886c9a647bcb7022a5ab025dc9e230efb75578ff599c969fbd86d43e69df076a1f8e03d13cac1aecdf44fca113da64117e3584084caefd8c5d7a1d395e2fb4611b6776f08450f50e48f53ce9e7bdf067258fd1f4eebe693a1486d76a03cd92250b93351f4a98d3f6770bc1ed93eea9a9c1bfe791b4d71863aa40bd1a7a1983ffb69e0b7c3b3886ea21048f14bb9132941a3bf2701174847f723ac67bb7f7b1cdc5cd0e2484a3bde638f76f93033ab417e3373f52afbefc5dc64098a7c85b074e11044c0df112bce000726117d620070a47d3ff7f0000c4e50f5b5828612200397b64873de1c923d53a12250383b715ff9ec201bb5feee0ad0066d774c82d210af53e72917383dfdc6a15fd858a9cab304d1bd22e6d8427495c7d362160cc07f946de870023650c9e67588090f4cef0729c8ac9e45f2788bdc4592a06619e5308bc901b102ce63f00000000e3bb675430def12826a6e0284494cf0113a39fc9a508f52ebcb985419e8d8466c538672acd88cb0d0d703550d757898eae575734aba20c97e44226a4586ae08dc5c24fd418000000000000000ab684fcc3694d0dfc55d9e52b4a2a3e70c27ff413870f4373e70e26bc290df72543764841bc723ef0c6c1e43b08e75828c703614c632b2d5827cb0f94778922be626173e914fd15adbf9adcf3147ce2d51cb861b7282f436e48c0afeee8ff3a3081bcd80abdfaa4606e627e20886844f5df6a82c482b9abc10eb59842a99bf1d0018c6260fad654300a0e70f18c095641809131d8e300"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:17 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:17 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$unix(r5, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000020540), 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_S_REGISTER(r7, 0x4038564f, &(0x7f0000000440)={{0x0, @name="039cb41c941010b8a685a986f5eb68e31ec7772b04cf5570128c713102ecf599"}, 0x8, 0xca3c}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0xffffffff, 0x0, 0x6}}) 06:34:17 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:18 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000240)={0x3f, 0x1, 0x8, 0x350, [], [], [], 0x7fffffff, 0x4, 0x0, 0x0, "6e6154969543f329aeeb254893a95546"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:18 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x2, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:18 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x81, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:18 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:18 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x430001, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001180)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001140)={&(0x7f00000011c0)={0xe70, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x38}}}}, [@NL80211_ATTR_BEACON_HEAD={0x45c, 0xe, {@wo_ht={{}, {0x6}, @device_b, @device_a, @random="518585971666", {0x4, 0x3}}, 0x6, @default, 0x800, @void, @val, @void, @val={0x4, 0x6, {0x5, 0x5, 0x8, 0x80}}, @val={0x6, 0x2, 0x9}, @void, @val={0x25, 0x3, {0x1, 0xe, 0xff}}, @void, @val={0x3c, 0x4, {0x0, 0x8, 0xb2, 0x81}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x3, 0x0, 0xe, 0xd000}}, [{0xdd, 0xb9, "d4eb030aaf25c5c554efdeeab9c6be8a942fcd8bbec91f447a0bcc46d638f68a4f2db2f1636f981fd878c65488871b73bd8ef4fd050f04bb76aeb662348f9d0e5568a71cf74908d4b2b5b77cd8faadf9f5e3523f70323300f41fe6a7c63497401ff92d2360584ee9766bb794be1e85f8761479ee07232388df2e1c7f94a6ef378988b7d1b67a8320239eed19e0d6a454ac4c4a89cab91f50f57dc3106d53b090e98cf1d05c7cff87b1dbf6041703cbcb4396cf5ce27a7db668"}, {0xdd, 0x8b, "480fe8db2f7d77526123f99ff997719afc82c0740b81869dd1c9e976e731c736e04f34e9b718162b7b9c5049b9eaf4ca66a289692526819096b3e1ddd0621c4c0a9eb46ff34b27df71e8ccb859ce4029233c9147eeaf5488302fb8347ee46132ce9e3305617f98e92db82ebd90337d74e6c407d89bc743502345d5fc24091cd20f74e6675bf9da36ddbb7b"}, {0xdd, 0xdc, "d26ef0ff3b2265c89a7c39f9e1069bea71559bd307f2d88086c8fd840290ce34eec0c4a90df99fd86e50a9648ab2d26527ae87cd2e273114e6f436bc29b8bbafd2f3663f449bb81233df4f87c48038ddc4ac9097247bf80bfc1a3a50fed216d8d7563796c510fbbef179053abcc9294a9d74e7f8607596f3d2061863426ceb009f824dce9580f295afc11a5f1b666607bdbe8a17b12a37814c39d800de062170f073e23c98135603306525562ff310d4a5de146b46149b5fe04dea2a53829544fb3034e1176acfcf46df438c0c33015d17a62096cf4490247bf26858"}, {0xdd, 0xdf, "25d7a30cf61d7a1d33df32d5cd574d5bc14672c10a9d0ef4bb392163cbfd4ff97eff94ac0f06ddf8a526cfd9e72a243c0c92b9b97579100d68d34aa2ffbf36f579d52b1c5a5e9c22a50b45921cc97d9b9a7ac5f9ba345d2752c9d2bf4283632b99b9af35a240ebb52611eb033b789f6771110683034e9a04602f2a28585b7736f0599da73d911a5f4a4b6c4c6e50f2f1fd809e8bced7e50929e251d154233234e0df5b926df1d78910e2d92a3bec219a088033283d051e08a966653b9e803f0453219e942e6c5d76820a16f2f850d483e5805dc793cd81a048d38ce125dee1"}, {0xdd, 0x96, "bde2df368aab6bbbc3c868e0bb70704044401dbd46e74621a7023c2c06cb73f81429e00bdac516c14cbc51ce5ed0835cb8f241e0d493345f5ace26171137508bac144a73c234764bcfd445a9ceb216ca0932617ef9291f8497b8a6a084f27d35b6f64bbd68bf62f103795a333d1b57aca4c9505fbf1bba8e39fec1da5ab0190e61890093cf246ba3ec17953ea76c486bc9241c0a9be4"}, {0xdd, 0xb, "a77f7fefb73adf0205be26"}, {0xdd, 0xe, "dd69240a5ef662a746f570ae3069"}, {0xdd, 0x4d, "49f14ffe1f26e0bd454898c776bd78798bb65c07f6985b8f6729c19422ec7004189653f3a7d16dfbe6726dd8be313c89b6ed001eb91cc9ffb135b9aa6469739c4567f1ca67ac5b3bb7f48ca3c9"}]}}, @NL80211_ATTR_PROBE_RESP={0x8dd, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x112, 0x80, [@preq={0x82, 0x3b, @not_ext={{0x1}, 0x7f, 0xd7, 0x3, @device_a, 0x3, "", 0x6, 0x80000001, 0x3, [{{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x1, 0x0, 0x1}, @broadcast, 0xdcc}, {{0x1}, @device_b, 0x8}]}}, @fast_bss_trans={0x37, 0xcc, {0x7, 0x5, "100e3c13d0b4d04296b74a9840d13245", "995ce704bc332194e4f381260ea03f3848042ba61418e7c062a7b470f8d0dc2c", "bf44515f175828ad1856fb5ec990414c0bb33383e174e92ed9d3dd830d93cfdb", [{0x2, 0x1b, "cade3805854aae6f36fdf0a8f9da00"/27}, {0x2, 0x18, "5f7793a41c68acf5f8cdac9862fe3483bd4cc89a06d862c1"}, {0x1, 0xc, "bd6438eb23de3a473e02f347"}, {0x1, 0x9, "62c0cbd98838b02913"}, {0x2, 0x28, "fd3bee8f7f35564be6b7d6cbae4d8ba73b4b201a060b7027928bd6ddf8f6c6d1f4348b2517a34d45"}]}}, @dsss={0x3, 0x1, 0x6}]}]}, 0xe70}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x48800, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000040)={0x8, 0x20}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:18 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:18 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:18 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:19 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:19 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:19 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x80, 0x3, 0x5000000}}) 06:34:19 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:19 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$unix(r4, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:20 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mlockall(0x3c18598eaaac2bc5) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:20 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000000)=0x9) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x404000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) [ 600.299819] IPVS: ftp: loaded support on port[0] = 21 06:34:20 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:20 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x1, {0x3, 0x1, 0x17fe, 0x1, 0x5000000}, 0x10000000}) 06:34:20 executing program 0: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x2, 0x0, 0x0, 'queue1\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000016c0)={0x73622a85, 0x110b, 0x1}) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x20000000) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x924, r4, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PROBE_RESP={0x23a, 0x91, "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"}, @NL80211_ATTR_IE={0xc9, 0x2a, [@mesh_id={0x72, 0x6}, @perr={0x84, 0xbb, {0x9, 0xb, [@ext={{}, @broadcast, 0x2, @broadcast, 0x39}, @ext={{}, @broadcast, 0x6, @broadcast, 0x33}, @ext={{}, @broadcast, 0x8, @device_a, 0x2f}, @not_ext={{}, @broadcast, 0x2, "", 0x33}, @not_ext={{}, @broadcast, 0x2e7b, "", 0x39}, @not_ext={{}, @broadcast, 0xee, "", 0x33}, @ext={{}, @broadcast, 0x8, @device_a, 0x4}, @ext={{}, @device_a, 0x10001, @device_b, 0x20}, @not_ext={{}, @device_a, 0x1, "", 0x30}, @ext={{}, @broadcast, 0x3, @device_b, 0xd}, @ext={{}, @device_a, 0x401, @device_b, 0x3b}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x38, 0x7f, [@channel_switch={0x25, 0x3, {0x0, 0x70, 0x3}}, @dsss={0x3, 0x1, 0x30}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x8, 0x81}}, @channel_switch={0x25, 0x3, {0x0, 0x24, 0x22}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @channel_switch={0x25, 0x3, {0x1, 0x6c, 0x1}}, @channel_switch={0x25, 0x3, {0x1, 0x4, 0x9}}, @ssid={0x0, 0xf, @random="7b477e5433250c8a7b64310ada0312"}]}, @NL80211_ATTR_PROBE_RESP={0x5ce, 0x91, "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"}]}, 0x924}, 0x1, 0x0, 0x0, 0x1}, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001700)='NLBL_MGMT\x00') write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:20 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 600.907390] IPVS: ftp: loaded support on port[0] = 21 06:34:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:21 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:21 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:21 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:21 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000240)={0x3, @pix_mp={0xd1d6, 0x7ff, 0x38414262, 0x9, 0xb, [{0x1, 0x7df}, {0x5e5b, 0x7329670f}, {0x1, 0x4}, {0x1, 0x957}, {0x0, 0x6}, {0x7, 0x3ff}, {0x5, 0x1a}, {0x6e95, 0x3}], 0x8, 0x6, 0x0, 0x1, 0x5}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:21 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:21 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:21 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) 06:34:22 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r1 = fcntl$dupfd(r0, 0xc0a, r0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x7fff, 0x7, 0x10000}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r2, 0x8}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB="0400"/14]) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400202) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000100)={0x0, 0x2, {0x3, 0x3, 0x0, 0x3, 0xe67c}, 0xfffe0000}) write$P9_RRENAME(r6, &(0x7f0000000000)={0x7, 0x15, 0x1}, 0x7) 06:34:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="3a258211f663a7720400000000000000b0f781659f8056d1d3fc72298e4b3f000000b7056f000040f87bc2fdff2c45ff01a10000c71e8fa05b2382df8e325effff8356443d7cdcfeea7d21090000ca2e572c399b37790cfb078708f8f31e327c06f5770000000000000000000000000000000000000000ce11b3e3aec46f668d4a0edf0be0d3fb7a17d9007e38bb65ea81bf7a835fc9aad84f5b443e67d008221d546ac37310470f3e92914f4eff8ab264fc0fb5d36edba31a61f4ceb75078e7cc464a97efb7c1483141d23ce68745b80ba4f3a28fbfb8ef68b3652754786ec49fd91b9c8ff254e6a36c2f1e501f302c59603046485e481de41687e7009c9cc17a69f0a5b3287acb12fda86d53a89211754c1b12072fc2db2e4924d7c226ea0ea541109906db451af5db4cf5d9a37020a46e3aaf3ffa293742c4610c8a2ec1e3039b4a0e000000000022277a39e9c0ab70b2e732eaa400520cb680e3b5c79e77bf707dc3aa8a45ee7b79ddf77f2c7cfe47eae647a8eee5f732632c1edb9e0ce7b1564ec9bc069efba9f6088e568a6070b2b55bf867ea4baa05e21395280d30f61e96a92764f574384f0d95094f840226250dccee26d10c6a886c9a647bcb7022a5ab025dc9e230efb75578ff599c969fbd86d43e69df076a1f8e03d13cac1aecdf44fca113da64117e3584084caefd8c5d7a1d395e2fb4611b6776f08450f50e48f53ce9e7bdf067258fd1f4eebe693a1486d76a03cd92250b93351f4a98d3f6770bc1ed93eea9a9c1bfe791b4d71863aa40bd1a7a1983ffb69e0b7c3b3886ea21048f14bb9132941a3bf2701174847f723ac67bb7f7b1cdc5cd0e2484a3bde638f76f93033ab417e3373f52afbefc5dc64098a7c85b074e11044c0df112bce000726117d620070a47d3ff7f0000c4e50f5b5828612200397b64873de1c923d53a12250383b715ff9ec201bb5feee0ad0066d774c82d210af53e72917383dfdc6a15fd858a9cab304d1bd22e6d8427495c7d362160cc07f946de870023650c9e67588090f4cef0729c8ac9e45f2788bdc4592a06619e5308bc901b102ce63f00000000e3bb675430def12826a6e0284494cf0113a39fc9a508f52ebcb985419e8d8466c538672acd88cb0d0d703550d757898eae575734aba20c97e44226a4586ae08dc5c24fd418000000000000000ab684fcc3694d0dfc55d9e52b4a2a3e70c27ff413870f4373e70e26bc290df72543764841bc723ef0c6c1e43b08e75828c703614c632b2d5827cb0f94778922be626173e914fd15adbf9adcf3147ce2d51cb861b7282f436e48c0afeee8ff3a3081bcd80abdfaa4606e627e20886844f5df6a82c482b9abc10eb59842a99bf1d0018c6260fad654300a0e70f18c095641809131d8e300"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:22 