[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   35.687035][   T25] audit: type=1800 audit(1571798267.745:25): pid=7071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0
[   35.721028][   T25] audit: type=1800 audit(1571798267.745:26): pid=7071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0
[   35.746285][   T25] audit: type=1800 audit(1571798267.745:27): pid=7071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.15.216' (ECDSA) to the list of known hosts.
2019/10/23 02:37:58 fuzzer started
2019/10/23 02:38:00 dialing manager at 10.128.0.105:42531
2019/10/23 02:38:01 syscalls: 2524
2019/10/23 02:38:01 code coverage: enabled
2019/10/23 02:38:01 comparison tracing: enabled
2019/10/23 02:38:01 extra coverage: extra coverage is not supported by the kernel
2019/10/23 02:38:01 setuid sandbox: enabled
2019/10/23 02:38:01 namespace sandbox: enabled
2019/10/23 02:38:01 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/23 02:38:01 fault injection: enabled
2019/10/23 02:38:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/23 02:38:01 net packet injection: enabled
2019/10/23 02:38:01 net device setup: enabled
2019/10/23 02:38:01 concurrency sanitizer: enabled
syzkaller login: [   59.090300][ T7238] KCSAN: could not find function: 'poll_schedule_timeout'
2019/10/23 02:38:11 adding functions to KCSAN blacklist: 'rcu_gp_fqs_check_wake' 'tcp_add_backlog' 'fasync_remove_entry' '__nf_ct_refresh_acct' 'bio_endio' 'do_nanosleep' '__tcp_select_window' 'tcp_poll' 'dd_has_work' 'padata_find_next' 'run_timer_softirq' '__hrtimer_run_queues' 'find_next_bit' 'mod_timer' 'pipe_poll' 'ktime_get_real_seconds' 'tick_sched_do_timer' 'generic_write_end' 'find_get_pages_range_tag' 'ext4_has_free_clusters' 'update_defense_level' 'ktime_get_seconds' 'generic_permission' 'blk_mq_get_request' 'tick_do_update_jiffies64' 'xas_clear_mark' '__splice_from_pipe' 'blk_mq_run_hw_queue' 'wbt_issue' '__nf_conntrack_find_get' 'tomoyo_supervisor' 'ext4_free_inode' 'xas_find_marked' 'common_perm_cond' '__ext4_new_inode' 'poll_schedule_timeout' 'ep_poll' 'kvm_arch_vcpu_load' 
02:38:36 executing program 0:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

[   84.162438][ T7242] IPVS: ftp: loaded support on port[0] = 21
02:38:36 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x66b48f5e9d22e1bb}})
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000700)={0x0, 0xb23, "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"})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}, 0x0, 0x0, 0x101, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, &(0x7f00000006c0))
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000300)=0x7, 0x4)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndpcmc(0x0, 0xffffffffffffdb78, 0x0)

[   84.287785][ T7242] chnl_net:caif_netlink_parms(): no params data found
[   84.376493][ T7242] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.391061][ T7242] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.399132][ T7242] device bridge_slave_0 entered promiscuous mode
[   84.415752][ T7245] IPVS: ftp: loaded support on port[0] = 21
[   84.422085][ T7242] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.429176][ T7242] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.441450][ T7242] device bridge_slave_1 entered promiscuous mode
[   84.478417][ T7242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.504844][ T7242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.533056][ T7242] team0: Port device team_slave_0 added
[   84.546401][ T7242] team0: Port device team_slave_1 added
02:38:36 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x2}, 0x20)

[   84.624072][ T7242] device hsr_slave_0 entered promiscuous mode
[   84.661384][ T7242] device hsr_slave_1 entered promiscuous mode
[   84.760738][ T7245] chnl_net:caif_netlink_parms(): no params data found
[   84.779128][ T7242] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.786343][ T7242] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.793783][ T7242] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.801052][ T7242] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.833428][ T7248] IPVS: ftp: loaded support on port[0] = 21
[   84.885168][ T7245] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.892764][ T7245] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.900598][ T7245] device bridge_slave_0 entered promiscuous mode
[   84.909012][ T7245] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.916650][ T7245] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.924996][ T7245] device bridge_slave_1 entered promiscuous mode
[   84.950786][ T7245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.963368][ T7245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
02:38:37 executing program 3:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {0xffffffffffffffff, 0x0, 0xffffffff}]})
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="bcef6376150001000004000010006b2fe0cc7ba626ab55a14f42ff858272a3203611c611eb"], 0x25)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[   84.995298][ T7242] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.046714][ T7242] 8021q: adding VLAN 0 to HW filter on device team0
[   85.070072][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   85.082151][ T3008] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.113756][ T3008] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.135168][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   85.157764][ T7245] team0: Port device team_slave_0 added
[   85.172849][ T7245] team0: Port device team_slave_1 added
[   85.205074][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   85.221511][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.228656][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.251905][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   85.260468][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.268152][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.317293][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   85.342915][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   85.352119][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
02:38:37 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0)
write$P9_RSTATu(r1, &(0x7f0000000400)={0x119, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodevselfwmd5sum[vboxnet0ppp0%', 0x17, 'ppp1procvmnet1\xdd)wlan0+]', 0x91, 'cgroupppp1(\\\x18?\x82u\x1a\xac\xf2\xde\x8c\xca%`\xc6\xfb0.%\x90>\xc3Kd}D!\v%\xbf\xc2\r\xc5\xe8\xa0*-\xf8[R\xf4m\x93F\xb7\xaf\x13\x00\xe8\xb5}\xb4P\x87\xc0n\xed\xb2\xcd\x84H\xb0h(\x01\xbf\xf8\xc8\xfa\xe1\xa1\x85@\xac2X\xe40\'TJ\x83\xb3\xf2\xc8\x12f65f\x04D\xfc\xfc\xb2}\xe5\xbf\xe6\x91k\x8f\x82\x91r\xc0\xcc\b\xff\xdf\xda\xcc7\xa4n@O3\xbd\xb1AE\xa1\xd6!\x8d\x17\x8b\xa3\xb3\xf0\xbd\xb7UH'}, 0x0, '\xa7\x8b\x90\xca'}}, 0x119)

