[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 33.234876][ T26] audit: type=1800 audit(1571761290.430:25): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 33.262007][ T26] audit: type=1800 audit(1571761290.430:26): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 33.290291][ T26] audit: type=1800 audit(1571761290.430:27): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.0' (ECDSA) to the list of known hosts. 2019/10/22 16:21:40 fuzzer started 2019/10/22 16:21:41 dialing manager at 10.128.0.105:33369 2019/10/22 16:21:41 syscalls: 2524 2019/10/22 16:21:41 code coverage: enabled 2019/10/22 16:21:41 comparison tracing: enabled 2019/10/22 16:21:41 extra coverage: extra coverage is not supported by the kernel 2019/10/22 16:21:41 setuid sandbox: enabled 2019/10/22 16:21:41 namespace sandbox: enabled 2019/10/22 16:21:41 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/22 16:21:41 fault injection: enabled 2019/10/22 16:21:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/22 16:21:41 net packet injection: enabled 2019/10/22 16:21:41 net device setup: enabled 2019/10/22 16:21:41 concurrency sanitizer: enabled 16:21:45 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r1 = syz_open_procfs(0x0, &(0x7f000076c000)='pagemap\x00') sendfile(r0, r1, 0x0, 0x800000000fffc) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) geteuid() syzkaller login: [ 48.268402][ T7176] IPVS: ftp: loaded support on port[0] = 21 16:21:45 executing program 1: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="53053c6c3617317518c60eeb10cbaf94d1206552570a7b6965692bb45264a993bf663e8c3fd959b305542bf06c919f11cbd2b04ae2607c5db3027f6f5d8ba35593f01e77b08bd6c16506653b4fe4afc6e82efccf034de3791d5d08c50430a591221aa879b9d012de3f6fac62132e0d07c660bd9291eecde06be7a826d5d26e29fecb30ce5789286249181a2b0d902d2868e0fbc83b20fc19c4d30724d67c3ddc490ed512f7e21a462308eca9105fc4acf8436427a8fb22490adf7c200d760280b20bfabd023d12c85ad25f51aa6212d5a80a69e9c408b97e994c2c31ec2794911c96cadf773c1e92ee248cd3d2c723287ce52fe972781f30c227d08eaf9bfb", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) [ 48.376798][ T7176] chnl_net:caif_netlink_parms(): no params data found [ 48.448816][ T7176] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.455985][ T7176] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.465115][ T7176] device bridge_slave_0 entered promiscuous mode [ 48.473008][ T7176] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.481264][ T7176] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.489690][ T7176] device bridge_slave_1 entered promiscuous mode [ 48.513644][ T7176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.525128][ T7176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.550141][ T7176] team0: Port device team_slave_0 added [ 48.558460][ T7176] team0: Port device team_slave_1 added 16:21:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2276, 0x0) [ 48.629295][ T7176] device hsr_slave_0 entered promiscuous mode [ 48.687822][ T7176] device hsr_slave_1 entered promiscuous mode [ 48.735510][ T7179] IPVS: ftp: loaded support on port[0] = 21 [ 48.747310][ T7176] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.754428][ T7176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.761787][ T7176] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.768874][ T7176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.881530][ T7182] IPVS: ftp: loaded support on port[0] = 21 [ 48.952342][ T7176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.004144][ T7179] chnl_net:caif_netlink_parms(): no params data found [ 49.020452][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.029494][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state 16:21:46 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = dup2(r0, r1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, @binary='+'}]}, 0x1c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000003c80)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0}], 0x1, 0x0) [ 49.049048][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.058412][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 49.071872][ T7176] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.119359][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.138418][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.145565][ T7183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.202276][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.218478][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.225590][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.298249][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.318130][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.348921][ T7179] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.355997][ T7179] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.377486][ T7179] device bridge_slave_0 entered promiscuous mode 16:21:46 executing program 4: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x5ab}, 0x28) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 49.400389][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.411005][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.424365][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.451296][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.468015][ T7179] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.475168][ T7179] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.496117][ T7179] device bridge_slave_1 entered promiscuous mode [ 49.523284][ T7182] chnl_net:caif_netlink_parms(): no params data found [ 49.589522][ T7188] IPVS: ftp: loaded support on port[0] = 