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x119583) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x5, 0x10001, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x8, 0x0, 0x5000000}}) 06:34:22 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xfffffffffffffce9, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x140a, 0x10, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x20003}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x50}}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:22 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:22 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x13) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x63) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:22 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x10000, 0x1, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x5000000}, 0x6}) 06:34:22 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:22 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_getoverrun(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x5000000}}) 06:34:22 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:23 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:23 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:23 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:23 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:24 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 604.111261] IPVS: ftp: loaded support on port[0] = 21 06:34:24 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:24 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:25 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:25 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:25 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:26 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:26 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:26 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:26 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:26 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:26 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:26 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:26 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:26 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:27 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:27 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:27 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:27 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:28 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:28 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:28 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:28 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 608.594844] IPVS: ftp: loaded support on port[0] = 21 06:34:28 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:28 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:29 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:29 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r3 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r2, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:29 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:29 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:30 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:30 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r3 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r2, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:30 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:30 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:30 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:31 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:31 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r3 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r2, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:31 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:31 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 611.735302] IPVS: ftp: loaded support on port[0] = 21 06:34:31 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:32 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:32 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:32 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:32 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r3 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r2, &(0x7f0000000300)) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:32 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:33 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:33 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:33 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:33 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r3 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r2, &(0x7f0000000300)) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:33 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:34 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:34 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:34 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:34 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r3 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r2, &(0x7f0000000300)) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:34 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:34 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="3a258211f663a7720400000000000000b0f781659f8056d1d3fc72298e4b3f000000b7056f000040f87bc2fdff2c45ff01a10000c71e8fa05b2382df8e325effff8356443d7cdcfeea7d21090000ca2e572c399b37790cfb078708f8f31e327c06f5770000000000000000000000000000000000000000ce11b3e3aec46f668d4a0edf0be0d3fb7a17d9007e38bb65ea81bf7a835fc9aad84f5b443e67d008221d546ac37310470f3e92914f4eff8ab264fc0fb5d36edba31a61f4ceb75078e7cc464a97efb7c1483141d23ce68745b80ba4f3a28fbfb8ef68b3652754786ec49fd91b9c8ff254e6a36c2f1e501f302c59603046485e481de41687e7009c9cc17a69f0a5b3287acb12fda86d53a89211754c1b12072fc2db2e4924d7c226ea0ea541109906db451af5db4cf5d9a37020a46e3aaf3ffa293742c4610c8a2ec1e3039b4a0e000000000022277a39e9c0ab70b2e732eaa400520cb680e3b5c79e77bf707dc3aa8a45ee7b79ddf77f2c7cfe47eae647a8eee5f732632c1edb9e0ce7b1564ec9bc069efba9f6088e568a6070b2b55bf867ea4baa05e21395280d30f61e96a92764f574384f0d95094f840226250dccee26d10c6a886c9a647bcb7022a5ab025dc9e230efb75578ff599c969fbd86d43e69df076a1f8e03d13cac1aecdf44fca113da64117e3584084caefd8c5d7a1d395e2fb4611b6776f08450f50e48f53ce9e7bdf067258fd1f4eebe693a1486d76a03cd92250b93351f4a98d3f6770bc1ed93eea9a9c1bfe791b4d71863aa40bd1a7a1983ffb69e0b7c3b3886ea21048f14bb9132941a3bf2701174847f723ac67bb7f7b1cdc5cd0e2484a3bde638f76f93033ab417e3373f52afbefc5dc64098a7c85b074e11044c0df112bce000726117d620070a47d3ff7f0000c4e50f5b5828612200397b64873de1c923d53a12250383b715ff9ec201bb5feee0ad0066d774c82d210af53e72917383dfdc6a15fd858a9cab304d1bd22e6d8427495c7d362160cc07f946de870023650c9e67588090f4cef0729c8ac9e45f2788bdc4592a06619e5308bc901b102ce63f00000000e3bb675430def12826a6e0284494cf0113a39fc9a508f52ebcb985419e8d8466c538672acd88cb0d0d703550d757898eae575734aba20c97e44226a4586ae08dc5c24fd418000000000000000ab684fcc3694d0dfc55d9e52b4a2a3e70c27ff413870f4373e70e26bc290df72543764841bc723ef0c6c1e43b08e75828c703614c632b2d5827cb0f94778922be626173e914fd15adbf9adcf3147ce2d51cb861b7282f436e48c0afeee8ff3a3081bcd80abdfaa4606e627e20886844f5df6a82c482b9abc10eb59842a99bf1d0018c6260fad654300a0e70f18c095641809131d8e300"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:35 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:35 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:35 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 615.541152] IPVS: ftp: loaded support on port[0] = 21 06:34:35 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:35 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:36 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:36 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:36 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:36 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:36 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r3 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r2, &(0x7f0000000300)) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:37 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:37 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:37 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:37 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="3a258211f663a7720400000000000000b0f781659f8056d1d3fc72298e4b3f000000b7056f000040f87bc2fdff2c45ff01a10000c71e8fa05b2382df8e325effff8356443d7cdcfeea7d21090000ca2e572c399b37790cfb078708f8f31e327c06f5770000000000000000000000000000000000000000ce11b3e3aec46f668d4a0edf0be0d3fb7a17d9007e38bb65ea81bf7a835fc9aad84f5b443e67d008221d546ac37310470f3e92914f4eff8ab264fc0fb5d36edba31a61f4ceb75078e7cc464a97efb7c1483141d23ce68745b80ba4f3a28fbfb8ef68b3652754786ec49fd91b9c8ff254e6a36c2f1e501f302c59603046485e481de41687e7009c9cc17a69f0a5b3287acb12fda86d53a89211754c1b12072fc2db2e4924d7c226ea0ea541109906db451af5db4cf5d9a37020a46e3aaf3ffa293742c4610c8a2ec1e3039b4a0e000000000022277a39e9c0ab70b2e732eaa400520cb680e3b5c79e77bf707dc3aa8a45ee7b79ddf77f2c7cfe47eae647a8eee5f732632c1edb9e0ce7b1564ec9bc069efba9f6088e568a6070b2b55bf867ea4baa05e21395280d30f61e96a92764f574384f0d95094f840226250dccee26d10c6a886c9a647bcb7022a5ab025dc9e230efb75578ff599c969fbd86d43e69df076a1f8e03d13cac1aecdf44fca113da64117e3584084caefd8c5d7a1d395e2fb4611b6776f08450f50e48f53ce9e7bdf067258fd1f4eebe693a1486d76a03cd92250b93351f4a98d3f6770bc1ed93eea9a9c1bfe791b4d71863aa40bd1a7a1983ffb69e0b7c3b3886ea21048f14bb9132941a3bf2701174847f723ac67bb7f7b1cdc5cd0e2484a3bde638f76f93033ab417e3373f52afbefc5dc64098a7c85b074e11044c0df112bce000726117d620070a47d3ff7f0000c4e50f5b5828612200397b64873de1c923d53a12250383b715ff9ec201bb5feee0ad0066d774c82d210af53e72917383dfdc6a15fd858a9cab304d1bd22e6d8427495c7d362160cc07f946de870023650c9e67588090f4cef0729c8ac9e45f2788bdc4592a06619e5308bc901b102ce63f00000000e3bb675430def12826a6e0284494cf0113a39fc9a508f52ebcb985419e8d8466c538672acd88cb0d0d703550d757898eae575734aba20c97e44226a4586ae08dc5c24fd418000000000000000ab684fcc3694d0dfc55d9e52b4a2a3e70c27ff413870f4373e70e26bc290df72543764841bc723ef0c6c1e43b08e75828c703614c632b2d5827cb0f94778922be626173e914fd15adbf9adcf3147ce2d51cb861b7282f436e48c0afeee8ff3a3081bcd80abdfaa4606e627e20886844f5df6a82c482b9abc10eb59842a99bf1d0018c6260fad654300a0e70f18c095641809131d8e300"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:38 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:38 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:38 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:38 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:38 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 618.767649] IPVS: ftp: loaded support on port[0] = 21 06:34:38 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:38 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:39 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:39 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:39 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:39 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:39 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:39 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:40 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:40 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:40 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:40 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f00000000c0)=0x84) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:34:40 