[   85.361136][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   85.382925][ T7242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   85.414176][ T7242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   85.447297][ T7253] IPVS: ftp: loaded support on port[0] = 21
[   85.460152][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   85.483570][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   85.594058][ T7245] device hsr_slave_0 entered promiscuous mode
02:38:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xc}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8}]}}]}, 0x60}}, 0x0)

[   85.642855][ T7245] device hsr_slave_1 entered promiscuous mode
[   85.731150][ T7245] debugfs: Directory 'hsr0' with parent '/' already present!
[   85.757872][ T7248] chnl_net:caif_netlink_parms(): no params data found
[   85.784025][ T7257] IPVS: ftp: loaded support on port[0] = 21
[   85.864948][ T7242] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.897067][ T7259] IPVS: ftp: loaded support on port[0] = 21
[   85.939634][ T7248] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.947364][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.955849][ T7248] device bridge_slave_0 entered promiscuous mode
[   85.992060][ T7248] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.999140][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.007325][ T7248] device bridge_slave_1 entered promiscuous mode
[   86.022219][ T7253] chnl_net:caif_netlink_parms(): no params data found
[   86.050264][ T7248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.061658][ T7248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.109625][ T7245] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.126329][ T7248] team0: Port device team_slave_0 added
[   86.136365][ T7248] team0: Port device team_slave_1 added
[   86.149735][ T7245] 8021q: adding VLAN 0 to HW filter on device team0
[   86.181982][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.189147][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.214041][ T7253] device bridge_slave_0 entered promiscuous mode
[   86.222261][ T7253] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.229313][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.237746][ T7253] device bridge_slave_1 entered promiscuous mode
[   86.248370][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   86.252482][    C1] hrtimer: interrupt took 30261 ns
[   86.260075][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
02:38:38 executing program 0:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

[   86.334657][ T7248] device hsr_slave_0 entered promiscuous mode
[   86.381418][ T7248] device hsr_slave_1 entered promiscuous mode
[   86.432225][ T7248] debugfs: Directory 'hsr0' with parent '/' already present!
02:38:38 executing program 0:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

[   86.481696][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   86.490551][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   86.500107][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.507222][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.535722][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   86.551775][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   86.560226][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.567601][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state
02:38:38 executing program 0:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

[   86.593082][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   86.639994][ T7253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.694093][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   86.712787][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   86.722779][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   86.732142][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
02:38:38 executing program 0:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

[   86.744738][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   86.753763][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   86.793482][ T7253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.809572][ T7245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   86.820802][ T7245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.840432][ T7257] chnl_net:caif_netlink_parms(): no params data found
[   86.856098][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   86.864802][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   86.882725][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   86.892060][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   86.900748][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   86.913200][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
02:38:39 executing program 0:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

[   86.982255][ T7245] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.005718][ T7248] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.025173][ T7253] team0: Port device team_slave_0 added
[   87.048632][ T7259] chnl_net:caif_netlink_parms(): no params data found
[   87.073541][ T7248] 8021q: adding VLAN 0 to HW filter on device team0
[   87.087743][ T7253] team0: Port device team_slave_1 added
[   87.094668][ T7257] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.106141][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.126386][ T7257] device bridge_slave_0 entered promiscuous mode
[   87.138965][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
02:38:39 executing program 0:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

[   87.165573][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   87.206304][ T7257] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.218688][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.227276][ T7257] device bridge_slave_1 entered promiscuous mode
[   87.262704][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   87.276730][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   87.290837][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.297958][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
02:38:39 executing program 0:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