21 [ 49.597120][ T7179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.627450][ T7176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.639664][ T7179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.700500][ T7182] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.707829][ T7182] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.715937][ T7182] device bridge_slave_0 entered promiscuous mode [ 49.758954][ T7182] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.766127][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.783258][ T7192] IPVS: ftp: loaded support on port[0] = 21 [ 49.783639][ T7182] device bridge_slave_1 entered promiscuous mode [ 49.821642][ T7179] team0: Port device team_slave_0 added [ 49.853715][ T7182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.869680][ T7179] team0: Port device team_slave_1 added [ 49.881446][ T7182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 16:21:47 executing program 5: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 49.939300][ T7182] team0: Port device team_slave_0 added [ 50.031767][ T7179] device hsr_slave_0 entered promiscuous mode 16:21:47 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r1 = syz_open_procfs(0x0, &(0x7f000076c000)='pagemap\x00') sendfile(r0, r1, 0x0, 0x800000000fffc) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) geteuid() [ 50.111924][ T7179] device hsr_slave_1 entered promiscuous mode [ 50.176534][ T7179] debugfs: Directory 'hsr0' with parent '/' already present! [ 50.200740][ T7182] team0: Port device team_slave_1 added [ 50.214304][ T7202] IPVS: ftp: loaded support on port[0] = 21 16:21:47 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r1 = syz_open_procfs(0x0, &(0x7f000076c000)='pagemap\x00') sendfile(r0, r1, 0x0, 0x800000000fffc) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) geteuid() [ 50.245123][ T7188] chnl_net:caif_netlink_parms(): no params data found 16:21:47 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r1 = syz_open_procfs(0x0, &(0x7f000076c000)='pagemap\x00') sendfile(r0, r1, 0x0, 0x800000000fffc) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) geteuid() [ 50.319338][ T7182] device hsr_slave_0 entered promiscuous mode [ 50.356878][ T7182] device hsr_slave_1 entered promiscuous mode [ 50.396569][ T7182] debugfs: Directory 'hsr0' with parent '/' already present! [ 50.441542][ T7182] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.448660][ T7182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.455943][ T7182] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.463013][ T7182] bridge0: port 1(bridge_slave_0) entered forwarding state 16:21:47 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r1 = syz_open_procfs(0x0, &(0x7f000076c000)='pagemap\x00') sendfile(r0, r1, 0x0, 0x800000000fffc) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) geteuid() [ 50.494220][ T7179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.506891][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 50.516080][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.540551][ T5] bridge0: port 2(bridge_slave_1) entered disabled state 16:21:47 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r1 = syz_open_procfs(0x0, &(0x7f000076c000)='pagemap\x00') sendfile(r0, r1, 0x0, 0x800000000fffc) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) geteuid() [ 50.642008][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.650196][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.676891][ T7179] 8021q: adding VLAN 0 to HW filter on device team0 16:21:47 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r1 = syz_open_procfs(0x0, &(0x7f000076c000)='pagemap\x00') sendfile(r0, r1, 0x0, 0x800000000fffc) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) geteuid() [ 50.736678][ T7188] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.749527][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.768187][ T7188] device bridge_slave_0 entered promiscuous mode [ 50.819869][ T7188] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.827933][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.836007][ T7188] device bridge_slave_1 entered promiscuous mode [ 50.843133][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.855848][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 16:21:48 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r1 = syz_open_procfs(0x0, &(0x7f000076c000)='pagemap\x00') sendfile(r0, r1, 0x0, 0x800000000fffc) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) geteuid() [ 50.865850][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.872969][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.885441][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.908626][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.926982][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.934202][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.958852][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.968193][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.978233][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.010425][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.019936][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.032348][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.041138][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.050277][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.058766][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.067518][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.075980][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.084359][ T7192] chnl_net:caif_netlink_parms(): no