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:40 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 620.810984] ALSA: seq fatal error: cannot create timer (-19) 06:34:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:41 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) dup2(0xffffffffffffffff, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:41 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:41 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:41 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:41 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 622.054441] IPVS: ftp: loaded support on port[0] = 21 06:34:42 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:42 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:42 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:42 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:42 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:43 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:43 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:43 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:43 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:43 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:43 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:44 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:44 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:44 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:44 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:45 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:45 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:45 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:45 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) [ 625.652838] IPVS: ftp: loaded support on port[0] = 21 06:34:45 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:46 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:46 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:46 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="3a258211f663a7720400000000000000b0f781659f8056d1d3fc72298e4b3f000000b7056f000040f87bc2fdff2c45ff01a10000c71e8fa05b2382df8e325effff8356443d7cdcfeea7d21090000ca2e572c399b37790cfb078708f8f31e327c06f5770000000000000000000000000000000000000000ce11b3e3aec46f668d4a0edf0be0d3fb7a17d9007e38bb65ea81bf7a835fc9aad84f5b443e67d008221d546ac37310470f3e92914f4eff8ab264fc0fb5d36edba31a61f4ceb75078e7cc464a97efb7c1483141d23ce68745b80ba4f3a28fbfb8ef68b3652754786ec49fd91b9c8ff254e6a36c2f1e501f302c59603046485e481de41687e7009c9cc17a69f0a5b3287acb12fda86d53a89211754c1b12072fc2db2e4924d7c226ea0ea541109906db451af5db4cf5d9a37020a46e3aaf3ffa293742c4610c8a2ec1e3039b4a0e000000000022277a39e9c0ab70b2e732eaa400520cb680e3b5c79e77bf707dc3aa8a45ee7b79ddf77f2c7cfe47eae647a8eee5f732632c1edb9e0ce7b1564ec9bc069efba9f6088e568a6070b2b55bf867ea4baa05e21395280d30f61e96a92764f574384f0d95094f840226250dccee26d10c6a886c9a647bcb7022a5ab025dc9e230efb75578ff599c969fbd86d43e69df076a1f8e03d13cac1aecdf44fca113da64117e3584084caefd8c5d7a1d395e2fb4611b6776f08450f50e48f53ce9e7bdf067258fd1f4eebe693a1486d76a03cd92250b93351f4a98d3f6770bc1ed93eea9a9c1bfe791b4d71863aa40bd1a7a1983ffb69e0b7c3b3886ea21048f14bb9132941a3bf2701174847f723ac67bb7f7b1cdc5cd0e2484a3bde638f76f93033ab417e3373f52afbefc5dc64098a7c85b074e11044c0df112bce000726117d620070a47d3ff7f0000c4e50f5b5828612200397b64873de1c923d53a12250383b715ff9ec201bb5feee0ad0066d774c82d210af53e72917383dfdc6a15fd858a9cab304d1bd22e6d8427495c7d362160cc07f946de870023650c9e67588090f4cef0729c8ac9e45f2788bdc4592a06619e5308bc901b102ce63f00000000e3bb675430def12826a6e0284494cf0113a39fc9a508f52ebcb985419e8d8466c538672acd88cb0d0d703550d757898eae575734aba20c97e44226a4586ae08dc5c24fd418000000000000000ab684fcc3694d0dfc55d9e52b4a2a3e70c27ff413870f4373e70e26bc290df72543764841bc723ef0c6c1e43b08e75828c703614c632b2d5827cb0f94778922be626173e914fd15adbf9adcf3147ce2d51cb861b7282f436e48c0afeee8ff3a3081bcd80abdfaa4606e627e20886844f5df6a82c482b9abc10eb59842a99bf1d0018c6260fad654300a0e70f18c095641809131d8e300"/1014], 0x66) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:46 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:46 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:47 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:47 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:47 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:47 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:47 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r3 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:48 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:48 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:48 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:48 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:48 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r3 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 628.866158] IPVS: ftp: loaded support on port[0] = 21 06:34:49 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:49 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:49 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:49 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:49 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:49 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r3 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:50 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:50 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:50 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:50 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:50 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r3 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:50 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r3 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:50 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="3a258211f663a7720400000000000000b0f781659f8056d1d3fc72298e4b3f000000b7056f000040f87bc2fdff2c45ff01a10000c71e8fa05b2382df8e325effff8356443d7cdcfeea7d21090000ca2e572c399b37790cfb078708f8f31e327c06f5770000000000000000000000000000000000000000ce11b3e3aec46f668d4a0edf0be0d3fb7a17d9007e38bb65ea81bf7a835fc9aad84f5b443e67d008221d546ac37310470f3e92914f4eff8ab264fc0fb5d36edba31a61f4ceb75078e7cc464a97efb7c1483141d23ce68745b80ba4f3a28fbfb8ef68b3652754786ec49fd91b9c8ff254e6a36c2f1e501f302c59603046485e481de41687e7009c9cc17a69f0a5b3287acb12fda86d53a89211754c1b12072fc2db2e4924d7c226ea0ea541109906db451af5db4cf5d9a37020a46e3aaf3ffa293742c4610c8a2ec1e3039b4a0e000000000022277a39e9c0ab70b2e732eaa400520cb680e3b5c79e77bf707dc3aa8a45ee7b79ddf77f2c7cfe47eae647a8eee5f732632c1edb9e0ce7b1564ec9bc069efba9f6088e568a6070b2b55bf867ea4baa05e21395280d30f61e96a92764f574384f0d95094f840226250dccee26d10c6a886c9a647bcb7022a5ab025dc9e230efb75578ff599c969fbd86d43e69df076a1f8e03d13cac1aecdf44fca113da64117e3584084caefd8c5d7a1d395e2fb4611b6776f08450f50e48f53ce9e7bdf067258fd1f4eebe693a1486d76a03cd92250b93351f4a98d3f6770bc1ed93eea9a9c1bfe791b4d71863aa40bd1a7a1983ffb69e0b7c3b3886ea21048f14bb9132941a3bf2701174847f723ac67bb7f7b1cdc5cd0e2484a3bde638f76f93033ab417e3373f52afbefc5dc64098a7c85b074e11044c0df112bce000726117d620070a47d3ff7f0000c4e50f5b5828612200397b64873de1c923d53a12250383b715ff9ec201bb5feee0ad0066d774c82d210af53e72917383dfdc6a15fd858a9cab304d1bd22e6d8427495c7d362160cc07f946de870023650c9e67588090f4cef0729c8ac9e45f2788bdc4592a06619e5308bc901b102ce63f00000000e3bb675430def12826a6e0284494cf0113a39fc9a508f52ebcb985419e8d8466c538672acd88cb0d0d703550d757898eae575734aba20c97e44226a4586ae08dc5c24fd418000000000000000ab684fcc3694d0dfc55d9e52b4a2a3e70c27ff413870f4373e70e26bc290df72543764841bc723ef0c6c1e43b08e75828c703614c632b2d5827cb0f94778922be626173e914fd15adbf9adcf3147ce2d51cb861b7282f436e48c0afeee8ff3a3081bcd80abdfaa4606e627e20886844f5df6a82c482b9abc10eb59842a99bf1d0018c6260fad654300a0e70f18c095641809131d8e300"/1014], 0x66) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:51 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:51 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:51 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:51 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r3 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) [ 631.829766] IPVS: ftp: loaded support on port[0] = 21 06:34:52 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="3a258211f663a7720400000000000000b0f781659f8056d1d3fc72298e4b3f000000b7056f000040f87bc2fdff2c45ff01a10000c71e8fa05b2382df8e325effff8356443d7cdcfeea7d21090000ca2e572c399b37790cfb078708f8f31e327c06f5770000000000000000000000000000000000000000ce11b3e3aec46f668d4a0edf0be0d3fb7a17d9007e38bb65ea81bf7a835fc9aad84f5b443e67d008221d546ac37310470f3e92914f4eff8ab264fc0fb5d36edba31a61f4ceb75078e7cc464a97efb7c1483141d23ce68745b80ba4f3a28fbfb8ef68b3652754786ec49fd91b9c8ff254e6a36c2f1e501f302c59603046485e481de41687e7009c9cc17a69f0a5b3287acb12fda86d53a89211754c1b12072fc2db2e4924d7c226ea0ea541109906db451af5db4cf5d9a37020a46e3aaf3ffa293742c4610c8a2ec1e3039b4a0e000000000022277a39e9c0ab70b2e732eaa400520cb680e3b5c79e77bf707dc3aa8a45ee7b79ddf77f2c7cfe47eae647a8eee5f732632c1edb9e0ce7b1564ec9bc069efba9f6088e568a6070b2b55bf867ea4baa05e21395280d30f61e96a92764f574384f0d95094f840226250dccee26d10c6a886c9a647bcb7022a5ab025dc9e230efb75578ff599c969fbd86d43e69df076a1f8e03d13cac1aecdf44fca113da64117e3584084caefd8c5d7a1d395e2fb4611b6776f08450f50e48f53ce9e7bdf067258fd1f4eebe693a1486d76a03cd92250b93351f4a98d3f6770bc1ed93eea9a9c1bfe791b4d71863aa40bd1a7a1983ffb69e0b7c3b3886ea21048f14bb9132941a3bf2701174847f723ac67bb7f7b1cdc5cd0e2484a3bde638f76f93033ab417e3373f52afbefc5dc64098a7c85b074e11044c0df112bce000726117d620070a47d3ff7f0000c4e50f5b5828612200397b64873de1c923d53a12250383b715ff9ec201bb5feee0ad0066d774c82d210af53e72917383dfdc6a15fd858a9cab304d1bd22e6d8427495c7d362160cc07f946de870023650c9e67588090f4cef0729c8ac9e45f2788bdc4592a06619e5308bc901b102ce63f00000000e3bb675430def12826a6e0284494cf0113a39fc9a508f52ebcb985419e8d8466c538672acd88cb0d0d703550d757898eae575734aba20c97e44226a4586ae08dc5c24fd418000000000000000ab684fcc3694d0dfc55d9e52b4a2a3e70c27ff413870f4373e70e26bc290df72543764841bc723ef0c6c1e43b08e75828c703614c632b2d5827cb0f94778922be626173e914fd15adbf9adcf3147ce2d51cb861b7282f436e48c0afeee8ff3a3081bcd80abdfaa4606e627e20886844f5df6a82c482b9abc10eb59842a99bf1d0018c6260fad654300a0e70f18c095641809131d8e300"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:52 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 632.240117] IPVS: ftp: loaded support on port[0] = 21 06:34:52 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:52 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r3 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:52 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:53 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:53 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:53 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:53 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mknod(0x0, 0x0, 0x0) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:54 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:54 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:54 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:54 