[   87.341838][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   87.350584][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   87.367993][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.375165][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.424216][ T7253] device hsr_slave_0 entered promiscuous mode
[   87.461603][ T7253] device hsr_slave_1 entered promiscuous mode
[   87.514178][ T7253] debugfs: Directory 'hsr0' with parent '/' already present!
[   87.536771][ T7257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.551428][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   87.564428][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.595945][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   87.607180][ T7301] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   87.629672][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   87.638908][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   87.652715][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   87.665828][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   87.678196][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   87.739131][ T7257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.773604][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   87.784859][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   87.794413][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.801829][ T7259] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.811654][ T7259] device bridge_slave_0 entered promiscuous mode
[   87.820826][ T7257] team0: Port device team_slave_0 added
02:38:39 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x66b48f5e9d22e1bb}})
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000700)={0x0, 0xb23, "7d96409ebe420c59a3b018bfc8a683cc67ddcc26b1abb9769783a9169c39adb38affa8570524f6c8e0c1d92f1858f05f131eae14e2c222f201f39b3fa229da12f4a713e527c64be00e58b91010969f57805601161aa0b0b5a8c5fbff8f13feeb82158da76cf26434d567da23cf282d9f3d8452da5ddfa75bd9aec0c332acfdf965f98ef2737dfe2cf5c886a86a60e0e0a80d378a9751b3baaeb88d2d27a3f85163d182ba119442c0dbe14abe3f8388287b617d402134e9c8b102300f3698f281d990257ee78f7c7247a7d9ec57d5d48ae5d1f4ab793ac18ff7713054791227902e06e0c36318e2f58f61e865f491ccfa950baf1cf37865f5f3fe45cdbc453e66df970b7eff649552f01d5d729d014a1d781c6f566045a395ec9a9d8599d9b4253061ca38a65351916a3efb7e2e1ef80436b1d0f5d2cbde00975a04dc1f5efa3396606689e4123b1672ce74c2800aff5b03123aad6337c7429c1c03aaa1fed83e3a4eedd3def3a3dbaa1770bdfd8e28da43b94eb56cca7f886aefa9ea28ba5e3927f4edb92bbed2398407052cd9f2780ac10e01892c1a24fdbf918703cb2df78d087a4d2cf404b784672bfe772523cd028b71dd4a7a5830edd479aa17046201275e1a7bfee0bd5b89680343e67b3a8259423fd659091df11fe3a775ea56f3a360b2b48b38b776cbeb987e855d0a0ecf9b2a6f99eb88ce6d171f8754b3e5b60c1fba7884232b0629ed0548bfdbc3735ea1ab26e098246c3b40cb748404ea5763f95d3a7dccbe7ea8e068ff45c9c8bb4e62f0ba65ac48b25ef1ecee1ebab9cf0b1818a61a4c2b30dc985a5544326261813474ccda39ad4c8b68f56898bb51167b7df143b0f8ef6f906bf2b4dbcb5125ca401b07749e7e986a3a5f532d0cf7ab41b3d9ec1053da6393604a431ec24319197158d609d07c4db0d42d2046a855b3056cb1d4f3284f77fa335678a2979a6b8477e30a9068cda5ba5f49622b8e8b230e4f171818493cde8c0554af9c7a3f31023facb1f5d8de8819353728c776937834e853d0324ad70849e7e86a50df4b37d34c6ee93e23896a307aa425abad00025f336dad2aab80cb8f48f96a4594366edf878037b9a65715cfdbf03658f574b6f43731d0a4c827a0df83e8a461dbdabfe149cb51e6f7077f0e9f529854bedcef4b7c68d07dc9c42ba7ed52d553124c86c9a123c7c20dc49026cf969f230178a0c861cb804bd99d439e7b8652db36bd9c34f49a619a103e93057d058f3a74a4054afba1e6401bf2d029d4795ad25c2befaf7865aae1e31fb8632abb4e203e213d4cb0d2be5feee2b86422a3a1e2c6b3550f087feb81575f17b9964f5923439573a9bfc5d1dd6f5b70816477ba20281cb4fd510866ce8513bb67f7f4fe99c4349e6b29349a6b2096b1c19e3c3d54a0680b82f5f6545a5e64fc0509796f6e1b0c42c4dcc6bb16332840ee97a5a39dd0d0cd04eaa44af7a403b0b864c2a3814af638963ea2fb359a63b39e37df331cd330f70f3777082aade519bfc32b5d8fb7ce7e1f94fe56899d6dd36ba61dd7f55eccab8b76ec02bb06973143c775a78939c958a5831aa7ebee14ee7d2b18567ae774d6417388ac186f46d9836af00a57c58d2196912f172e588fe6736d7d4a590230f3673bb6079288cd51c116c397158b2b3708c81e80f60c13fc50bd80ff81839fa372c17cadf80c3a6e21598b3b5c34dc2fd3004c30e471c6f082ac4b2a24746860b3c4c63a705c07c6abe0b8a5c717d35e68d73d19b9a8e8a61cb13b13c0dcdd4d10c4ff3d6ae76d4685eebe83e6aa546e7834c9ea7ca9d55e305b811b07088691b9a8e75723e3d9e2a038fad13129f4df1d1c03bd94348390b50c135f1ec07cf87842ef97d314227de9d65fa6a9af4b64df6208a95202b62f00a72d7c3ddaefa2ca8d7e3c7a13089d4d10ccc985f6612cdef82317ad3cd1277a3c31ba3bc0a7a9e026bbd44d4303e3c96e61704bef9d690e73432c75400f255d6c0f51e531846f6b61e3150e35d89e85c506d10935f27c70d00c33d057b3753f14ec16aa6212f4d82b8fe18ebb9d3acce75ca400fa2468043e41c7869550d9eaa7ab66711ad110236d62e6402204cc6d883c859fc97ab35c55ab0655622d319b243b8a01f20783d6cd811ffcd8614cd1d7005b51e21a2afde2835f2b4da0d269288fa14999006377f7204b41dcc08ff580b5a55e9c7c30507f79c4c77f545a4717f21af94eddf1302682d143a7f0ea87aa0aad23525ee722acdd5ab869c5e41b2513b44712bbce59d5b66208b6febb387a179b974a1cb37f91499570a253f735f3b36a9956c4651783431bbbb0ec8a8b3de0b20431f93de78321f16eb1f6a21ba8a17d437be6aca0857b6dda5b59cfe888c99e09b4afa40469b86db37b084444a39dfb30d5e17df35dd2c83a6889f63db4bb754f73bbb778f3d27bcfa2a91b65e43dd78b75d066db8deb5a37cc6fd343dab2032bfe3c67a25284903fd009783aead39588d0bce2ef125c3e8f22b4ee475ebb51162d290f4bf54d782c10d4b20a52d681def1858dec7a907b6b65bbc22bf463ecd526c9d364c32704bc08cc433c40abd91ac7fd2ff417b9e921cf45ff3bffbcb932cdac45c96e3f3c7a2c4e0c9cc2bdcb8a01a06eac22e9474226b04ad2d9a9f95e9b80330223bf330bdd152f17ba951ea41edbd65c66e86c784984f33030c4e5938d35e1821a41d74f3e40a1979e9cfe73802a7280d61af505912ee0787a4e4b2d8fe0c50fa92fcd70908a5a7716040678f8577a3182a63280bc195654116c23f29102bf7617747f040c8f04336e6ff636f71d9bde33c720bed3867289c75489c628dedfd91fb9609a46f2cc40532c9734af6ea7c9856893c6176e8e3e40bcdccb7a4c2cb2fb462d954298f303337466b32821023adbd7db33c94aa19967f6d77b02598acb2e421611bc3fa669d75ad407a637ec40c6aa6827c1d43acc78c64aa2957b5985a01d0e4c4f00e123778abeac395082124a8d3c14dc781fe49c1d0faea52c9e512f811595e3f81a72627bf2935efff72a236e0010cc6d0aafcc60f3bb204e2b55d62bafeccca4cc0b224bbd33707f660704ec847f3f29c74ba24cc051d2684c1e5d31d35fca7549068c2e965de85d399bc60b37846e4cc3d48fb19c5094acd60b7a1716d4d4b34f49087b0679b6f71943b9322f30f0961a41142173282f34041e002436d1b575a11b2a459805acd57f65548d94bbf416db5509f1364ce453721081f31c0fcf5cb331dc3cecb2acf83f8984c480951f39d5a8bea9c4da6ee099f50d56a77edce4b085d73e814c4c693517b78879e3819083811bda86d3430ed93fc557e93831390e25a00e4e1b5f776a6ce2deac31013d473fdfc8a1ebd6489c7860c2ba4ce98e8372ba1dfc0033321818e1abed7a50a5240ed64f50185c3164ba52282a09dc10a94b5aa57bbbb95043420fc04c7e32cbdfccc8dc7d8be0b649d4464067b0cd4cc58a086dd6c2f140146e08a574f910144823af868d31dd1b605d5bf91715999e637e69ad56bb2c6a093cf3e7906059c7e47f0dee0e94af9779338491826e70922db9dd1395f452a1b4db39f529c70095ed1c6a757227e572e4289522fd25464f8df15910692fa45e85f4b6b473d82925b0c49eff2e7eb56b6e56fe04c88d25236d4417b4dfbbf70abecdbd2e147a054f6d77da6004aa2b2c4254d11823c0d64dd0d6aeb30f3641ead75fa8581e01a7bf784fe17dd9c8678c2966b21074efc9f4417bb4457bc90dd883774f3cf683978a27ea689299ff5abefe465bf8bda9baf70efb69ab57f75049722b65ba50ebdd17dd2211a548103612d5e3601e0c9b7f13ef56568689b6db63c9936282554329ed3061a8181c7cee8f9244f01d3a57f12a87ab9ea119ec31d44683cb5c09e382a44d2fde5d69760a58c0df67a3d35d0426d306cbcb227f14159e7e200910c29838ddd0059d64675d9fc0120d0c55f43d4a9b794b00d35b851f0daa33cca66c710a231ca3f661fedc7a69000ccd8947"})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}, 0x0, 0x0, 0x101, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, &(0x7f00000006c0))
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000300)=0x7, 0x4)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndpcmc(0x0, 0xffffffffffffdb78, 0x0)