params data found [ 51.112383][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.122219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.136634][ T7182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.145424][ T7188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.158476][ T7188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.173358][ T7179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.218778][ T7188] team0: Port device team_slave_0 added [ 51.225494][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.233784][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.250852][ T7182] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.264995][ T7188] team0: Port device team_slave_1 added [ 51.290735][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.299389][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.308273][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.315296][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.323226][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.332304][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.341095][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.348148][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.355853][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.373478][ T7182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.384132][ T7182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.404056][ T7182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.439772][ T7192] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.447098][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.454780][ T7192] device bridge_slave_0 entered promiscuous mode [ 51.462890][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.471900][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.480801][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.489601][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.499110][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.508245][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.516792][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.525381][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.534291][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.543508][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.552207][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.573766][ T7192] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.583077][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.617484][ T7192] device bridge_slave_1 entered promiscuous mode [ 51.679577][ T7188] device hsr_slave_0 entered promiscuous mode [ 51.726743][ C0] hrtimer: interrupt took 34163 ns [ 51.730807][ T7188] device hsr_slave_1 entered promiscuous mode [ 51.787081][ T7188] debugfs: Directory 'hsr0' with parent '/' already present! [ 51.813048][ T7192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.834870][ T7202] chnl_net:caif_netlink_parms(): no params data found [ 51.873808][ T7192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.959801][ T7202] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.969469][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.988549][ T7202] device bridge_slave_0 entered promiscuous mode [ 51.997043][ T7202] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.004193][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.012400][ T7202] device bridge_slave_1 entered promiscuous mode [ 52.021676][ T7192] team0: Port device team_slave_0 added [ 52.043158][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 52.043186][ T26] audit: type=1804 audit(1571761309.240:31): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir494234633/syzkaller.ZGLWST/0/file0/file0" dev="loop1" ino=22 res=1 [ 52.095671][ T26] audit: type=1804 audit(1571761309.250:32): pid=7237 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir494234633/syzkaller.ZGLWST/0/file0/file0" dev="loop1" ino=22 res=1 [ 52.162790][ T7192] team0: Port device team_slave_1 added [ 52.176944][ T7202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.188182][ T7188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.206074][ T7202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.231536][ T7202] team0: Port device team_slave_0 added 16:21:49 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r1 = syz_open_procfs(0x0, &(0x7f000076c000)='pagemap\x00') sendfile(r0, r1, 0x0, 0x800000000fffc) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) geteuid() [ 52.253411][ T7202] team0: Port device team_slave_1 added [ 52.264829][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.277928][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 16:21:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2276, 0x0) [ 52.297423][ T7188] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.349834][ T7192] device hsr_slave_0 entered promiscuous mode [ 52.420779][ T7192] device hsr_slave_1 entered promiscuous mode [ 52.466553][ T7192] debugfs: Directory 'hsr0' with parent '/' already present! [ 52.484620][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.500001][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.514219][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.521376][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.529691][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.555437][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.564209][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.573003][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.580283][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.588414][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.597618][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.649485][ T7202] device hsr_slave_0 entered promiscuous mode [ 52.686967][ T7202] device hsr_slave_1 entered promiscuous mode [ 52.726545][ T7202] debugfs: Directory 'hsr0' with parent '/' already present! [ 52.740911][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.752059][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.761290][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.770291][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.779401][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.793226][ T7188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.804315][ T7188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.817209][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.825702][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.834543][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.851671][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.861111][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.884364][ T7188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.942129][ T7202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.954950][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.963219][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.974611][ T7202] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.987647][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.004273][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.015990][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.023174][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.032315][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.041250][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.049934][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.057074][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.076833][ T7192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.102393][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.118019][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.145476][ T7202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.168916][ T7202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.183978][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 16:21:50 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = dup2(r0, r1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, @binary='+'}]}, 0x1c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000003c80)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0}], 0x1, 0x0) [ 53.194084][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.203447][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.244995][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.254177][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.268215][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.289007][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.302545][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.313251][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.325222][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.335395][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.355164][ T7192] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.373505][ T7202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.385987][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.394567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.421609][ T7192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.432849][ T7192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.444545][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.457724][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.466061][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.473236][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.481459][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.490245][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.498774][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.505797][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.513932][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.522957][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.532121][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.540957][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.549831][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.558813][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.568380][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.576820][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.585423][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.593985][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.603604][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.611938][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.620418][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.642437][ T7192] 8021q: adding VLAN 0 to HW filter on device batadv0 16:21:51 executing program 4: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x5ab}, 0x28) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:21:51 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r1 = syz_open_procfs(0x0, &(0x7f000076c000)='pagemap\x00') sendfile(r0, r1, 0x0, 0x800000000fffc) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) geteuid() 16:21:51 executing program 1: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2276, 0x0) 16:21:51 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = dup2(r0, r1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, @binary='+'}]}, 0x1c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000003c80)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0}], 