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="3a258211f663a7720400000000000000b0f781659f8056d1d3fc72298e4b3f000000b7056f000040f87bc2fdff2c45ff01a10000c71e8fa05b2382df8e325effff8356443d7cdcfeea7d21090000ca2e572c399b37790cfb078708f8f31e327c06f5770000000000000000000000000000000000000000ce11b3e3aec46f668d4a0edf0be0d3fb7a17d9007e38bb65ea81bf7a835fc9aad84f5b443e67d008221d546ac37310470f3e92914f4eff8ab264fc0fb5d36edba31a61f4ceb75078e7cc464a97efb7c1483141d23ce68745b80ba4f3a28fbfb8ef68b3652754786ec49fd91b9c8ff254e6a36c2f1e501f302c59603046485e481de41687e7009c9cc17a69f0a5b3287acb12fda86d53a89211754c1b12072fc2db2e4924d7c226ea0ea541109906db451af5db4cf5d9a37020a46e3aaf3ffa293742c4610c8a2ec1e3039b4a0e000000000022277a39e9c0ab70b2e732eaa400520cb680e3b5c79e77bf707dc3aa8a45ee7b79ddf77f2c7cfe47eae647a8eee5f732632c1edb9e0ce7b1564ec9bc069efba9f6088e568a6070b2b55bf867ea4baa05e21395280d30f61e96a92764f574384f0d95094f840226250dccee26d10c6a886c9a647bcb7022a5ab025dc9e230efb75578ff599c969fbd86d43e69df076a1f8e03d13cac1aecdf44fca113da64117e3584084caefd8c5d7a1d395e2fb4611b6776f08450f50e48f53ce9e7bdf067258fd1f4eebe693a1486d76a03cd92250b93351f4a98d3f6770bc1ed93eea9a9c1bfe791b4d71863aa40bd1a7a1983ffb69e0b7c3b3886ea21048f14bb9132941a3bf2701174847f723ac67bb7f7b1cdc5cd0e2484a3bde638f76f93033ab417e3373f52afbefc5dc64098a7c85b074e11044c0df112bce000726117d620070a47d3ff7f0000c4e50f5b5828612200397b64873de1c923d53a12250383b715ff9ec201bb5feee0ad0066d774c82d210af53e72917383dfdc6a15fd858a9cab304d1bd22e6d8427495c7d362160cc07f946de870023650c9e67588090f4cef0729c8ac9e45f2788bdc4592a06619e5308bc901b102ce63f00000000e3bb675430def12826a6e0284494cf0113a39fc9a508f52ebcb985419e8d8466c538672acd88cb0d0d703550d757898eae575734aba20c97e44226a4586ae08dc5c24fd418000000000000000ab684fcc3694d0dfc55d9e52b4a2a3e70c27ff413870f4373e70e26bc290df72543764841bc723ef0c6c1e43b08e75828c703614c632b2d5827cb0f94778922be626173e914fd15adbf9adcf3147ce2d51cb861b7282f436e48c0afeee8ff3a3081bcd80abdfaa4606e627e20886844f5df6a82c482b9abc10eb59842a99bf1d0018c6260fad654300a0e70f18c095641809131d8e300"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:54 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:54 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:55 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:55 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:55 executing program 5: socket$unix(0x1, 0x2, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x4202, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c0000000040a01010000000000000000030000003c0004801400030077673200000000000000000000000000080002404cab059c14000300726f7365300000000000000000000020080001400000000208000540fffffff9400008800c00024000000000000000090c00014000002000000000000c00024000000000000080010c00014000000000000000070c0002400000000000000161280008800c00014000000000000000010c00024000000000000000020c00014000000000079e37e6"], 0xc0}, 0x1, 0x0, 0x0, 0x20008000}, 0x20) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x3a, @dev={0xac, 0x14, 0x14, 0x2e}, 0x4e21, 0x2, 'dh\x00', 0x49, 0x1, 0x6a}, 0x2c) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) setuid(0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 06:34:55 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:55 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 635.833797] IPVS: ftp: loaded support on port[0] = 21 06:34:55 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:56 executing program 0 (fault-call:10 fault-nth:0): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 636.346936] FAULT_INJECTION: forcing a failure. [ 636.346936] name failslab, interval 1, probability 0, space 0, times 0 [ 636.358500] CPU: 1 PID: 15680 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 636.366386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.375838] Call Trace: [ 636.378452] dump_stack+0x1b2/0x283 [ 636.382212] should_fail.cold+0x10a/0x154 [ 636.386346] should_failslab+0xd6/0x130 [ 636.390337] __kmalloc_track_caller+0x2bc/0x400 [ 636.395115] ? strndup_user+0x5b/0xf0 [ 636.398896] memdup_user+0x22/0xa0 [ 636.402429] strndup_user+0x5b/0xf0 [ 636.406038] ? copy_mnt_ns+0xa30/0xa30 [ 636.409904] SyS_mount+0x39/0x120 [ 636.413335] ? copy_mnt_ns+0xa30/0xa30 [ 636.417221] do_syscall_64+0x1d5/0x640 [ 636.421095] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 636.426290] RIP: 0033:0x45e219 [ 636.429486] RSP: 002b:00007fb64fbeec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 636.437198] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 06:34:56 executing program 0 (fault-call:10 fault-nth:1): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 636.444466] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 636.451732] RBP: 00007fb64fbeeca0 R08: 0000000000000000 R09: 0000000000000000 [ 636.459588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.466837] R13: 00007fffd0f3798f R14: 00007fb64fbef9c0 R15: 000000000119bf8c 06:34:56 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:56 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 636.647318] FAULT_INJECTION: forcing a failure. [ 636.647318] name failslab, interval 1, probability 0, space 0, times 0 [ 636.697474] CPU: 1 PID: 15715 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 636.705584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.714940] Call Trace: [ 636.717537] dump_stack+0x1b2/0x283 [ 636.721168] should_fail.cold+0x10a/0x154 [ 636.721184] should_failslab+0xd6/0x130 [ 636.721197] kmem_cache_alloc+0x28e/0x3c0 [ 636.721211] getname_flags+0xc8/0x550 [ 636.721222] user_path_at_empty+0x2a/0x50 [ 636.721233] do_mount+0x118/0x2a00 [ 636.721243] ? lock_acquire+0x170/0x3f0 [ 636.721250] ? lock_downgrade+0x740/0x740 [ 636.721259] ? copy_mount_string+0x40/0x40 [ 636.721269] ? __might_fault+0x177/0x1b0 [ 636.721280] ? _copy_from_user+0x96/0x100 [ 636.721289] ? copy_mount_options+0x1fa/0x2f0 [ 636.721297] ? copy_mnt_ns+0xa30/0xa30 [ 636.721305] SyS_mount+0xa8/0x120 [ 636.721313] ? copy_mnt_ns+0xa30/0xa30 [ 636.721323] do_syscall_64+0x1d5/0x640 [ 636.785215] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 636.790397] RIP: 0033:0x45e219 06:34:56 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 636.793591] RSP: 002b:00007fb64fbeec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 636.801294] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 636.808557] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 636.815820] RBP: 00007fb64fbeeca0 R08: 0000000000000000 R09: 0000000000000000 [ 636.823099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.830369] R13: 00007fffd0f3798f R14: 00007fb64fbef9c0 R15: 000000000119bf8c 06:34:56 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:56 executing program 0 (fault-call:10 fault-nth:2): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:57 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 637.032504] FAULT_INJECTION: forcing a failure. [ 637.032504] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 637.044343] CPU: 1 PID: 15758 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 637.052253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.061604] Call Trace: [ 637.064196] dump_stack+0x1b2/0x283 [ 637.067830] should_fail.cold+0x10a/0x154 [ 637.072169] ? unwind_next_frame+0xe54/0x17d0 [ 637.076673] __alloc_pages_nodemask+0x22c/0x2720 [ 637.081430] ? is_bpf_text_address+0x91/0x150 [ 637.086091] ? __lock_acquire+0x5fc/0x3f20 [ 637.090335] ? is_bpf_text_address+0xb8/0x150 [ 637.094954] ? kernel_text_address+0xbd/0xf0 [ 637.099388] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 637.104235] ? unwind_get_return_address+0x51/0x90 [ 637.109196] ? trace_hardirqs_on+0x10/0x10 [ 637.113434] ? _kstrtoull+0x134/0x350 [ 637.117241] ? depot_save_stack+0x10d/0x3e3 [ 637.121678] ? __lock_acquire+0x5fc/0x3f20 [ 637.125922] cache_grow_begin+0x8f/0x420 [ 637.129993] cache_alloc_refill+0x273/0x350 [ 637.134328] kmem_cache_alloc+0x333/0x3c0 [ 637.138478] getname_flags+0xc8/0x550 [ 637.142294] user_path_at_empty+0x2a/0x50 [ 637.146445] do_mount+0x118/0x2a00 [ 637.149990] ? lock_acquire+0x170/0x3f0 [ 637.153970] ? lock_downgrade+0x740/0x740 [ 637.158123] ? copy_mount_string+0x40/0x40 [ 637.162448] ? __might_fault+0x177/0x1b0 [ 637.166523] ? _copy_from_user+0x96/0x100 [ 637.170676] ? copy_mount_options+0x1fa/0x2f0 [ 637.175196] ? copy_mnt_ns+0xa30/0xa30 [ 637.179086] SyS_mount+0xa8/0x120 [ 637.182538] ? copy_mnt_ns+0xa30/0xa30 [ 637.186426] do_syscall_64+0x1d5/0x640 [ 637.190353] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 637.195548] RIP: 0033:0x45e219 [ 637.198737] RSP: 002b:00007fb64fbeec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 637.206461] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 637.214024] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 637.221298] RBP: 00007fb64fbeeca0 R08: 0000000000000000 R09: 0000000000000000 06:34:57 executing program 0 (fault-call:10 fault-nth:3): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 637.221304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 637.221310] R13: 00007fffd0f3798f R14: 00007fb64fbef9c0 R15: 000000000119bf8c [ 637.391243] FAULT_INJECTION: forcing a failure. [ 637.391243] name failslab, interval 1, probability 0, space 0, times 0 [ 637.413786] CPU: 1 PID: 15769 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 637.421700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.431060] Call Trace: [ 637.433735] dump_stack+0x1b2/0x283 [ 637.437391] should_fail.cold+0x10a/0x154 06:34:57 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 637.441549] should_failslab+0xd6/0x130 [ 637.445531] kmem_cache_alloc+0x28e/0x3c0 [ 637.449687] __d_alloc+0x2a/0xa20 [ 637.453143] d_alloc+0x46/0x240 [ 637.456430] d_alloc_parallel+0xd6/0x16b0 [ 637.460609] ? trace_hardirqs_on+0x10/0x10 [ 637.464850] ? ima_add_template_entry.cold+0x4d/0x4d [ 637.469953] ? lock_acquire+0x170/0x3f0 [ 637.474250] ? trace_hardirqs_on+0x10/0x10 [ 637.478468] ? deref_stack_reg+0x124/0x1a0 [ 637.482690] ? __d_lookup_rcu+0x640/0x640 [ 637.486830] ? lock_acquire+0x170/0x3f0 [ 637.490820] ? lookup_slow+0x129/0x400 [ 637.494713] lookup_slow+0x175/0x400 [ 637.498423] ? follow_dotdot_rcu+0xf00/0xf00 [ 637.502817] ? lookup_fast+0x430/0xe30 [ 637.506706] ? security_inode_permission+0xb5/0xf0 [ 637.511628] ? ovl_getattr+0x6c0/0x6c0 [ 637.515522] walk_component+0x6a1/0xbc0 [ 637.519497] ? lookup_fast+0xe30/0xe30 [ 637.523384] ? walk_component+0xbc0/0xbc0 [ 637.527534] path_lookupat+0x1bb/0x780 [ 637.531421] ? path_mountpoint+0x940/0x940 [ 637.535652] ? depot_save_stack+0x10d/0x3e3 [ 637.539988] ? cache_alloc_refill+0x2fa/0x350 [ 637.544493] filename_lookup+0x18a/0x510 [ 637.548556] ? filename_parentat+0x520/0x520 [ 637.552976] ? __check_object_size+0x179/0x22c [ 637.557559] ? strncpy_from_user+0x210/0x2c0 [ 637.561960] ? getname_flags+0x22e/0x550 [ 637.566018] do_mount+0x118/0x2a00 [ 637.569554] ? lock_acquire+0x170/0x3f0 [ 637.573520] ? lock_downgrade+0x740/0x740 [ 637.577663] ? copy_mount_string+0x40/0x40 [ 637.581908] ? __might_fault+0x177/0x1b0 [ 637.585963] ? _copy_from_user+0x96/0x100 [ 637.590104] ? copy_mount_options+0x1fa/0x2f0 [ 637.594594] ? copy_mnt_ns+0xa30/0xa30 [ 637.598475] SyS_mount+0xa8/0x120 [ 637.601921] ? copy_mnt_ns+0xa30/0xa30 [ 637.605803] do_syscall_64+0x1d5/0x640 [ 637.609690] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 637.614974] RIP: 0033:0x45e219 [ 637.618178] RSP: 002b:00007fb64fbeec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 637.625884] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 637.633172] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 06:34:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:34:57 executing program 0 (fault-call:10 fault-nth:4): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 637.640454] RBP: 00007fb64fbeeca0 R08: 0000000000000000 R09: 0000000000000000 [ 637.647737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 637.655014] R13: 00007fffd0f3798f R14: 00007fb64fbef9c0 R15: 000000000119bf8c [ 637.769687] FAULT_INJECTION: forcing a failure. [ 637.769687] name failslab, interval 1, probability 0, space 0, times 0 [ 637.785548] CPU: 0 PID: 15785 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 637.793445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.802825] Call Trace: [ 637.805413] dump_stack+0x1b2/0x283 [ 637.809070] should_fail.cold+0x10a/0x154 [ 637.813223] should_failslab+0xd6/0x130 [ 637.813291] kmem_cache_alloc+0x28e/0x3c0 [ 637.821391] ? ovl_i_callback+0x20/0x20 [ 637.825362] ? ovl_lock_rename_workdir.cold+0x1c/0x1c [ 637.830554] ovl_alloc_inode+0x18/0x180 [ 637.835400] ? ovl_i_callback+0x20/0x20 [ 637.839376] alloc_inode+0x5d/0x170 [ 637.843002] iget5_locked+0x169/0x450 [ 637.846800] ? ovl_inode_test+0x50/0x50 [ 637.850790] ovl_get_inode+0x1b3/0xae6 [ 637.850804] ovl_lookup+0x7f2/0x1120 [ 637.850817] ? d_alloc_parallel+0x82e/0x16b0 [ 637.862841] ? ima_add_template_entry.cold+0x4d/0x4d [ 637.867942] ? lock_acquire+0x170/0x3f0 [ 637.871915] ? ovl_path_next+0x200/0x200 [ 637.875991] ? deref_stack_reg+0x124/0x1a0 [ 637.880224] ? __d_lookup_rcu+0x640/0x640 [ 637.884375] ? lock_acquire+0x170/0x3f0 [ 637.888349] ? lookup_slow+0x129/0x400 [ 637.892240] lookup_slow+0x20a/0x400 [ 637.895962] ? follow_dotdot_rcu+0xf00/0xf00 [ 637.895971] ? lookup_fast+0x430/0xe30 [ 637.895988] ? security_inode_permission+0xb5/0xf0 [ 637.895997] ? ovl_getattr+0x6c0/0x6c0 [ 637.896010] walk_component+0x6a1/0xbc0 [ 637.896022] ? lookup_fast+0xe30/0xe30 [ 637.896034] ? walk_component+0xbc0/0xbc0 [ 637.925078] path_lookupat+0x1bb/0x780 [ 637.928977] ? path_mountpoint+0x940/0x940 [ 637.933219] ? depot_save_stack+0x10d/0x3e3 [ 637.937551] filename_lookup+0x18a/0x510 [ 637.941648] ? filename_parentat+0x520/0x520 [ 637.946066] ? __check_object_size+0x179/0x22c [ 637.951002] ? strncpy_from_user+0x210/0x2c0 [ 637.955439] ? getname_flags+0x22e/0x550 [ 637.959515] do_mount+0x118/0x2a00 [ 637.963087] ? lock_acquire+0x170/0x3f0 [ 637.967073] ? lock_downgrade+0x740/0x740 [ 637.971230] ? copy_mount_string+0x40/0x40 [ 637.975470] ? __might_fault+0x177/0x1b0 [ 637.979535] ? _copy_from_user+0x96/0x100 [ 637.983686] ? copy_mount_options+0x1fa/0x2f0 [ 637.988185] ? copy_mnt_ns+0xa30/0xa30 [ 637.992095] SyS_mount+0xa8/0x120 [ 637.995547] ? copy_mnt_ns+0xa30/0xa30 [ 637.999434] do_syscall_64+0x1d5/0x640 [ 638.003328] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 638.008512] RIP: 0033:0x45e219 [ 638.011695] RSP: 002b:00007fb64fbeec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 06:34:58 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:58 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 638.019405] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 638.026677] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 638.033950] RBP: 00007fb64fbeeca0 R08: 0000000000000000 R09: 0000000000000000 [ 638.041224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 638.048498] R13: 00007fffd0f3798f R14: 00007fb64fbef9c0 R15: 000000000119bf8c 06:34:58 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r3, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:58 executing program 0 (fault-call:10 fault-nth:5): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 638.326928] FAULT_INJECTION: forcing a failure. [ 638.326928] name failslab, interval 1, probability 0, space 0, times 0 [ 638.340472] CPU: 1 PID: 15822 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 638.348372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.357729] Call Trace: [ 638.360321] dump_stack+0x1b2/0x283 [ 638.363985] should_fail.cold+0x10a/0x154 [ 638.368138] should_failslab+0xd6/0x130 [ 638.372123] kmem_cache_alloc+0x28e/0x3c0 [ 638.376282] ? ovl_i_callback+0x20/0x20 [ 638.380258] ? ovl_lock_rename_workdir.cold+0x1c/0x1c [ 638.386272] ovl_alloc_inode+0x18/0x180 [ 638.390249] ? ovl_i_callback+0x20/0x20 [ 638.394224] alloc_inode+0x5d/0x170 [ 638.397854] iget5_locked+0x169/0x450 [ 638.401659] ? ovl_inode_test+0x50/0x50 [ 638.405638] ovl_get_inode+0x1b3/0xae6 [ 638.409531] ovl_lookup+0x7f2/0x1120 [ 638.413254] ? d_alloc_parallel+0x82e/0x16b0 [ 638.417763] ? ima_add_template_entry.cold+0x4d/0x4d [ 638.422892] ? lock_acquire+0x170/0x3f0 [ 638.426870] ? ovl_path_next+0x200/0x200 [ 638.430944] ? deref_stack_reg+0x124/0x1a0 [ 638.435183] ? __d_lookup_rcu+0x640/0x640 [ 638.439335] ? lock_acquire+0x170/0x3f0 [ 638.443314] ? lookup_slow+0x129/0x400 [ 638.447385] lookup_slow+0x20a/0x400 [ 638.451109] ? follow_dotdot_rcu+0xf00/0xf00 [ 638.455520] ? lookup_fast+0x430/0xe30 [ 638.459415] ? security_inode_permission+0xb5/0xf0 [ 638.464346] ? ovl_getattr+0x6c0/0x6c0 [ 638.468264] walk_component+0x6a1/0xbc0 [ 638.472241] ? lookup_fast+0xe30/0xe30 [ 638.476567] ? walk_component+0xbc0/0xbc0 [ 638.480724] path_lookupat+0x1bb/0x780 [ 638.484618] ? path_mountpoint+0x940/0x940 [ 638.488877] ? depot_save_stack+0x10d/0x3e3 [ 638.493206] ? cache_alloc_refill+0x2fa/0x350 [ 638.497708] filename_lookup+0x18a/0x510 [ 638.502207] ? filename_parentat+0x520/0x520 [ 638.506626] ? __check_object_size+0x179/0x22c [ 638.511217] ? strncpy_from_user+0x210/0x2c0 [ 638.515629] ? getname_flags+0x22e/0x550 [ 638.519707] do_mount+0x118/0x2a00 [ 638.523253] ? lock_acquire+0x170/0x3f0 [ 638.527232] ? lock_downgrade+0x740/0x740 [ 638.531389] ? copy_mount_string+0x40/0x40 [ 638.535631] ? __might_fault+0x177/0x1b0 [ 638.540045] ? _copy_from_user+0x96/0x100 [ 638.544199] ? copy_mount_options+0x1fa/0x2f0 [ 638.548699] ? copy_mnt_ns+0xa30/0xa30 [ 638.552590] SyS_mount+0xa8/0x120 [ 638.552601] ? copy_mnt_ns+0xa30/0xa30 [ 638.552614] do_syscall_64+0x1d5/0x640 [ 638.552632] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 638.552647] RIP: 0033:0x45e219 06:34:58 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) [ 638.572216] RSP: 002b:00007fb64fbeec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 638.579929] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 638.587200] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 638.594567] RBP: 00007fb64fbeeca0 R08: 0000000000000000 R09: 0000000000000000 [ 638.601843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 638.609116] R13: 00007fffd0f3798f R14: 00007fb64fbef9c0 R15: 000000000119bf8c 06:34:58 executing program 0 (fault-call:10 fault-nth:6): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 638.746011] FAULT_INJECTION: forcing a failure. [ 638.746011] name failslab, interval 1, probability 0, space 0, times 0 [ 638.767677] CPU: 0 PID: 15847 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 638.775589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.784950] Call Trace: [ 638.787544] dump_stack+0x1b2/0x283 [ 638.791180] should_fail.cold+0x10a/0x154 [ 638.795335] should_failslab+0xd6/0x130 [ 638.799318] kmem_cache_alloc+0x28e/0x3c0 [ 638.803499] __d_alloc+0x2a/0xa20 [ 638.806962] d_alloc+0x46/0x240 [ 638.810244] d_alloc_parallel+0xd6/0x16b0 [ 638.814397] ? inode_dio_wait+0x1e0/0x1e0 [ 638.818548] ? ext4_mark_inode_dirty+0x1db/0x7a0 [ 638.823316] ? trace_hardirqs_on+0x10/0x10 [ 638.827552] ? trace_hardirqs_on+0x10/0x10 [ 638.831792] ? __mark_inode_dirty+0x5a7/0x1040 [ 638.836493] ? __d_lookup_rcu+0x640/0x640 [ 638.840648] ? lock_acquire+0x170/0x3f0 [ 638.844626] ? lookup_slow+0x129/0x400 [ 638.848528] lookup_slow+0x175/0x400 [ 638.852253] ? follow_dotdot_rcu+0xf00/0xf00 [ 638.857009] ? lookup_fast+0x430/0xe30 [ 638.860931] ? security_inode_permission+0xb5/0xf0 [ 638.865862] ? ovl_getattr+0x6c0/0x6c0 [ 638.869753] walk_component+0x6a1/0xbc0 [ 638.873729] ? lookup_fast+0xe30/0xe30 [ 638.877617] ? walk_component+0xbc0/0xbc0 [ 638.881763] ? trailing_symlink+0x24b/0x750 [ 638.886081] ? ovl_update_time+0x150/0x150 [ 638.890321] path_lookupat+0x1bb/0x780 [ 638.894207] ? path_mountpoint+0x940/0x940 [ 638.898442] ? depot_save_stack+0x10d/0x3e3 [ 638.902766] ? cache_alloc_refill+0x2fa/0x350 [ 638.907545] filename_lookup+0x18a/0x510 [ 638.911623] ? filename_parentat+0x520/0x520 [ 638.916063] ? strncpy_from_user+0x210/0x2c0 [ 638.920481] ? getname_flags+0x22e/0x550 [ 638.924555] do_mount+0x118/0x2a00 [ 638.928129] ? lock_acquire+0x170/0x3f0 [ 638.932116] ? lock_downgrade+0x740/0x740 [ 638.936280] ? copy_mount_string+0x40/0x40 [ 638.940609] ? __might_fault+0x177/0x1b0 [ 638.944674] ? _copy_from_user+0x96/0x100 [ 638.948828] ? copy_mount_options+0x1fa/0x2f0 [ 638.953325] ? copy_mnt_ns+0xa30/0xa30 [ 638.957347] SyS_mount+0xa8/0x120 [ 638.960802] ? copy_mnt_ns+0xa30/0xa30 [ 638.964721] do_syscall_64+0x1d5/0x640 [ 638.968623] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 638.973816] RIP: 0033:0x45e219 [ 638.977006] RSP: 002b:00007fb64fbeec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 638.984733] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 06:34:59 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 638.984739] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 638.984745] RBP: 00007fb64fbeeca0 R08: 0000000000000000 R09: 0000000000000000 [ 638.984751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 638.984757] R13: 00007fffd0f3798f R14: 00007fb64fbef9c0 R15: 000000000119bf8c 06:34:59 executing program 0 (fault-call:10 fault-nth:7): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:59 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 639.123456] FAULT_INJECTION: forcing a failure. [ 639.123456] name failslab, interval 1, probability 0, space 0, times 0 [ 639.141927] CPU: 0 PID: 15869 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 639.149926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 639.159288] Call Trace: [ 639.161882] dump_stack+0x1b2/0x283 [ 639.165514] should_fail.cold+0x10a/0x154 [ 639.169688] should_failslab+0xd6/0x130 [ 639.173665] kmem_cache_alloc+0x28e/0x3c0 [ 639.177819] __d_alloc+0x2a/0xa20 [ 639.181273] ? is_bpf_text_address+0x91/0x150 [ 639.185774] d_alloc+0x46/0x240 [ 639.189056] d_alloc_parallel+0xd6/0x16b0 [ 639.193201] ? __lock_acquire+0x5fc/0x3f20 [ 639.197444] ? trace_hardirqs_on+0x10/0x10 [ 639.201668] ? __save_stack_trace+0xa0/0x160 [ 639.206069] ? __lock_acquire+0x5fc/0x3f20 [ 639.211188] ? __d_lookup_rcu+0x640/0x640 [ 639.215332] ? lock_acquire+0x170/0x3f0 [ 639.219299] ? lookup_slow+0x129/0x400 [ 639.223198] lookup_slow+0x175/0x400 [ 639.226915] ? lock_downgrade+0x740/0x740 [ 639.231078] ? follow_dotdot_rcu+0xf00/0xf00 [ 639.235587] ? d_lookup+0x156/0x220 [ 639.239326] lookup_one_len_unlocked+0x3a0/0x410 [ 639.244081] ? vfs_link+0xb40/0xb40 [ 639.247706] ovl_lookup_single+0x33/0x6d0 [ 639.251860] ? check_preemption_disabled+0x35/0x240 [ 639.256870] ovl_lookup_layer+0x2ef/0x3d0 [ 639.261026] ? d_alloc_parallel+0x666/0x16b0 [ 639.265428] ? ovl_lookup_single+0x6d0/0x6d0 [ 639.269837] ? lock_downgrade+0x740/0x740 [ 639.273984] ovl_lookup+0x352/0x1120 [ 639.277705] ? d_alloc_parallel+0x82e/0x16b0 [ 639.282147] ? ovl_path_next+0x200/0x200 [ 639.286203] ? trace_hardirqs_on+0x10/0x10 [ 639.290427] ? trace_hardirqs_on+0x10/0x10 [ 639.294657] ? __mark_inode_dirty+0x5a7/0x1040 [ 639.299233] ? __d_lookup_rcu+0x640/0x640 [ 639.303373] ? lock_acquire+0x170/0x3f0 [ 639.307338] ? lookup_slow+0x129/0x400 [ 639.311243] lookup_slow+0x20a/0x400 [ 639.314961] ? follow_dotdot_rcu+0xf00/0xf00 [ 639.319370] ? lookup_fast+0x430/0xe30 [ 639.323254] ? security_inode_permission+0xb5/0xf0 [ 639.328190] ? ovl_getattr+0x6c0/0x6c0 [ 639.332072] walk_component+0x6a1/0xbc0 [ 639.336043] ? lookup_fast+0xe30/0xe30 [ 639.339927] ? walk_component+0xbc0/0xbc0 [ 639.344071] ? trailing_symlink+0x24b/0x750 [ 639.348382] ? ovl_update_time+0x150/0x150 [ 639.352627] path_lookupat+0x1bb/0x780 [ 639.356595] ? path_mountpoint+0x940/0x940 [ 639.360824] ? depot_save_stack+0x10d/0x3e3 [ 639.365145] ? cache_alloc_refill+0x2fa/0x350 [ 639.369637] filename_lookup+0x18a/0x510 [ 639.373694] ? filename_parentat+0x520/0x520 [ 639.378123] ? strncpy_from_user+0x210/0x2c0 [ 639.382545] ? getname_flags+0x22e/0x550 [ 639.386610] do_mount+0x118/0x2a00 [ 639.390166] ? lock_acquire+0x170/0x3f0 [ 639.394137] ? lock_downgrade+0x740/0x740 [ 639.398283] ? copy_mount_string+0x40/0x40 [ 639.402511] ? __might_fault+0x177/0x1b0 [ 639.406602] ? _copy_from_user+0x96/0x100 [ 639.410746] ? copy_mount_options+0x1fa/0x2f0 [ 639.415253] ? copy_mnt_ns+0xa30/0xa30 [ 639.419224] SyS_mount+0xa8/0x120 [ 639.422690] ? copy_mnt_ns+0xa30/0xa30 [ 639.426587] do_syscall_64+0x1d5/0x640 [ 639.430489] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 639.435676] RIP: 0033:0x45e219 [ 639.438855] RSP: 002b:00007fb64fbeec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 639.446585] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 639.453866] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 639.461131] RBP: 00007fb64fbeeca0 R08: 0000000000000000 R09: 0000000000000000 