[   87.832692][ T7248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   87.845713][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   87.870479][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.887711][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.911970][ T7259] device bridge_slave_1 entered promiscuous mode
[   87.923512][ T7257] team0: Port device team_slave_1 added
[   87.931235][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   87.939832][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   87.976314][ T7259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.988167][ T7259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.043944][ T7248] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.059939][ T7308] kvm: emulating exchange as write
[   88.124045][ T7257] device hsr_slave_0 entered promiscuous mode
[   88.171420][ T7257] device hsr_slave_1 entered promiscuous mode
[   88.231101][ T7257] debugfs: Directory 'hsr0' with parent '/' already present!
[   88.247024][ T7259] team0: Port device team_slave_0 added
[   88.254627][ T7259] team0: Port device team_slave_1 added
[   88.323783][ T7259] device hsr_slave_0 entered promiscuous mode
[   88.361963][ T7259] device hsr_slave_1 entered promiscuous mode
[   88.411105][ T7259] debugfs: Directory 'hsr0' with parent '/' already present!
[   88.447716][ T7253] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.458041][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.465154][ T7259] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.472778][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.479812][ T7259] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.505779][ T7253] 8021q: adding VLAN 0 to HW filter on device team0
[   88.534954][    T5] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.552229][    T5] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.571854][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.579631][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.614263][ T7257] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.624011][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   88.633646][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   88.642302][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.649738][ T7255] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.657823][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   88.666813][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   88.675698][ T7255] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.682857][ T7255] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.691064][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
02:38:40 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x2}, 0x20)

[   88.709149][ T7253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   88.725209][ T7253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.740276][ T7259] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.754923][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   88.766139][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   88.789873][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   88.811468][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   88.820411][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   88.829892][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   88.838775][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   88.847544][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.856652][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.865293][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.886366][ T7257] 8021q: adding VLAN 0 to HW filter on device team0
[   88.894328][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   88.903491][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   88.911987][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.919953][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.928332][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.936666][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.947759][ T7253] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.973833][ T7259] 8021q: adding VLAN 0 to HW filter on device team0
[   88.993769][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   89.017012][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   89.030088][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.037432][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.046358][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   89.055423][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   89.064734][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.071894][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.080263][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   89.089835][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   89.098895][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   89.108476][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.115734][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.133252][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   89.144568][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   89.154482][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   89.163927][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   89.173049][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.180374][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.189099][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   89.197921][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   89.207175][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   89.216608][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   89.225338][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   89.234775][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   89.244962][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   89.259938][ T7259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   89.272248][ T7259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.285018][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   89.299543][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   89.308796][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   89.318167][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   89.327309][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   89.335847][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   89.344652][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   89.353452][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   89.362408][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   89.370643][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   89.387910][ T7257] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   89.398782][ T7257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.417478][ T7259] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.426676][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   89.442122][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   89.455896][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   89.472063][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   89.496912][ T7257] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.514255][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   89.824052][ T7348] sch_fq: defrate 0 ignored.
02:38:42 executing program 3:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {0xffffffffffffffff, 0x0, 0xffffffff}]})
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="bcef6376150001000004000010006b2fe0cc7ba626ab55a14f42ff858272a3203611c611eb"], 0x25)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

02:38:42 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x66b48f5e9d22e1bb}})
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000700)={0x0, 0xb23, "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"})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}, 0x0, 0x0, 0x101, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, &(0x7f00000006c0))
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000300)=0x7, 0x4)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndpcmc(0x0, 0xffffffffffffdb78, 0x0)

02:38:42 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x2}, 0x20)

02:38:42 executing program 0:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

02:38:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xc}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8}]}}]}, 0x60}}, 0x0)

02:38:42 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0)
write$P9_RSTATu(r1, &(0x7f0000000400)={0x119, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodevselfwmd5sum[vboxnet0ppp0%', 0x17, 'ppp1procvmnet1\xdd)wlan0+]', 0x91, 'cgroupppp1(\\\x18?\x82u\x1a\xac\xf2\xde\x8c\xca%`\xc6\xfb0.%\x90>\xc3Kd}D!\v%\xbf\xc2\r\xc5\xe8\xa0*-\xf8[R\xf4m\x93F\xb7\xaf\x13\x00\xe8\xb5}\xb4P\x87\xc0n\xed\xb2\xcd\x84H\xb0h(\x01\xbf\xf8\xc8\xfa\xe1\xa1\x85@\xac2X\xe40\'TJ\x83\xb3\xf2\xc8\x12f65f\x04D\xfc\xfc\xb2}\xe5\xbf\xe6\x91k\x8f\x82\x91r\xc0\xcc\b\xff\xdf\xda\xcc7\xa4n@O3\xbd\xb1AE\xa1\xd6!\x8d\x17\x8b\xa3\xb3\xf0\xbd\xb7UH'}, 0x0, '\xa7\x8b\x90\xca'}}, 0x119)

[   90.451124][ T7361] sch_fq: defrate 0 ignored.
02:38:42 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x2}, 0x20)

02:38:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xc}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8}]}}]}, 0x60}}, 0x0)