0x1, 0x0) 16:21:51 executing program 5: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:51 executing program 4: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x5ab}, 0x28) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:21:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2276, 0x0) 16:21:51 executing program 5: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:51 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = dup2(r0, r1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, @binary='+'}]}, 0x1c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000003c80)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0}], 0x1, 0x0) 16:21:51 executing program 0: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:51 executing program 1: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:51 executing program 2: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:51 executing program 3: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:52 executing program 5: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:52 executing program 4: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x5ab}, 0x28) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:21:52 executing program 0: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:52 executing program 3: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:52 executing program 2: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:52 executing program 1: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:52 executing program 0: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:52 executing program 3: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:52 executing program 2: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:52 executing program 5: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:52 executing program 4: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:53 executing program 0: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:53 executing program 5: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:53 executing program 2: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:53 executing program 2: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:53 executing program 5: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:53 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = dup2(r0, r1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, @binary='+'}]}, 0x1c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000003c80)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0}], 0x1, 0x0) 16:21:53 executing program 4: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:53 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = dup2(r0, r1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, @binary='+'}]}, 0x1c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000003c80)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0}], 0x1, 0x0) 16:21:53 executing program 0: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:53 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = dup2(r0, r1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, @binary='+'}]}, 0x1c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000003c80)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0}], 0x1, 0x0) 16:21:53 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = dup2(r0, r1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, @binary='+'}]}, 0x1c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000003c80)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0}], 0x1, 0x0) 16:21:54 executing program 2: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:54 executing program 0: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:54 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = dup2(r0, r1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, @binary='+'}]}, 0x1c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000003c80)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0}], 0x1, 0x0) 16:21:54 executing program 4: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xf) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$admmidi(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:21:54 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = dup2(r0, r1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, @binary='+'}]}, 0x1c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000003c80)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0}], 0x1, 0x0) 16:21:54 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = dup2(r0, r1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, @binary='+'}]}, 0x1c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000003c80)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0}], 0x1, 0x0) 16:21:54 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = dup2(r0, r1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, @binary='+'}]}, 0x1c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000003c80)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0}], 0x1, 0x0) 16:21:54 executing program 0: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="53053c6c3617317518c60eeb10cbaf94d1206552570a7b6965692bb45264a993bf663e8c3fd959b305542bf06c919f11cbd2b04ae2607c5db3027f6f5d8ba35593f01e77b08bd6c16506653b4fe4afc6e82efccf034de3791d5d08c50430a591221aa879b9d012de3f6fac62132e0d07c660bd9291eecde06be7a826d5d26e29fecb30ce5789286249181a2b0d902d2868e0fbc83b20fc19c4d30724d67c3ddc490ed512f7e21a462308eca9105fc4acf8436427a8fb22490adf7c200d760280b20bfabd023d12c85ad25f51aa6212d5a80a69e9c408b97e994c2c31ec2794911c96cadf773c1e92ee248cd3d2c723287ce52fe972781f30c227d08eaf9bfb", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:54 