06:34:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="3a258211f663a7720400000000000000b0f781659f8056d1d3fc72298e4b3f000000b7056f000040f87bc2fdff2c45ff01a10000c71e8fa05b2382df8e325effff8356443d7cdcfeea7d21090000ca2e572c399b37790cfb078708f8f31e327c06f5770000000000000000000000000000000000000000ce11b3e3aec46f668d4a0edf0be0d3fb7a17d9007e38bb65ea81bf7a835fc9aad84f5b443e67d008221d546ac37310470f3e92914f4eff8ab264fc0fb5d36edba31a61f4ceb75078e7cc464a97efb7c1483141d23ce68745b80ba4f3a28fbfb8ef68b3652754786ec49fd91b9c8ff254e6a36c2f1e501f302c59603046485e481de41687e7009c9cc17a69f0a5b3287acb12fda86d53a89211754c1b12072fc2db2e4924d7c226ea0ea541109906db451af5db4cf5d9a37020a46e3aaf3ffa293742c4610c8a2ec1e3039b4a0e000000000022277a39e9c0ab70b2e732eaa400520cb680e3b5c79e77bf707dc3aa8a45ee7b79ddf77f2c7cfe47eae647a8eee5f732632c1edb9e0ce7b1564ec9bc069efba9f6088e568a6070b2b55bf867ea4baa05e21395280d30f61e96a92764f574384f0d95094f840226250dccee26d10c6a886c9a647bcb7022a5ab025dc9e230efb75578ff599c969fbd86d43e69df076a1f8e03d13cac1aecdf44fca113da64117e3584084caefd8c5d7a1d395e2fb4611b6776f08450f50e48f53ce9e7bdf067258fd1f4eebe693a1486d76a03cd92250b93351f4a98d3f6770bc1ed93eea9a9c1bfe791b4d71863aa40bd1a7a1983ffb69e0b7c3b3886ea21048f14bb9132941a3bf2701174847f723ac67bb7f7b1cdc5cd0e2484a3bde638f76f93033ab417e3373f52afbefc5dc64098a7c85b074e11044c0df112bce000726117d620070a47d3ff7f0000c4e50f5b5828612200397b64873de1c923d53a12250383b715ff9ec201bb5feee0ad0066d774c82d210af53e72917383dfdc6a15fd858a9cab304d1bd22e6d8427495c7d362160cc07f946de870023650c9e67588090f4cef0729c8ac9e45f2788bdc4592a06619e5308bc901b102ce63f00000000e3bb675430def12826a6e0284494cf0113a39fc9a508f52ebcb985419e8d8466c538672acd88cb0d0d703550d757898eae575734aba20c97e44226a4586ae08dc5c24fd418000000000000000ab684fcc3694d0dfc55d9e52b4a2a3e70c27ff413870f4373e70e26bc290df72543764841bc723ef0c6c1e43b08e75828c703614c632b2d5827cb0f94778922be626173e914fd15adbf9adcf3147ce2d51cb861b7282f436e48c0afeee8ff3a3081bcd80abdfaa4606e627e20886844f5df6a82c482b9abc10eb59842a99bf1d0018c6260fad654300a0e70f18c095641809131d8e300"/1014], 0x66) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) [ 639.468398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 639.475662] R13: 00007fffd0f3798f R14: 00007fb64fbef9c0 R15: 000000000119bf8c 06:34:59 executing program 0 (fault-call:10 fault-nth:8): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:34:59 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:34:59 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 639.731252] FAULT_INJECTION: forcing a failure. [ 639.731252] name failslab, interval 1, probability 0, space 0, times 0 [ 639.790081] CPU: 0 PID: 15894 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 639.798023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 639.807376] Call Trace: [ 639.810025] dump_stack+0x1b2/0x283 [ 639.813658] should_fail.cold+0x10a/0x154 [ 639.817806] should_failslab+0xd6/0x130 [ 639.821783] __kmalloc+0x2c1/0x400 [ 639.825347] ? ovl_alloc_entry+0x1e/0x70 [ 639.829499] ovl_alloc_entry+0x1e/0x70 [ 639.833852] ovl_lookup+0x724/0x1120 [ 639.837572] ? ovl_path_next+0x200/0x200 [ 639.841635] ? trace_hardirqs_on+0x10/0x10 [ 639.845871] ? trace_hardirqs_on+0x10/0x10 [ 639.850110] ? __mark_inode_dirty+0x5a7/0x1040 [ 639.854693] ? __d_lookup_rcu+0x640/0x640 [ 639.858844] ? lock_acquire+0x170/0x3f0 [ 639.862813] ? lookup_slow+0x129/0x400 [ 639.866812] lookup_slow+0x20a/0x400 [ 639.870533] ? follow_dotdot_rcu+0xf00/0xf00 [ 639.874961] ? lookup_fast+0x430/0xe30 [ 639.878850] ? security_inode_permission+0xb5/0xf0 [ 639.883804] ? ovl_getattr+0x6c0/0x6c0 [ 639.887691] walk_component+0x6a1/0xbc0 [ 639.891666] ? lookup_fast+0xe30/0xe30 [ 639.895730] ? walk_component+0xbc0/0xbc0 [ 639.899877] ? trailing_symlink+0x24b/0x750 [ 639.904197] ? ovl_update_time+0x150/0x150 [ 639.908433] path_lookupat+0x1bb/0x780 [ 639.912328] ? path_mountpoint+0x940/0x940 [ 639.916560] ? depot_save_stack+0x10d/0x3e3 [ 639.920886] filename_lookup+0x18a/0x510 [ 639.924954] ? filename_parentat+0x520/0x520 [ 639.929378] ? strncpy_from_user+0x210/0x2c0 [ 639.933801] ? getname_flags+0x22e/0x550 [ 639.938006] do_mount+0x118/0x2a00 [ 639.941556] ? lock_acquire+0x170/0x3f0 [ 639.945793] ? lock_downgrade+0x740/0x740 [ 639.949943] ? copy_mount_string+0x40/0x40 [ 639.954180] ? __might_fault+0x177/0x1b0 [ 639.958242] ? _copy_from_user+0x96/0x100 [ 639.962393] ? copy_mount_options+0x1fa/0x2f0 [ 639.966886] ? copy_mnt_ns+0xa30/0xa30 [ 639.970776] SyS_mount+0xa8/0x120 [ 639.974232] ? copy_mnt_ns+0xa30/0xa30 [ 639.978118] do_syscall_64+0x1d5/0x640 [ 639.982028] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 639.987223] RIP: 0033:0x45e219 [ 639.990413] RSP: 002b:00007fb64fbeec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 639.998150] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 640.005423] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 640.012695] RBP: 00007fb64fbeeca0 R08: 0000000000000000 R09: 0000000000000000 [ 640.020924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 640.028198] R13: 00007fffd0f3798f R14: 00007fb64fbef9c0 R15: 000000000119bf8c 06:35:00 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:35:00 executing program 0 (fault-call:10 fault-nth:9): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 640.315765] FAULT_INJECTION: forcing a failure. [ 640.315765] name failslab, interval 1, probability 0, space 0, times 0 [ 640.347038] CPU: 1 PID: 15919 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 640.354967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.364326] Call Trace: [ 640.366927] dump_stack+0x1b2/0x283 [ 640.370563] should_fail.cold+0x10a/0x154 [ 640.374720] should_failslab+0xd6/0x130 [ 640.379132] __kmalloc+0x2c1/0x400 [ 640.382672] ? ovl_alloc_entry+0x1e/0x70 [ 640.386737] ovl_alloc_entry+0x1e/0x70 [ 640.390626] ovl_lookup+0x724/0x1120 [ 640.394347] ? ovl_path_next+0x200/0x200 [ 640.398408] ? trace_hardirqs_on+0x10/0x10 [ 640.402643] ? trace_hardirqs_on+0x10/0x10 [ 640.406874] ? __mark_inode_dirty+0x5a7/0x1040 [ 640.411447] ? __d_lookup_rcu+0x640/0x640 [ 640.415602] ? lock_acquire+0x170/0x3f0 [ 640.419569] ? lookup_slow+0x129/0x400 [ 640.423457] lookup_slow+0x20a/0x400 [ 640.427190] ? follow_dotdot_rcu+0xf00/0xf00 [ 640.431591] ? lookup_fast+0x430/0xe30 [ 640.435478] ? security_inode_permission+0xb5/0xf0 [ 640.440397] ? ovl_getattr+0x6c0/0x6c0 [ 640.444279] walk_component+0x6a1/0xbc0 [ 640.448249] ? lookup_fast+0xe30/0xe30 [ 640.452146] ? walk_component+0xbc0/0xbc0 [ 640.456286] ? trailing_symlink+0x24b/0x750 [ 640.460596] ? ovl_update_time+0x150/0x150 [ 640.464839] path_lookupat+0x1bb/0x780 [ 640.468722] ? path_mountpoint+0x940/0x940 [ 640.472950] ? depot_save_stack+0x10d/0x3e3 [ 640.477275] ? cache_alloc_refill+0x2fa/0x350 [ 640.481762] filename_lookup+0x18a/0x510 [ 640.485820] ? filename_parentat+0x520/0x520 [ 640.490231] ? strncpy_from_user+0x210/0x2c0 [ 640.494632] ? getname_flags+0x22e/0x550 [ 640.498707] do_mount+0x118/0x2a00 [ 640.502255] ? lock_acquire+0x170/0x3f0 [ 640.506221] ? lock_downgrade+0x740/0x740 [ 640.510399] ? copy_mount_string+0x40/0x40 [ 640.514642] ? __might_fault+0x177/0x1b0 [ 640.518709] ? _copy_from_user+0x96/0x100 [ 640.522863] ? copy_mount_options+0x1fa/0x2f0 [ 640.527374] ? copy_mnt_ns+0xa30/0xa30 [ 640.531256] SyS_mount+0xa8/0x120 [ 640.534715] ? copy_mnt_ns+0xa30/0xa30 [ 640.538599] do_syscall_64+0x1d5/0x640 [ 640.542500] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 640.547678] RIP: 0033:0x45e219 [ 640.550865] RSP: 002b:00007fb64fbcdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 640.558570] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 06:35:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) [ 640.565829] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 640.573090] RBP: 00007fb64fbcdca0 R08: 0000000000000000 R09: 0000000000000000 [ 640.580459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 640.587719] R13: 00007fffd0f3798f R14: 00007fb64fbce9c0 R15: 000000000119c034 06:35:00 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:35:00 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:35:00 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:35:00 executing program 0 (fault-call:10 fault-nth:10): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 641.073647] FAULT_INJECTION: forcing a failure. [ 641.073647] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 641.085511] CPU: 1 PID: 15961 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 641.093405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 641.103261] Call Trace: [ 641.105855] dump_stack+0x1b2/0x283 [ 641.109512] should_fail.cold+0x10a/0x154 [ 641.113665] __alloc_pages_nodemask+0x22c/0x2720 [ 641.118510] ? kernel_text_address+0xbd/0xf0 [ 641.122948] ? __kernel_text_address+0x9/0x30 [ 641.127443] ? __lock_acquire+0x5fc/0x3f20 [ 641.127459] ? __lock_acquire+0x5fc/0x3f20 [ 641.127471] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 641.127482] ? trace_hardirqs_on+0x10/0x10 [ 641.127490] ? ovl_lookup+0x724/0x1120 [ 641.127501] ? lookup_slow+0x20a/0x400 [ 641.127514] ? do_syscall_64+0x1d5/0x640 [ 641.127526] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 641.127536] ? trace_hardirqs_on+0x10/0x10 [ 641.127553] ? trace_hardirqs_on+0x10/0x10 [ 641.170697] ? ext4_xattr_ibody_get+0x510/0x510 [ 641.175392] ? xattr_resolve_name+0x22c/0x370 [ 641.179893] cache_grow_begin+0x8f/0x420 [ 641.183959] cache_alloc_refill+0x273/0x350 [ 641.188293] kmem_cache_alloc+0x333/0x3c0 [ 641.192440] ? ovl_i_callback+0x20/0x20 [ 641.196438] ? ovl_lock_rename_workdir.cold+0x1c/0x1c [ 641.201658] ovl_alloc_inode+0x18/0x180 [ 641.205657] ? ovl_i_callback+0x20/0x20 [ 641.209630] alloc_inode+0x5d/0x170 [ 641.213256] iget5_locked+0x169/0x450 [ 641.217052] ? ovl_inode_test+0x50/0x50 [ 641.221026] ovl_get_inode+0x1b3/0xae6 [ 641.224916] ovl_lookup+0x7f2/0x1120 [ 641.228640] ? ovl_path_next+0x200/0x200 [ 641.232703] ? trace_hardirqs_on+0x10/0x10 [ 641.236951] ? trace_hardirqs_on+0x10/0x10 [ 641.241187] ? __mark_inode_dirty+0x5a7/0x1040 [ 641.245772] ? __d_lookup_rcu+0x640/0x640 [ 641.249940] ? lock_acquire+0x170/0x3f0 [ 641.253926] ? lookup_slow+0x129/0x400 [ 641.257848] lookup_slow+0x20a/0x400 [ 641.261568] ? follow_dotdot_rcu+0xf00/0xf00 [ 641.265976] ? lookup_fast+0x430/0xe30 [ 641.269880] ? security_inode_permission+0xb5/0xf0 [ 641.274807] ? ovl_getattr+0x6c0/0x6c0 [ 641.278699] walk_component+0x6a1/0xbc0 [ 641.282675] ? lookup_fast+0xe30/0xe30 [ 641.286566] ? walk_component+0xbc0/0xbc0 [ 641.290734] ? trailing_symlink+0x24b/0x750 [ 641.295575] ? ovl_update_time+0x150/0x150 [ 641.299813] path_lookupat+0x1bb/0x780 [ 641.303821] ? path_mountpoint+0x940/0x940 [ 641.308058] ? depot_save_stack+0x10d/0x3e3 [ 641.312498] filename_lookup+0x18a/0x510 [ 641.316664] ? filename_parentat+0x520/0x520 [ 641.321126] ? strncpy_from_user+0x210/0x2c0 [ 641.325541] ? getname_flags+0x22e/0x550 [ 641.329608] do_mount+0x118/0x2a00 [ 641.333152] ? lock_acquire+0x170/0x3f0 [ 641.337122] ? lock_downgrade+0x740/0x740 [ 641.341269] ? copy_mount_string+0x40/0x40 [ 641.345503] ? __might_fault+0x177/0x1b0 [ 641.345517] ? _copy_from_user+0x96/0x100 [ 641.345530] ? copy_mount_options+0x1fa/0x2f0 [ 641.345541] ? copy_mnt_ns+0xa30/0xa30 [ 641.345553] SyS_mount+0xa8/0x120 [ 641.345563] ? copy_mnt_ns+0xa30/0xa30 [ 641.345576] do_syscall_64+0x1d5/0x640 [ 641.345594] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 641.345602] RIP: 0033:0x45e219 [ 641.345614] RSP: 002b:00007fb64fbeec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 641.395776] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 641.403044] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 641.410316] RBP: 00007fb64fbeeca0 R08: 0000000000000000 R09: 0000000000000000 [ 641.417583] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a 06:35:01 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 641.425462] R13: 00007fffd0f3798f R14: 00007fb64fbef9c0 R15: 000000000119bf8c 06:35:01 executing program 0 (fault-call:10 