02:38:42 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0)
write$P9_RSTATu(r1, &(0x7f0000000400)={0x119, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodevselfwmd5sum[vboxnet0ppp0%', 0x17, 'ppp1procvmnet1\xdd)wlan0+]', 0x91, 'cgroupppp1(\\\x18?\x82u\x1a\xac\xf2\xde\x8c\xca%`\xc6\xfb0.%\x90>\xc3Kd}D!\v%\xbf\xc2\r\xc5\xe8\xa0*-\xf8[R\xf4m\x93F\xb7\xaf\x13\x00\xe8\xb5}\xb4P\x87\xc0n\xed\xb2\xcd\x84H\xb0h(\x01\xbf\xf8\xc8\xfa\xe1\xa1\x85@\xac2X\xe40\'TJ\x83\xb3\xf2\xc8\x12f65f\x04D\xfc\xfc\xb2}\xe5\xbf\xe6\x91k\x8f\x82\x91r\xc0\xcc\b\xff\xdf\xda\xcc7\xa4n@O3\xbd\xb1AE\xa1\xd6!\x8d\x17\x8b\xa3\xb3\xf0\xbd\xb7UH'}, 0x0, '\xa7\x8b\x90\xca'}}, 0x119)

02:38:42 executing program 0:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

[   90.861949][ T7378] sch_fq: defrate 0 ignored.
[   90.994622][ T7369] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500)
02:38:43 executing program 2:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {0xffffffffffffffff, 0x0, 0xffffffff}]})
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="bcef6376150001000004000010006b2fe0cc7ba626ab55a14f42ff858272a3203611c611eb"], 0x25)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[   91.040154][ T7369] FAT-fs (loop3): Filesystem has been set read-only
[   91.056682][ T7369] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500)
02:38:43 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0)
write$P9_RSTATu(r1, &(0x7f0000000400)={0x119, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodevselfwmd5sum[vboxnet0ppp0%', 0x17, 'ppp1procvmnet1\xdd)wlan0+]', 0x91, 'cgroupppp1(\\\x18?\x82u\x1a\xac\xf2\xde\x8c\xca%`\xc6\xfb0.%\x90>\xc3Kd}D!\v%\xbf\xc2\r\xc5\xe8\xa0*-\xf8[R\xf4m\x93F\xb7\xaf\x13\x00\xe8\xb5}\xb4P\x87\xc0n\xed\xb2\xcd\x84H\xb0h(\x01\xbf\xf8\xc8\xfa\xe1\xa1\x85@\xac2X\xe40\'TJ\x83\xb3\xf2\xc8\x12f65f\x04D\xfc\xfc\xb2}\xe5\xbf\xe6\x91k\x8f\x82\x91r\xc0\xcc\b\xff\xdf\xda\xcc7\xa4n@O3\xbd\xb1AE\xa1\xd6!\x8d\x17\x8b\xa3\xb3\xf0\xbd\xb7UH'}, 0x0, '\xa7\x8b\x90\xca'}}, 0x119)