executing program 4: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:55 executing program 1: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:55 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = dup2(r0, r1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, @binary='+'}]}, 0x1c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000003c80)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0}], 0x1, 0x0) 16:21:55 executing program 3: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:55 executing program 2: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:55 executing program 0: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:55 executing program 5: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:55 executing program 4: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:55 executing program 1: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:56 executing program 2: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:56 executing program 3: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="53053c6c3617317518c60eeb10cbaf94d1206552570a7b6965692bb45264a993bf663e8c3fd959b305542bf06c919f11cbd2b04ae2607c5db3027f6f5d8ba35593f01e77b08bd6c16506653b4fe4afc6e82efccf034de3791d5d08c50430a591221aa879b9d012de3f6fac62132e0d07c660bd9291eecde06be7a826d5d26e29fecb30ce5789286249181a2b0d902d2868e0fbc83b20fc19c4d30724d67c3ddc490ed512f7e21a462308eca9105fc4acf8436427a8fb22490adf7c200d760280b20bfabd023d12c85ad25f51aa6212d5a80a69e9c408b97e994c2c31ec2794911c96cadf773c1e92ee248cd3d2c723287ce52fe972781f30c227d08eaf9bfb", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:56 executing program 0: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:56 executing program 5: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="53053c6c3617317518c60eeb10cbaf94d1206552570a7b6965692bb45264a993bf663e8c3fd959b305542bf06c919f11cbd2b04ae2607c5db3027f6f5d8ba35593f01e77b08bd6c16506653b4fe4afc6e82efccf034de3791d5d08c50430a591221aa879b9d012de3f6fac62132e0d07c660bd9291eecde06be7a826d5d26e29fecb30ce5789286249181a2b0d902d2868e0fbc83b20fc19c4d30724d67c3ddc490ed512f7e21a462308eca9105fc4acf8436427a8fb22490adf7c200d760280b20bfabd023d12c85ad25f51aa6212d5a80a69e9c408b97e994c2c31ec2794911c96cadf773c1e92ee248cd3d2c723287ce52fe972781f30c227d08eaf9bfb", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:56 executing program 4: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:57 executing program 1: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:57 executing program 3: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:57 executing program 2: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:57 executing program 0: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:57 executing program 4: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="53053c6c3617317518c60eeb10cbaf94d1206552570a7b6965692bb45264a993bf663e8c3fd959b305542bf06c919f11cbd2b04ae2607c5db3027f6f5d8ba35593f01e77b08bd6c16506653b4fe4afc6e82efccf034de3791d5d08c50430a591221aa879b9d012de3f6fac62132e0d07c660bd9291eecde06be7a826d5d26e29fecb30ce5789286249181a2b0d902d2868e0fbc83b20fc19c4d30724d67c3ddc490ed512f7e21a462308eca9105fc4acf8436427a8fb22490adf7c200d760280b20bfabd023d12c85ad25f51aa6212d5a80a69e9c408b97e994c2c31ec2794911c96cadf773c1e92ee248cd3d2c723287ce52fe972781f30c227d08eaf9bfb", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:57 executing program 5: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:57 executing program 1: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:58 executing program 3: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:58 executing program 2: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:58 executing program 0: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="53053c6c3617317518c60eeb10cbaf94d1206552570a7b6965692bb45264a993bf663e8c3fd959b305542bf06c919f11cbd2b04ae2607c5db3027f6f5d8ba35593f01e77b08bd6c16506653b4fe4afc6e82efccf034de3791d5d08c50430a591221aa879b9d012de3f6fac62132e0d07c660bd9291eecde06be7a826d5d26e29fecb30ce5789286249181a2b0d902d2868e0fbc83b20fc19c4d30724d67c3ddc490ed512f7e21a462308eca9105fc4acf8436427a8fb22490adf7c200d760280b20bfabd023d12c85ad25f51aa6212d5a80a69e9c408b97e994c2c31ec2794911c96cadf773c1e92ee248cd3d2c723287ce52fe972781f30c227d08eaf9bfb", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:59 executing program 4: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="53053c6c3617317518c60eeb10cbaf94d1206552570a7b6965692bb45264a993bf663e8c3fd959b305542bf06c919f11cbd2b04ae2607c5db3027f6f5d8ba35593f01e77b08bd6c16506653b4fe4afc6e82efccf034de3791d5d08c50430a591221aa879b9d012de3f6fac62132e0d07c660bd9291eecde06be7a826d5d26e29fecb30ce5789286249181a2b0d902d2868e0fbc83b20fc19c4d30724d67c3ddc490ed512f7e21a462308eca9105fc4acf8436427a8fb22490adf7c200d760280b20bfabd023d12c85ad25f51aa6212d5a80a69e9c408b97e994c2c31ec2794911c96cadf773c1e92ee248cd3d2c723287ce52fe972781f30c227d08eaf9bfb", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:59 executing program 1: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:59 executing program 5: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:21:59 executing program 3: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:00 executing program 2: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:00 executing program 0: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:00 executing program 4: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:00 executing program 5: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:00 executing program 