fault-nth:11): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:35:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r2 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="3a258211f663a7720400000000000000b0f781659f8056d1d3fc72298e4b3f000000b7056f000040f87bc2fdff2c45ff01a10000c71e8fa05b2382df8e325effff8356443d7cdcfeea7d21090000ca2e572c399b37790cfb078708f8f31e327c06f5770000000000000000000000000000000000000000ce11b3e3aec46f668d4a0edf0be0d3fb7a17d9007e38bb65ea81bf7a835fc9aad84f5b443e67d008221d546ac37310470f3e92914f4eff8ab264fc0fb5d36edba31a61f4ceb75078e7cc464a97efb7c1483141d23ce68745b80ba4f3a28fbfb8ef68b3652754786ec49fd91b9c8ff254e6a36c2f1e501f302c59603046485e481de41687e7009c9cc17a69f0a5b3287acb12fda86d53a89211754c1b12072fc2db2e4924d7c226ea0ea541109906db451af5db4cf5d9a37020a46e3aaf3ffa293742c4610c8a2ec1e3039b4a0e000000000022277a39e9c0ab70b2e732eaa400520cb680e3b5c79e77bf707dc3aa8a45ee7b79ddf77f2c7cfe47eae647a8eee5f732632c1edb9e0ce7b1564ec9bc069efba9f6088e568a6070b2b55bf867ea4baa05e21395280d30f61e96a92764f574384f0d95094f840226250dccee26d10c6a886c9a647bcb7022a5ab025dc9e230efb75578ff599c969fbd86d43e69df076a1f8e03d13cac1aecdf44fca113da64117e3584084caefd8c5d7a1d395e2fb4611b6776f08450f50e48f53ce9e7bdf067258fd1f4eebe693a1486d76a03cd92250b93351f4a98d3f6770bc1ed93eea9a9c1bfe791b4d71863aa40bd1a7a1983ffb69e0b7c3b3886ea21048f14bb9132941a3bf2701174847f723ac67bb7f7b1cdc5cd0e2484a3bde638f76f93033ab417e3373f52afbefc5dc64098a7c85b074e11044c0df112bce000726117d620070a47d3ff7f0000c4e50f5b5828612200397b64873de1c923d53a12250383b715ff9ec201bb5feee0ad0066d774c82d210af53e72917383dfdc6a15fd858a9cab304d1bd22e6d8427495c7d362160cc07f946de870023650c9e67588090f4cef0729c8ac9e45f2788bdc4592a06619e5308bc901b102ce63f00000000e3bb675430def12826a6e0284494cf0113a39fc9a508f52ebcb985419e8d8466c538672acd88cb0d0d703550d757898eae575734aba20c97e44226a4586ae08dc5c24fd418000000000000000ab684fcc3694d0dfc55d9e52b4a2a3e70c27ff413870f4373e70e26bc290df72543764841bc723ef0c6c1e43b08e75828c703614c632b2d5827cb0f94778922be626173e914fd15adbf9adcf3147ce2d51cb861b7282f436e48c0afeee8ff3a3081bcd80abdfaa4606e627e20886844f5df6a82c482b9abc10eb59842a99bf1d0018c6260fad654300a0e70f18c095641809131d8e300"/1014], 0x66) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:35:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) 06:35:01 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 641.712093] FAULT_INJECTION: forcing a failure. [ 641.712093] name failslab, interval 1, probability 0, space 0, times 0 [ 641.782448] CPU: 1 PID: 15990 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 641.790372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 641.799738] Call Trace: [ 641.802374] dump_stack+0x1b2/0x283 [ 641.806039] should_fail.cold+0x10a/0x154 [ 641.810204] should_failslab+0xd6/0x130 [ 641.814161] __kmalloc+0x2c1/0x400 [ 641.817712] ? ovl_alloc_entry+0x1e/0x70 [ 641.821786] ovl_alloc_entry+0x1e/0x70 [ 641.825655] ovl_lookup+0x724/0x1120 [ 641.829370] ? ovl_path_next+0x200/0x200 [ 641.833460] ? trace_hardirqs_on+0x10/0x10 [ 641.837693] ? trace_hardirqs_on+0x10/0x10 [ 641.841934] ? __mark_inode_dirty+0x5a7/0x1040 [ 641.846516] ? __d_lookup_rcu+0x640/0x640 [ 641.850669] ? lock_acquire+0x170/0x3f0 [ 641.854660] ? lookup_slow+0x129/0x400 [ 641.858552] lookup_slow+0x20a/0x400 [ 641.862272] ? follow_dotdot_rcu+0xf00/0xf00 [ 641.866678] ? lookup_fast+0x430/0xe30 [ 641.870578] ? security_inode_permission+0xb5/0xf0 [ 641.875508] ? ovl_getattr+0x6c0/0x6c0 [ 641.879398] walk_component+0x6a1/0xbc0 [ 641.883380] ? lookup_fast+0xe30/0xe30 [ 641.887305] ? walk_component+0xbc0/0xbc0 [ 641.892410] ? trailing_symlink+0x24b/0x750 [ 641.896735] ? ovl_update_time+0x150/0x150 [ 641.900999] path_lookupat+0x1bb/0x780 [ 641.905062] ? path_mountpoint+0x940/0x940 [ 641.909319] ? depot_save_stack+0x10d/0x3e3 [ 641.913644] ? cache_alloc_refill+0x2fa/0x350 [ 641.918153] filename_lookup+0x18a/0x510 [ 641.922212] ? filename_parentat+0x520/0x520 [ 641.926635] ? strncpy_from_user+0x210/0x2c0 [ 641.931305] ? getname_flags+0x22e/0x550 [ 641.935372] do_mount+0x118/0x2a00 [ 641.938914] ? lock_acquire+0x170/0x3f0 [ 641.942889] ? lock_downgrade+0x740/0x740 [ 641.947041] ? copy_mount_string+0x40/0x40 [ 641.951282] ? __might_fault+0x177/0x1b0 [ 641.955367] ? _copy_from_user+0x96/0x100 [ 641.959518] ? copy_mount_options+0x1fa/0x2f0 [ 641.964034] ? copy_mnt_ns+0xa30/0xa30 [ 641.967926] SyS_mount+0xa8/0x120 [ 641.971559] ? copy_mnt_ns+0xa30/0xa30 [ 641.975447] do_syscall_64+0x1d5/0x640 06:35:02 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 641.979337] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 641.984524] RIP: 0033:0x45e219 [ 641.987721] RSP: 002b:00007fb64fbeec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 641.995437] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 642.002740] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 642.010016] RBP: 00007fb64fbeeca0 R08: 0000000000000000 R09: 0000000000000000 [ 642.017286] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 642.024573] R13: 00007fffd0f3798f R14: 00007fb64fbef9c0 R15: 000000000119bf8c 06:35:02 executing program 0 (fault-call:10 fault-nth:12): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 642.274372] FAULT_INJECTION: forcing a failure. [ 642.274372] name failslab, interval 1, probability 0, space 0, times 0 [ 642.286190] CPU: 0 PID: 16020 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 642.294084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.303432] Call Trace: [ 642.306021] dump_stack+0x1b2/0x283 [ 642.309651] should_fail.cold+0x10a/0x154 [ 642.313802] should_failslab+0xd6/0x130 [ 642.317778] kmem_cache_alloc+0x28e/0x3c0 [ 642.321952] alloc_vfsmnt+0x23/0x7f0 [ 642.325681] ? _raw_read_unlock+0x29/0x40 [ 642.329823] vfs_kern_mount.part.0+0x27/0x470 [ 642.334314] do_mount+0xe53/0x2a00 [ 642.337860] ? lock_acquire+0x170/0x3f0 [ 642.341825] ? lock_downgrade+0x740/0x740 [ 642.346053] ? copy_mount_string+0x40/0x40 [ 642.350298] ? __might_fault+0x177/0x1b0 [ 642.354354] ? _copy_from_user+0x96/0x100 [ 642.358580] ? copy_mount_options+0x1fa/0x2f0 [ 642.363079] ? copy_mnt_ns+0xa30/0xa30 [ 642.366958] SyS_mount+0xa8/0x120 [ 642.370401] ? copy_mnt_ns+0xa30/0xa30 [ 642.374281] do_syscall_64+0x1d5/0x640 [ 642.378166] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 642.383351] RIP: 0033:0x45e219 [ 642.386612] RSP: 002b:00007fb64fbcdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 642.394313] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 642.401573] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 642.408843] RBP: 00007fb64fbcdca0 R08: 0000000000000000 R09: 0000000000000000 [ 642.416115] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 642.423384] R13: 00007fffd0f3798f R14: 00007fb64fbce9c0 R15: 000000000119c034 [ 642.441958] IPVS: ftp: loaded support on port[0] = 21 06:35:02 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r4 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r3, &(0x7f0000000300)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:35:02 executing program 5 (fault-call:4 fault-nth:0): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:35:02 executing program 0 (fault-call:10 fault-nth:13): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:35:02 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000180)={0xa6, 0x5, 0x1, 'queue1\x00', 0x203d}) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000000)=0x7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 642.616148] FAULT_INJECTION: forcing a failure. [ 642.616148] name failslab, interval 1, probability 0, space 0, times 0 [ 642.642601] CPU: 0 PID: 16035 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 642.650517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.650523] Call Trace: [ 642.650540] dump_stack+0x1b2/0x283 [ 642.650577] should_fail.cold+0x10a/0x154 [ 642.650595] should_failslab+0xd6/0x130 [ 642.674269] kmem_cache_alloc_trace+0x29a/0x3d0 [ 642.678974] sget_userns+0x102/0xc10 [ 642.682705] ? kernfs_sop_show_options+0x170/0x170 [ 642.687662] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 642.693238] ? kernfs_sop_show_path+0x190/0x190 [ 642.697927] kernfs_mount_ns+0xd5/0x7c0 [ 642.701916] sysfs_mount+0xa1/0x160 [ 642.705558] ? sysfs_kill_sb+0x30/0x30 [ 642.709548] ? __lockdep_init_map+0x100/0x560 [ 642.714071] mount_fs+0x92/0x2a0 [ 642.717464] vfs_kern_mount.part.0+0x5b/0x470 [ 642.721986] do_mount+0xe53/0x2a00 [ 642.725546] ? lock_acquire+0x170/0x3f0 [ 642.729544] ? lock_downgrade+0x740/0x740 [ 642.733711] ? copy_mount_string+0x40/0x40 [ 642.738044] ? __might_fault+0x177/0x1b0 [ 642.742124] ? _copy_from_user+0x96/0x100 [ 642.746285] ? copy_mount_options+0x1fa/0x2f0 [ 642.753493] ? copy_mnt_ns+0xa30/0xa30 [ 642.757392] SyS_mount+0xa8/0x120 [ 642.760878] ? copy_mnt_ns+0xa30/0xa30 [ 642.764782] do_syscall_64+0x1d5/0x640 [ 642.768692] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 642.773890] RIP: 0033:0x45e219 [ 642.777083] RSP: 002b:00007fb64fbeec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 642.784898] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 642.792185] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 642.799467] RBP: 00007fb64fbeeca0 R08: 0000000000000000 R09: 0000000000000000 [ 642.806880] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d 06:35:02 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:35:02 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_freezer_state(r4, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 642.815117] R13: 00007fffd0f3798f R14: 00007fb64fbef9c0 R15: 000000000119bf8c 06:35:02 executing program 0 (fault-call:10 fault-nth:14): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:35:02 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r2 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 643.009130] FAULT_INJECTION: forcing a failure. [ 643.009130] name failslab, interval 1, probability 0, space 0, times 0 [ 643.072756] CPU: 1 PID: 16074 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 643.080867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.090617] Call Trace: [ 643.093395] dump_stack+0x1b2/0x283 [ 643.097425] should_fail.cold+0x10a/0x154 [ 643.101810] should_failslab+0xd6/0x130 [ 643.105969] kmem_cache_alloc_trace+0x29a/0x3d0 [ 643.111289] sget_userns+0x102/0xc10 [ 643.115897] ? kernfs_sop_show_options+0x170/0x170 [ 643.120970] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 643.127410] ? kernfs_sop_show_path+0x190/0x190 [ 643.132603] kernfs_mount_ns+0xd5/0x7c0 [ 643.136696] sysfs_mount+0xa1/0x160 [ 643.140451] ? sysfs_kill_sb+0x30/0x30 [ 643.144557] ? __lockdep_init_map+0x100/0x560 [ 643.149316] mount_fs+0x92/0x2a0 [ 643.152712] vfs_kern_mount.part.0+0x5b/0x470 [ 643.157438] do_mount+0xe53/0x2a00 [ 643.161131] ? lock_acquire+0x170/0x3f0 [ 643.165286] ? lock_downgrade+0x740/0x740 [ 643.169478] ? copy_mount_string+0x40/0x40 [ 643.174039] ? __might_fault+0x177/0x1b0 [ 643.178217] ? _copy_from_user+0x96/0x100 [ 643.182476] ? copy_mount_options+0x1fa/0x2f0 [ 643.187076] ? copy_mnt_ns+0xa30/0xa30 [ 643.191155] SyS_mount+0xa8/0x120 [ 643.195251] ? copy_mnt_ns+0xa30/0xa30 [ 643.199421] do_syscall_64+0x1d5/0x640 [ 643.204339] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 643.209978] RIP: 0033:0x45e219 [ 643.213542] RSP: 002b:00007fb64fbeec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 06:35:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(r0) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1014], 0x66) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) [ 643.222734] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 643.230704] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 643.238745] RBP: 00007fb64fbeeca0 R08: 0000000000000000 R09: 0000000000000000 [ 643.246386] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 643.254228] R13: 00007fffd0f3798f R14: 00007fb64fbef9c0 R15: 000000000119bf8c 06:35:03 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xca, 