02:38:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x66b48f5e9d22e1bb}})
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000700)={0x0, 0xb23, "7d96409ebe420c59a3b018bfc8a683cc67ddcc26b1abb9769783a9169c39adb38affa8570524f6c8e0c1d92f1858f05f131eae14e2c222f201f39b3fa229da12f4a713e527c64be00e58b91010969f57805601161aa0b0b5a8c5fbff8f13feeb82158da76cf26434d567da23cf282d9f3d8452da5ddfa75bd9aec0c332acfdf965f98ef2737dfe2cf5c886a86a60e0e0a80d378a9751b3baaeb88d2d27a3f85163d182ba119442c0dbe14abe3f8388287b617d402134e9c8b102300f3698f281d990257ee78f7c7247a7d9ec57d5d48ae5d1f4ab793ac18ff7713054791227902e06e0c36318e2f58f61e865f491ccfa950baf1cf37865f5f3fe45cdbc453e66df970b7eff649552f01d5d729d014a1d781c6f566045a395ec9a9d8599d9b4253061ca38a65351916a3efb7e2e1ef80436b1d0f5d2cbde00975a04dc1f5efa3396606689e4123b1672ce74c2800aff5b03123aad6337c7429c1c03aaa1fed83e3a4eedd3def3a3dbaa1770bdfd8e28da43b94eb56cca7f886aefa9ea28ba5e3927f4edb92bbed2398407052cd9f2780ac10e01892c1a24fdbf918703cb2df78d087a4d2cf404b784672bfe772523cd028b71dd4a7a5830edd479aa17046201275e1a7bfee0bd5b89680343e67b3a8259423fd659091df11fe3a775ea56f3a360b2b48b38b776cbeb987e855d0a0ecf9b2a6f99eb88ce6d171f8754b3e5b60c1fba7884232b0629ed0548bfdbc3735ea1ab26e098246c3b40cb748404ea5763f95d3a7dccbe7ea8e068ff45c9c8bb4e62f0ba65ac48b25ef1ecee1ebab9cf0b1818a61a4c2b30dc985a5544326261813474ccda39ad4c8b68f56898bb51167b7df143b0f8ef6f906bf2b4dbcb5125ca401b07749e7e986a3a5f532d0cf7ab41b3d9ec1053da6393604a431ec24319197158d609d07c4db0d42d2046a855b3056cb1d4f3284f77fa335678a2979a6b8477e30a9068cda5ba5f49622b8e8b230e4f171818493cde8c0554af9c7a3f31023facb1f5d8de8819353728c776937834e853d0324ad70849e7e86a50df4b37d34c6ee93e23896a307aa425abad00025f336dad2aab80cb8f48f96a4594366edf878037b9a65715cfdbf03658f574b6f43731d0a4c827a0df83e8a461dbdabfe149cb51e6f7077f0e9f529854bedcef4b7c68d07dc9c42ba7ed52d553124c86c9a123c7c20dc49026cf969f230178a0c861cb804bd99d439e7b8652db36bd9c34f49a619a103e93057d058f3a74a4054afba1e6401bf2d029d4795ad25c2befaf7865aae1e31fb8632abb4e203e213d4cb0d2be5feee2b86422a3a1e2c6b3550f087feb81575f17b9964f5923439573a9bfc5d1dd6f5b70816477ba20281cb4fd510866ce8513bb67f7f4fe99c4349e6b29349a6b2096b1c19e3c3d54a0680b82f5f6545a5e64fc0509796f6e1b0c42c4dcc6bb16332840ee97a5a39dd0d0cd04eaa44af7a403b0b864c2a3814af638963ea2fb359a63b39e37df331cd330f70f3777082aade519bfc32b5d8fb7ce7e1f94fe56899d6dd36ba61dd7f55eccab8b76ec02bb06973143c775a78939c958a5831aa7ebee14ee7d2b18567ae774d6417388ac186f46d9836af00a57c58d2196912f172e588fe6736d7d4a590230f3673bb6079288cd51c116c397158b2b3708c81e80f60c13fc50bd80ff81839fa372c17cadf80c3a6e21598b3b5c34dc2fd3004c30e471c6f082ac4b2a24746860b3c4c63a705c07c6abe0b8a5c717d35e68d73d19b9a8e8a61cb13b13c0dcdd4d10c4ff3d6ae76d4685eebe83e6aa546e7834c9ea7ca9d55e305b811b07088691b9a8e75723e3d9e2a038fad13129f4df1d1c03bd94348390b50c135f1ec07cf87842ef97d314227de9d65fa6a9af4b64df6208a95202b62f00a72d7c3ddaefa2ca8d7e3c7a13089d4d10ccc985f6612cdef82317ad3cd1277a3c31ba3bc0a7a9e026bbd44d4303e3c96e61704bef9d690e73432c75400f255d6c0f51e531846f6b61e3150e35d89e85c506d10935f27c70d00c33d057b3753f14ec16aa6212f4d82b8fe18ebb9d3acce75ca400fa2468043e41c7869550d9eaa7ab66711ad110236d62e6402204cc6d883c859fc97ab35c55ab0655622d319b243b8a01f20783d6cd811ffcd8614cd1d7005b51e21a2afde2835f2b4da0d269288fa14999006377f7204b41dcc08ff580b5a55e9c7c30507f79c4c77f545a4717f21af94eddf1302682d143a7f0ea87aa0aad23525ee722acdd5ab869c5e41b2513b44712bbce59d5b66208b6febb387a179b974a1cb37f91499570a253f735f3b36a9956c4651783431bbbb0ec8a8b3de0b20431f93de78321f16eb1f6a21ba8a17d437be6aca0857b6dda5b59cfe888c99e09b4afa40469b86db37b084444a39dfb30d5e17df35dd2c83a6889f63db4bb754f73bbb778f3d27bcfa2a91b65e43dd78b75d066db8deb5a37cc6fd343dab2032bfe3c67a25284903fd009783aead39588d0bce2ef125c3e8f22b4ee475ebb51162d290f4bf54d782c10d4b20a52d681def1858dec7a907b6b65bbc22bf463ecd526c9d364c32704bc08cc433c40abd91ac7fd2ff417b9e921cf45ff3bffbcb932cdac45c96e3f3c7a2c4e0c9cc2bdcb8a01a06eac22e9474226b04ad2d9a9f95e9b80330223bf330bdd152f17ba951ea41edbd65c66e86c784984f33030c4e5938d35e1821a41d74f3e40a1979e9cfe73802a7280d61af505912ee0787a4e4b2d8fe0c50fa92fcd70908a5a7716040678f8577a3182a63280bc195654116c23f29102bf7617747f040c8f04336e6ff636f71d9bde33c720bed3867289c75489c628dedfd91fb9609a46f2cc40532c9734af6ea7c9856893c6176e8e3e40bcdccb7a4c2cb2fb462d954298f303337466b32821023adbd7db33c94aa19967f6d77b02598acb2e421611bc3fa669d75ad407a637ec40c6aa6827c1d43acc78c64aa2957b5985a01d0e4c4f00e123778abeac395082124a8d3c14dc781fe49c1d0faea52c9e512f811595e3f81a72627bf2935efff72a236e0010cc6d0aafcc60f3bb204e2b55d62bafeccca4cc0b224bbd33707f660704ec847f3f29c74ba24cc051d2684c1e5d31d35fca7549068c2e965de85d399bc60b37846e4cc3d48fb19c5094acd60b7a1716d4d4b34f49087b0679b6f71943b9322f30f0961a41142173282f34041e002436d1b575a11b2a459805acd57f65548d94bbf416db5509f1364ce453721081f31c0fcf5cb331dc3cecb2acf83f8984c480951f39d5a8bea9c4da6ee099f50d56a77edce4b085d73e814c4c693517b78879e3819083811bda86d3430ed93fc557e93831390e25a00e4e1b5f776a6ce2deac31013d473fdfc8a1ebd6489c7860c2ba4ce98e8372ba1dfc0033321818e1abed7a50a5240ed64f50185c3164ba52282a09dc10a94b5aa57bbbb95043420fc04c7e32cbdfccc8dc7d8be0b649d4464067b0cd4cc58a086dd6c2f140146e08a574f910144823af868d31dd1b605d5bf91715999e637e69ad56bb2c6a093cf3e7906059c7e47f0dee0e94af9779338491826e70922db9dd1395f452a1b4db39f529c70095ed1c6a757227e572e4289522fd25464f8df15910692fa45e85f4b6b473d82925b0c49eff2e7eb56b6e56fe04c88d25236d4417b4dfbbf70abecdbd2e147a054f6d77da6004aa2b2c4254d11823c0d64dd0d6aeb30f3641ead75fa8581e01a7bf784fe17dd9c8678c2966b21074efc9f4417bb4457bc90dd883774f3cf683978a27ea689299ff5abefe465bf8bda9baf70efb69ab57f75049722b65ba50ebdd17dd2211a548103612d5e3601e0c9b7f13ef56568689b6db63c9936282554329ed3061a8181c7cee8f9244f01d3a57f12a87ab9ea119ec31d44683cb5c09e382a44d2fde5d69760a58c0df67a3d35d0426d306cbcb227f14159e7e200910c29838ddd0059d64675d9fc0120d0c55f43d4a9b794b00d35b851f0daa33cca66c710a231ca3f661fedc7a69000ccd8947"})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}, 0x0, 0x0, 0x101, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, &(0x7f00000006c0))
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000300)=0x7, 0x4)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndpcmc(0x0, 0xffffffffffffdb78, 0x0)

02:38:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xc}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8}]}}]}, 0x60}}, 0x0)