1: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="53053c6c3617317518c60eeb10cbaf94d1206552570a7b6965692bb45264a993bf663e8c3fd959b305542bf06c919f11cbd2b04ae2607c5db3027f6f5d8ba35593f01e77b08bd6c16506653b4fe4afc6e82efccf034de3791d5d08c50430a591221aa879b9d012de3f6fac62132e0d07c660bd9291eecde06be7a826d5d26e29fecb30ce5789286249181a2b0d902d2868e0fbc83b20fc19c4d30724d67c3ddc490ed512f7e21a462308eca9105fc4acf8436427a8fb22490adf7c200d760280b20bfabd023d12c85ad25f51aa6212d5a80a69e9c408b97e994c2c31ec2794911c96cadf773c1e92ee248cd3d2c723287ce52fe972781f30c227d08eaf9bfb", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:00 executing program 3: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:01 executing program 2: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:01 executing program 1: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="53053c6c3617317518c60eeb10cbaf94d1206552570a7b6965692bb45264a993bf663e8c3fd959b305542bf06c919f11cbd2b04ae2607c5db3027f6f5d8ba35593f01e77b08bd6c16506653b4fe4afc6e82efccf034de3791d5d08c50430a591221aa879b9d012de3f6fac62132e0d07c660bd9291eecde06be7a826d5d26e29fecb30ce5789286249181a2b0d902d2868e0fbc83b20fc19c4d30724d67c3ddc490ed512f7e21a462308eca9105fc4acf8436427a8fb22490adf7c200d760280b20bfabd023d12c85ad25f51aa6212d5a80a69e9c408b97e994c2c31ec2794911c96cadf773c1e92ee248cd3d2c723287ce52fe972781f30c227d08eaf9bfb", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:01 executing program 0: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:01 executing program 4: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:01 executing program 5: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:01 executing program 3: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:02 executing program 2: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:02 executing program 1: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:02 executing program 0: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:02 executing program 4: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:02 executing program 5: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="53053c6c3617317518c60eeb10cbaf94d1206552570a7b6965692bb45264a993bf663e8c3fd959b305542bf06c919f11cbd2b04ae2607c5db3027f6f5d8ba35593f01e77b08bd6c16506653b4fe4afc6e82efccf034de3791d5d08c50430a591221aa879b9d012de3f6fac62132e0d07c660bd9291eecde06be7a826d5d26e29fecb30ce5789286249181a2b0d902d2868e0fbc83b20fc19c4d30724d67c3ddc490ed512f7e21a462308eca9105fc4acf8436427a8fb22490adf7c200d760280b20bfabd023d12c85ad25f51aa6212d5a80a69e9c408b97e994c2c31ec2794911c96cadf773c1e92ee248cd3d2c723287ce52fe972781f30c227d08eaf9bfb", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:03 executing program 3: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="53053c6c3617317518c60eeb10cbaf94d1206552570a7b6965692bb45264a993bf663e8c3fd959b305542bf06c919f11cbd2b04ae2607c5db3027f6f5d8ba35593f01e77b08bd6c16506653b4fe4afc6e82efccf034de3791d5d08c50430a591221aa879b9d012de3f6fac62132e0d07c660bd9291eecde06be7a826d5d26e29fecb30ce5789286249181a2b0d902d2868e0fbc83b20fc19c4d30724d67c3ddc490ed512f7e21a462308eca9105fc4acf8436427a8fb22490adf7c200d760280b20bfabd023d12c85ad25f51aa6212d5a80a69e9c408b97e994c2c31ec2794911c96cadf773c1e92ee248cd3d2c723287ce52fe972781f30c227d08eaf9bfb", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:03 executing program 2: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:03 executing program 1: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="53053c6c3617317518c60eeb10cbaf94d1206552570a7b6965692bb45264a993bf663e8c3fd959b305542bf06c919f11cbd2b04ae2607c5db3027f6f5d8ba35593f01e77b08bd6c16506653b4fe4afc6e82efccf034de3791d5d08c50430a591221aa879b9d012de3f6fac62132e0d07c660bd9291eecde06be7a826d5d26e29fecb30ce5789286249181a2b0d902d2868e0fbc83b20fc19c4d30724d67c3ddc490ed512f7e21a462308eca9105fc4acf8436427a8fb22490adf7c200d760280b20bfabd023d12c85ad25f51aa6212d5a80a69e9c408b97e994c2c31ec2794911c96cadf773c1e92ee248cd3d2c723287ce52fe972781f30c227d08eaf9bfb", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:03 executing program 5: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="53053c6c3617317518c60eeb10cbaf94d1206552570a7b6965692bb45264a993bf663e8c3fd959b305542bf06c919f11cbd2b04ae2607c5db3027f6f5d8ba35593f01e77b08bd6c16506653b4fe4afc6e82efccf034de3791d5d08c50430a591221aa879b9d012de3f6fac62132e0d07c660bd9291eecde06be7a826d5d26e29fecb30ce5789286249181a2b0d902d2868e0fbc83b20fc19c4d30724d67c3ddc490ed512f7e21a462308eca9105fc4acf8436427a8fb22490adf7c200d760280b20bfabd023d12c85ad25f51aa6212d5a80a69e9c408b97e994c2c31ec2794911c96cadf773c1e92ee248cd3d2c723287ce52fe972781f30c227d08eaf9bfb", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:04 executing program 0: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:04 executing program 4: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="53053c6c3617317518c60eeb10cbaf94d1206552570a7b6965692bb45264a993bf663e8c3fd959b305542bf06c919f11cbd2b04ae2607c5db3027f6f5d8ba35593f01e77b08bd6c16506653b4fe4afc6e82efccf034de3791d5d08c50430a591221aa879b9d012de3f6fac62132e0d07c660bd9291eecde06be7a826d5d26e29fecb30ce5789286249181a2b0d902d2868e0fbc83b20fc19c4d30724d67c3ddc490ed512f7e21a462308eca9105fc4acf8436427a8fb22490adf7c200d760280b20bfabd023d12c85ad25f51aa6212d5a80a69e9c408b97e994c2c31ec2794911c96cadf773c1e92ee248cd3d2c723287ce52fe972781f30c227d08eaf9bfb", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:04 executing program 3: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) 16:22:04 executing program 2: pipe(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x7a, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) creat(&(0x7f0000000000)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r4 = open(0x0, 0x1fe, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000180)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="53053c6c3617317518c60eeb10cbaf94d1206552570a7b6965692bb45264a993bf663e8c3fd959b305542bf06c919f11cbd2b04ae2607c5db3027f6f5d8ba35593f01e77b08bd6c16506653b4fe4afc6e82efccf034de3791d5d08c50430a591221aa879b9d012de3f6fac62132e0d07c660bd9291eecde06be7a826d5d26e29fecb30ce5789286249181a2b0d902d2868e0fbc83b20fc19c4d30724d67c3ddc490ed512f7e21a462308eca9105fc4acf8436427a8fb22490adf7c200d760280b20bfabd023d12c85ad25f51aa6212d5a80a69e9c408b97e994c2c31ec2794911c96cadf773c1e92ee248cd3d2c723287ce52fe972781f30c227d08eaf9bfb", @ANYRESOCT=r5, @ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="e269453649a1cb3d5cf01be9e91209501bc2e89c638e3bd4efea189dfd88eb41ccdbbf19849d9d3b9d7d34950d048741ec642b3cf14860abf96dc0587dd17a2e6ce0ec17d21004c9aadce38e79a599cf3204e38ea6b846db60044b5a97e69167e596fb8932e1c949e416370202bd42bd1784d714f781c6339a162dc18f56971dec22cbd1345585036476bd0e75eb1e7e91c5e29993822c42397ab0da4ed1d3460e2cf636db64fc3cef10e601b36b73b874623fab7850ffc30fb34f76eb2cbf49418ca58d16f73cfafdce58f1b3ee32515abd6f780cadadc221ededbc8af09c9f3cfd95536335584360281f", @ANYPTR], @ANYRES16]], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) fstat(r6, &(0x7f0000000240)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) r9 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x80080080044df9, 0x0) r10 = socket$inet(0x2, 0x6, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r10, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x80000000, 0x640080) r11 = socket$inet(0x2, 0x6, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet(0x2, 0x6, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r14, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) r15 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x21, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r16, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r17 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x1) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r19, 0x0, r20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df", 0x54}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r17, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="3b00023aa1422085000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0x9c, 0x4}, 0x6010) getgroups(0x3, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff]) [ 67.654007][ T7893] ================================================================== [ 67.664593][ T7893] BUG: KCSAN: data-race in fsnotify / fsnotify [ 67.670738][ T7893] [ 67.673068][ T7893] write to 0xffff8881041443e8 of 4 bytes by task 7039 on cpu 1: [ 67.680700][ T7893] fsnotify+0x41e/0x7d0 [ 67.684854][ T7893] vfs_write+0x373/0x390 [ 67.689096][ T7893] ksys_write+0xd5/0x1b0 [ 67.693338][ T7893] __x64_sys_write+0x4c/0x60 [ 67.697928][ T7893] do_syscall_64+0xcc/0x370 [ 67.702475][ T7893] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 67.708351][ T7893] [ 67.710705][ T7893] read to 0xffff8881041443e8 of 4 bytes by task 7893 on cpu 0: [ 67.718249][ T7893] fsnotify+0x4c1/0x7d0 [ 67.722407][ T7893] vfs_read+0x29b/0x2c0 [ 67.722421][ T7893] ksys_read+0xd5/0x1b0 [ 67.722434][ T7893] __x64_sys_read+0x4c/0x60 [ 67.722448][ T7893] do_syscall_64+0xcc/0x370 [ 67.722479][ T7893] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 67.731597][ T7884] uinput: write device info first [ 67.735266][ T7893] [ 67.735270][ T7893] Reported by Kernel Concurrency Sanitizer on: [ 67.735287][ T7893] CPU: 0 PID: 7893 Comm: blkid Not tainted 5.4.0-rc3+ #0 [ 67.735294][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.735299][ T7893] ================================================================== [ 67.735308][ T7893] Kernel panic - not syncing: panic_on_warn set ... [ 67.735322][ T7893] CPU: 0 PID: 7893 Comm: blkid Not tainted 5.4.0-rc3+ #0 [ 67.735330][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.735334][ T7893] Call Trace: [ 67.735357][ T7893] dump_stack+0xf5/0x159 [ 67.735374][ T7893] panic+0x210/0x640 [ 67.735394][ T7893] ? vprintk_func+0x8d/0x140 [ 67.735414][ T7893] kcsan_report.cold+0xc/0x10 [ 67.735518][ T7893] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 67.762392][ T7886] uinput: write device info first [ 67.766465][ T7893] __tsan_read4+0x2c/0x30 [ 67.766486][ T7893] fsnotify+0x4c1/0x7d0 [ 67.766510][ T7893] vfs_read+0x29b/0x2c0 [ 67.766525][ T7893] ksys_read+0xd5/0x1b0 [ 67.766544][ T7893] __x64_sys_read+0x4c/0x60 [ 67.766563][ T7893] do_syscall_64+0xcc/0x370 [ 67.766580][ T7893] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 67.766608][ T7893] RIP: 0033:0x7f72c1ecb207 [ 67.827197][ T7886] uinput: write device info first [ 67.829319][ T7893] Code: 73 01 c3 48 8d 0d 9d af 20 00 31 d2 48 29 c2 89 11 48 83 c8 ff eb eb 90 90 90 90 90 90 90 90 90 90 90 90 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d 6d af 20 00 31 d2 48 29 c2 89 [ 67.829328][ T7893] RSP: 002b:00007ffec91dc828 EFLAGS: 00000206 ORIG_RAX: 0000000000000000 [ 67.829344][ T7893] RAX: ffffffffffffffda RBX: 00007f72c20d61c8 RCX: 00007f72c1ecb207 [ 67.829354][ T7893] RDX: 0000000000000340 RSI: 00007ffec91dc948 RDI: 0000000000000003 [ 67.829363][ T7893] RBP: 00007ffec91dc8a0 R08: 00007ffec91dcc9f R09: 0000000000000000 [ 67.829372][ T7893] R10: 0000000000000003 R11: 0000000000000206 R12: 0000000000000008 [ 67.829381][ T7893] R13: 00007f72c20d5040 R14: 00007ffec91dc948 R15: 00007ffec91dcc9f [ 67.830726][ T7893] Kernel Offset: disabled [ 67.954471][ T7893] Rebooting in 86400 seconds..