0x1}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x40) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="74010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f00000003c0)={0x3, @default, 0xffffffffffffffff}) dup(r4) r6 = signalfd4(r5, &(0x7f0000000380)={[0x9]}, 0x8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x5) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5200000}, 0x100}) 06:35:03 executing program 0 (fault-call:10 fault-nth:15): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) [ 643.455364] FAULT_INJECTION: forcing a failure. [ 643.455364] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 643.467981] CPU: 0 PID: 16108 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 643.477067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.486811] Call Trace: [ 643.489419] dump_stack+0x1b2/0x283 [ 643.493154] should_fail.cold+0x10a/0x154 [ 643.497541] __alloc_pages_nodemask+0x22c/0x2720 [ 643.502654] ? __kernel_text_address+0x9/0x30 [ 643.507341] ? __lock_acquire+0x5fc/0x3f20 [ 643.512980] ? __lock_acquire+0x5fc/0x3f20 [ 643.517360] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 643.523012] ? kasan_kmalloc+0xeb/0x160 [ 643.527090] ? trace_hardirqs_on+0x10/0x10 [ 643.531494] ? mount_fs+0x92/0x2a0 [ 643.535676] ? vfs_kern_mount.part.0+0x5b/0x470 [ 643.540547] ? trace_hardirqs_on+0x10/0x10 [ 643.544920] ? trace_hardirqs_on+0x10/0x10 [ 643.549162] ? lock_acquire+0x170/0x3f0 [ 643.553149] cache_grow_begin+0x8f/0x420 [ 643.557517] cache_alloc_refill+0x273/0x350 [ 643.562316] kmem_cache_alloc_trace+0x340/0x3d0 [ 643.567110] sget_userns+0x102/0xc10 [ 643.570911] ? kernfs_sop_show_options+0x170/0x170 [ 643.575844] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 643.581370] ? kernfs_sop_show_path+0x190/0x190 [ 643.586397] kernfs_mount_ns+0xd5/0x7c0 [ 643.590376] sysfs_mount+0xa1/0x160 [ 643.594015] ? sysfs_kill_sb+0x30/0x30 [ 643.598149] ? __lockdep_init_map+0x100/0x560 [ 643.603410] mount_fs+0x92/0x2a0 [ 643.607149] vfs_kern_mount.part.0+0x5b/0x470 [ 643.611986] do_mount+0xe53/0x2a00 [ 643.615759] ? lock_acquire+0x170/0x3f0 [ 643.619864] ? lock_downgrade+0x740/0x740 [ 643.624526] ? copy_mount_string+0x40/0x40 [ 643.628864] ? __might_fault+0x177/0x1b0 [ 643.633000] ? _copy_from_user+0x96/0x100 [ 643.637163] ? copy_mount_options+0x1fa/0x2f0 [ 643.641931] ? copy_mnt_ns+0xa30/0xa30 [ 643.646304] SyS_mount+0xa8/0x120 [ 643.650120] ? copy_mnt_ns+0xa30/0xa30 [ 643.654130] do_syscall_64+0x1d5/0x640 [ 643.658286] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 643.663570] RIP: 0033:0x45e219 [ 643.666947] RSP: 002b:00007fb64fbeec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 643.675331] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 643.684040] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 643.696303] RBP: 00007fb64fbeeca0 R08: 0000000000000000 R09: 0000000000000000 06:35:03 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000020540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/178, 0x20000632}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) [ 643.704138] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 643.712392] R13: 00007fffd0f3798f R14: 00007fb64fbef9c0 R15: 000000000119bf8c 06:35:03 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000300)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:35:03 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000040)=[{0x4, 0x8}, {0x2, 0x81, 0x800}, {0x2, 0xdbf6, 0x1000}, {0x4, 0x7ff, 0x800}], 0x4, &(0x7f0000000180)={r3, r4+60000000}) 06:35:03 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r5 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(r4, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) 06:35:03 executing program 0 (fault-call:10 fault-nth:16): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 06:35:03 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) 06:35:03 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5000000}, 0x100}) [ 643.981710] FAULT_INJECTION: forcing a failure. [ 643.981710] name failslab, interval 1, probability 0, space 0, times 0 [ 643.995788] CPU: 0 PID: 16141 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 644.004162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 644.014877] Call Trace: [ 644.017716] dump_stack+0x1b2/0x283 [ 644.021436] should_fail.cold+0x10a/0x154 [ 644.025894] should_failslab+0xd6/0x130 [ 644.030330] __kmalloc+0x2c1/0x400 [ 644.033975] ? register_shrinker+0x1ab/0x220 [ 644.038693] register_shrinker+0x1ab/0x220 [ 644.043557] sget_userns+0x9aa/0xc10 [ 644.047953] ? kernfs_sop_show_options+0x170/0x170 [ 644.053144] ? kernfs_sop_show_path+0x190/0x190 [ 644.057987] kernfs_mount_ns+0xd5/0x7c0 [ 644.062213] sysfs_mount+0xa1/0x160 [ 644.065886] ? sysfs_kill_sb+0x30/0x30 [ 644.070287] ? __lockdep_init_map+0x100/0x560 [ 644.074936] mount_fs+0x92/0x2a0 [ 644.078796] vfs_kern_mount.part.0+0x5b/0x470 [ 644.083618] do_mount+0xe53/0x2a00 [ 644.087484] ? lock_acquire+0x170/0x3f0 [ 644.091574] ? lock_downgrade+0x740/0x740 [ 644.096463] ? copy_mount_string+0x40/0x40 [ 644.100881] ? __might_fault+0x177/0x1b0 [ 644.105274] ? _copy_from_user+0x96/0x100 [ 644.109446] ? copy_mount_options+0x1fa/0x2f0 [ 644.114188] ? copy_mnt_ns+0xa30/0xa30 [ 644.118616] SyS_mount+0xa8/0x120 [ 644.122273] ? copy_mnt_ns+0xa30/0xa30 [ 644.126307] do_syscall_64+0x1d5/0x640 [ 644.130451] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 644.135781] RIP: 0033:0x45e219 [ 644.139287] RSP: 002b:00007fb64fbeec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 644.147023] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 644.155045] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 644.163137] RBP: 00007fb64fbeeca0 R08: 0000000000000000 R09: 0000000000000000 [ 644.170669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 06:35:04 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) dup(0xffffffffffffffff) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="3a258211f663a7720400000000000000b0f781659f8056d1d3fc72298e4b3f000000b7056f000040f87bc2fdff2c45ff01a10000c71e8fa05b2382df8e325effff8356443d7cdcfeea7d21090000ca2e572c399b37790cfb078708f8f31e327c06f5770000000000000000000000000000000000000000ce11b3e3aec46f668d4a0edf0be0d3fb7a17d9007e38bb65ea81bf7a835fc9aad84f5b443e67d008221d546ac37310470f3e92914f4eff8ab264fc0fb5d36edba31a61f4ceb75078e7cc464a97efb7c1483141d23ce68745b80ba4f3a28fbfb8ef68b3652754786ec49fd91b9c8ff254e6a36c2f1e501f302c59603046485e481de41687e7009c9cc17a69f0a5b3287acb12fda86d53a89211754c1b12072fc2db2e4924d7c226ea0ea541109906db451af5db4cf5d9a37020a46e3aaf3ffa293742c4610c8a2ec1e3039b4a0e000000000022277a39e9c0ab70b2e732eaa400520cb680e3b5c79e77bf707dc3aa8a45ee7b79ddf77f2c7cfe47eae647a8eee5f732632c1edb9e0ce7b1564ec9bc069efba9f6088e568a6070b2b55bf867ea4baa05e21395280d30f61e96a92764f574384f0d95094f840226250dccee26d10c6a886c9a647bcb7022a5ab025dc9e230efb75578ff599c969fbd86d43e69df076a1f8e03d13cac1aecdf44fca113da64117e3584084caefd8c5d7a1d395e2fb4611b6776f08450f50e48f53ce9e7bdf067258fd1f4eebe693a1486d76a03cd92250b93351f4a98d3f6770bc1ed93eea9a9c1bfe791b4d71863aa40bd1a7a1983ffb69e0b7c3b3886ea21048f14bb9132941a3bf2701174847f723ac67bb7f7b1cdc5cd0e2484a3bde638f76f93033ab417e3373f52afbefc5dc64098a7c85b074e11044c0df112bce000726117d620070a47d3ff7f0000c4e50f5b5828612200397b64873de1c923d53a12250383b715ff9ec201bb5feee0ad0066d774c82d210af53e72917383dfdc6a15fd858a9cab304d1bd22e6d8427495c7d362160cc07f946de870023650c9e67588090f4cef0729c8ac9e45f2788bdc4592a06619e5308bc901b102ce63f00000000e3bb675430def12826a6e0284494cf0113a39fc9a508f52ebcb985419e8d8466c538672acd88cb0d0d703550d757898eae575734aba20c97e44226a4586ae08dc5c24fd418000000000000000ab684fcc3694d0dfc55d9e52b4a2a3e70c27ff413870f4373e70e26bc290df72543764841bc723ef0c6c1e43b08e75828c703614c632b2d5827cb0f94778922be626173e914fd15adbf9adcf3147ce2d51cb861b7282f436e48c0afeee8ff3a3081bcd80abdfaa4606e627e20886844f5df6a82c482b9abc10eb59842a99bf1d0018c6260fad654300a0e70f18c095641809131d8e300"/1014], 0x66) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x3300b, 0x4, 0x0, 0x8, 0x6978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x11) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @local}, {0x2, 0xffff, @rand_addr=0x64010100}, 0x6ed699c82dcdd0af, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000000) [ 644.178661] R13: 00007fffd0f3798f R14: 00007fb64fbef9c0 R15: 000000000119bf8c 06:35:04 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x801, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'wrr\x00', 0x0, 0x80, 0x13}, 0x2c) r2 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x5) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000022008151e05b81ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976efe535", 0x2e}], 0x1}, 0x0) [ 644.378751] kasan: CONFIG_KASAN_INLINE enabled [ 644.387493] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 644.400017] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 644.406967] Modules linked in: [ 644.410567] CPU: 1 PID: 16141 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 644.419038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 644.429075] task: ffff88803c152500 task.stack: ffff8880b3580000 [ 644.435741] RIP: 0010:__list_del_entry_valid+0x81/0xef [ 644.441460] RSP: 0018:ffff8880b3587b48 EFLAGS: 00010246 [ 644.447311] RAX: dffffc0000000000 RBX: 00000000fffffff4 RCX: 0000000000000000 [ 644.454980] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880b1152120 [ 644.462659] RBP: ffff8880b1152118 R08: 0000000000000000 R09: 0000000000040057 [ 644.470983] R10: ffff88803c152db0 R11: ffff88803c152500 R12: 0000000000000000 [ 644.479139] R13: 0000000000000000 R14: ffff8880b1152120 R15: dffffc0000000000 [ 644.487530] FS: 00007fb64fbef700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 644.495919] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 644.502321] CR2: 0000564724db4160 CR3: 00000000520f1000 CR4: 00000000001406e0 [ 644.510868] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 644.520260] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 644.529849] Call Trace: [ 644.533139] kernfs_kill_sb+0x5b/0x1b0 [ 644.537682] sysfs_kill_sb+0x1e/0x30 [ 644.541942] deactivate_locked_super+0x6c/0xd0 [ 644.547189] sget_userns+0x9c4/0xc10 [ 644.551406] ? kernfs_sop_show_options+0x170/0x170 [ 644.557820] ? kernfs_sop_show_path+0x190/0x190 [ 644.563305] kernfs_mount_ns+0xd5/0x7c0 [ 644.567478] sysfs_mount+0xa1/0x160 [ 644.571741] ? sysfs_kill_sb+0x30/0x30 [ 644.576581] ? __lockdep_init_map+0x100/0x560 [ 644.581777] mount_fs+0x92/0x2a0 [ 644.585523] vfs_kern_mount.part.0+0x5b/0x470 [ 644.591489] do_mount+0xe53/0x2a00 [ 644.595172] ? lock_acquire+0x170/0x3f0 [ 644.599614] ? lock_downgrade+0x740/0x740 [ 644.603832] ? copy_mount_string+0x40/0x40 [ 644.608615] ? __might_fault+0x177/0x1b0 [ 644.613284] ? _copy_from_user+0x96/0x100 [ 644.617665] ? copy_mount_options+0x1fa/0x2f0 [ 644.622771] ? copy_mnt_ns+0xa30/0xa30 [ 644.626760] SyS_mount+0xa8/0x120 [ 644.630371] ? copy_mnt_ns+0xa30/0xa30 [ 644.634962] do_syscall_64+0x1d5/0x640 [ 644.640163] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 644.646103] RIP: 0033:0x45e219 [ 644.649706] RSP: 002b:00007fb64fbeec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 644.658654] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 644.666245] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000000 [ 644.674177] RBP: 00007fb64fbeeca0 R08: 0000000000000000 R09: 0000000000000000 [ 644.682570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 644.690788] R13: 00007fffd0f3798f R14: 00007fb64fbef9c0 R15: 000000000119bf8c [ 644.698248] Code: c5 0f 84 df 00 00 00 48 b8 00 02 00 00 00 00 ad de 49 39 c4 0f 84 e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 51 49 8b 14 24 48 39 ea 0f 85 97 00 00 00 49 8d [ 644.720069] RIP: __list_del_entry_valid+0x81/0xef RSP: ffff8880b3587b48 [ 644.731502] ---[ end trace 972122ac540dc17f ]--- [ 644.737166] Kernel panic - not syncing: Fatal exception [ 644.744286] Kernel Offset: disabled [ 644.749379] Rebooting in 86400 seconds..