02:38:43 executing program 3:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {0xffffffffffffffff, 0x0, 0xffffffff}]})
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="bcef6376150001000004000010006b2fe0cc7ba626ab55a14f42ff858272a3203611c611eb"], 0x25)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

[   91.402754][ T7404] sch_fq: defrate 0 ignored.
02:38:43 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {0xffffffffffffffff, 0x0, 0xffffffff}]})
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="bcef6376150001000004000010006b2fe0cc7ba626ab55a14f42ff858272a3203611c611eb"], 0x25)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

02:38:43 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {0xffffffffffffffff, 0x0, 0xffffffff}]})
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="bcef6376150001000004000010006b2fe0cc7ba626ab55a14f42ff858272a3203611c611eb"], 0x25)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

02:38:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x66b48f5e9d22e1bb}})
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000700)={0x0, 0xb23, "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"})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}, 0x0, 0x0, 0x101, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, &(0x7f00000006c0))
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000300)=0x7, 0x4)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndpcmc(0x0, 0xffffffffffffdb78, 0x0)

02:38:43 executing program 1:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

02:38:44 executing program 2:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {0xffffffffffffffff, 0x0, 0xffffffff}]})
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="bcef6376150001000004000010006b2fe0cc7ba626ab55a14f42ff858272a3203611c611eb"], 0x25)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

02:38:44 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {0xffffffffffffffff, 0x0, 0xffffffff}]})
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="bcef6376150001000004000010006b2fe0cc7ba626ab55a14f42ff858272a3203611c611eb"], 0x25)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

02:38:44 executing program 1:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

02:38:44 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {0xffffffffffffffff, 0x0, 0xffffffff}]})
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="bcef6376150001000004000010006b2fe0cc7ba626ab55a14f42ff858272a3203611c611eb"], 0x25)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

02:38:44 executing program 3:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {0xffffffffffffffff, 0x0, 0xffffffff}]})
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="bcef6376150001000004000010006b2fe0cc7ba626ab55a14f42ff858272a3203611c611eb"], 0x25)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

02:38:45 executing program 1:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

02:38:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x66b48f5e9d22e1bb}})
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000700)={0x0, 0xb23, "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"})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}, 0x0, 0x0, 0x101, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, &(0x7f00000006c0))
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000300)=0x7, 0x4)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndpcmc(0x0, 0xffffffffffffdb78, 0x0)

[   93.159525][ T7446] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500)
[   93.219777][ T7446] FAT-fs (loop0): Filesystem has been set read-only
[   93.313861][ T7446] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500)
02:38:45 executing program 1:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

02:38:45 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {0xffffffffffffffff, 0x0, 0xffffffff}]})
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="bcef6376150001000004000010006b2fe0cc7ba626ab55a14f42ff858272a3203611c611eb"], 0x25)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

02:38:45 executing program 2:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {0xffffffffffffffff, 0x0, 0xffffffff}]})
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="bcef6376150001000004000010006b2fe0cc7ba626ab55a14f42ff858272a3203611c611eb"], 0x25)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

02:38:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x66b48f5e9d22e1bb}})
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000700)={0x0, 0xb23, "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"})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}, 0x0, 0x0, 0x101, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, &(0x7f00000006c0))
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000300)=0x7, 0x4)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndpcmc(0x0, 0xffffffffffffdb78, 0x0)

02:38:46 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, 0x0, [{}, {0xffffffffffffffff, 0x0, 0xffffffff}]})
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="bcef6376150001000004000010006b2fe0cc7ba626ab55a14f42ff858272a3203611c611eb"], 0x25)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

02:38:46 executing program 3:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

02:38:46 executing program 1:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

02:38:47 executing program 1:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

02:38:47 executing program 3:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

02:38:47 executing program 5:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

02:38:47 executing program 0:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

02:38:47 executing program 2:
io_setup(0x4, &(0x7f0000000000))
socket$inet(0x2b, 0x1, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0xa64, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x9e23aaef0cd38919)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000900)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x1)
r2 = getpgrp(0x0)
setpriority(0x0, r2, 0xffff)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff, 0x4}}}, 0x90)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000640)='proc\x00', &(0x7f0000000740)='!\x00'])

02:38:47 executing program 3:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

02:38:47 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x20, 0x4)

02:38:47 executing program 5:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

02:38:47 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5)
ioctl$KDADDIO(r0, 0x8910, 0x718000)

02:38:47 executing program 0:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

[   95.826203][ T7533] mkiss: ax0: crc mode is auto.
02:38:48 executing program 2:
io_setup(0x4, &(0x7f0000000000))
socket$inet(0x2b, 0x1, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0xa64, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x9e23aaef0cd38919)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000900)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x1)
r2 = getpgrp(0x0)
setpriority(0x0, r2, 0xffff)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff, 0x4}}}, 0x90)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000640)='proc\x00', &(0x7f0000000740)='!\x00'])

[   95.944778][ T7533] mkiss: ax0: crc mode is auto.
02:38:48 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x20, 0x4)

02:38:48 executing program 3:
io_setup(0x4, &(0x7f0000000000))
socket$inet(0x2b, 0x1, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0xa64, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x9e23aaef0cd38919)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000900)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x1)
r2 = getpgrp(0x0)
setpriority(0x0, r2, 0xffff)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff, 0x4}}}, 0x90)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000640)='proc\x00', &(0x7f0000000740)='!\x00'])

02:38:48 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5)
ioctl$KDADDIO(r0, 0x8910, 0x718000)

02:38:48 executing program 5:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

02:38:48 executing program 0:
syz_open_procfs(0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0xa152}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x0, 0x37, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c71045", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'})

02:38:48 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x20, 0x4)

[   96.682512][ T7583] mkiss: ax0: crc mode is auto.
02:38:49 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5)
ioctl$KDADDIO(r0, 0x8910, 0x718000)

02:38:49 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5)
ioctl$KDADDIO(r0, 0x8910, 0x718000)

02:38:49 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x20, 0x4)

02:38:49 executing program 3:
io_setup(0x4, &(0x7f0000000000))
socket$inet(0x2b, 0x1, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0xa64, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x9e23aaef0cd38919)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000900)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x1)
r2 = getpgrp(0x0)
setpriority(0x0, r2, 0xffff)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff, 0x4}}}, 0x90)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000640)='proc\x00', &(0x7f0000000740)='!\x00'])

02:38:49 executing program 0:
io_setup(0x4, &(0x7f0000000000))
socket$inet(0x2b, 0x1, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0xa64, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x9e23aaef0cd38919)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000900)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x1)
r2 = getpgrp(0x0)
setpriority(0x0, r2, 0xffff)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff, 0x4}}}, 0x90)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000640)='proc\x00', &(0x7f0000000740)='!\x00'])

[   97.394680][ T7614] mkiss: ax0: crc mode is auto.
02:38:50 executing program 2:
io_setup(0x4, &(0x7f0000000000))
socket$inet(0x2b, 0x1, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0xa64, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x9e23aaef0cd38919)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000900)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x1)
r2 = getpgrp(0x0)
setpriority(0x0, r2, 0xffff)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff, 0x4}}}, 0x90)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000640)='proc\x00', &(0x7f0000000740)='!\x00'])

02:38:50 executing program 3:
io_setup(0x4, &(0x7f0000000000))
socket$inet(0x2b, 0x1, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0xa64, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x9e23aaef0cd38919)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000900)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x1)
r2 = getpgrp(0x0)
setpriority(0x0, r2, 0xffff)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff, 0x4}}}, 0x90)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000640)='proc\x00', &(0x7f0000000740)='!\x00'])

02:38:50 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5)
ioctl$KDADDIO(r0, 0x8910, 0x718000)

02:38:50 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5)
ioctl$KDADDIO(r0, 0x8910, 0x718000)

[   98.912487][ T7659] mkiss: ax1: crc mode is auto.
[   98.931705][ T7658] mkiss: ax0: crc mode is auto.
02:38:52 executing program 2:
io_setup(0x4, &(0x7f0000000000))
socket$inet(0x2b, 0x1, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0xa64, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x9e23aaef0cd38919)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000900)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x1)
r2 = getpgrp(0x0)
setpriority(0x0, r2, 0xffff)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff, 0x4}}}, 0x90)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000640)='proc\x00', &(0x7f0000000740)='!\x00'])

02:38:52 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5)
ioctl$KDADDIO(r0, 0x8910, 0x718000)

02:38:52 executing program 0:
io_setup(0x4, &(0x7f0000000000))
socket$inet(0x2b, 0x1, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0xa64, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x9e23aaef0cd38919)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000900)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x1)
r2 = getpgrp(0x0)
setpriority(0x0, r2, 0xffff)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff, 0x4}}}, 0x90)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000640)='proc\x00', &(0x7f0000000740)='!\x00'])

02:38:52 executing program 4:
io_setup(0x4, &(0x7f0000000000))
socket$inet(0x2b, 0x1, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0xa64, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x9e23aaef0cd38919)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000900)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x1)
r2 = getpgrp(0x0)
setpriority(0x0, r2, 0xffff)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff, 0x4}}}, 0x90)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000640)='proc\x00', &(0x7f0000000740)='!\x00'])

02:38:52 executing program 1:
io_setup(0x4, &(0x7f0000000000))
socket$inet(0x2b, 0x1, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0xa64, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x9e23aaef0cd38919)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000900)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x1)
r2 = getpgrp(0x0)
setpriority(0x0, r2, 0xffff)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff, 0x4}}}, 0x90)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000640)='proc\x00', &(0x7f0000000740)='!\x00'])

02:38:52 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x40045565, 0x0)

[  101.004632][ T7710] input: syz1 as /devices/virtual/input/input5
[  101.186184][ T7711] input: syz1 as /devices/virtual/input/input6
02:38:55 executing program 0:
io_setup(0x4, &(0x7f0000000000))
socket$inet(0x2b, 0x1, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0xa64, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x9e23aaef0cd38919)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000900)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x1)
r2 = getpgrp(0x0)
setpriority(0x0, r2, 0xffff)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff, 0x4}}}, 0x90)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000640)='proc\x00', &(0x7f0000000740)='!\x00'])

02:38:55 executing program 1:
io_setup(0x4, &(0x7f0000000000))
socket$inet(0x2b, 0x1, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0xa64, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x9e23aaef0cd38919)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000900)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x1)
r2 = getpgrp(0x0)
setpriority(0x0, r2, 0xffff)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff, 0x4}}}, 0x90)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000640)='proc\x00', &(0x7f0000000740)='!\x00'])

02:38:55 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000240)}, 0x10)

02:38:55 executing program 4:
io_setup(0x4, &(0x7f0000000000))
socket$inet(0x2b, 0x1, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0xa64, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x9e23aaef0cd38919)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000900)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x1)
r2 = getpgrp(0x0)
setpriority(0x0, r2, 0xffff)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff, 0x4}}}, 0x90)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000640)='proc\x00', &(0x7f0000000740)='!\x00'])

02:38:55 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x40045565, 0x0)

[  103.197097][ T7754] input: syz1 as /devices/virtual/input/input7
02:38:55 executing program 4:
io_setup(0x4, &(0x7f0000000000))
socket$inet(0x2b, 0x1, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0xa64, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x9e23aaef0cd38919)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000900)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x1)
r2 = getpgrp(0x0)
setpriority(0x0, r2, 0xffff)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff, 0x4}}}, 0x90)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000640)='proc\x00', &(0x7f0000000740)='!\x00'])

02:38:55 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x40045565, 0x0)

02:38:55 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x40045565, 0x0)

02:38:55 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000240)}, 0x10)

02:38:55 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000240)}, 0x10)

[  103.927857][ T7787] input: syz1 as /devices/virtual/input/input8
[  103.959559][ T7790] input: syz1 as /devices/virtual/input/input9
02:38:56 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000240)}, 0x10)

02:38:56 executing program 1:
io_setup(0x4, &(0x7f0000000000))
socket$inet(0x2b, 0x1, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0xa64, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x9e23aaef0cd38919)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000900)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x1)
r2 = getpgrp(0x0)
setpriority(0x0, r2, 0xffff)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff, 0x4}}}, 0x90)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000640)='proc\x00', &(0x7f0000000740)='!\x00'])

02:38:56 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000240)}, 0x10)

02:38:56 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x40045565, 0x0)

02:38:56 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x40045565, 0x0)

02:38:56 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000240)}, 0x10)

[  104.401876][ T7812] input: syz1 as /devices/virtual/input/input10
02:38:56 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000240)}, 0x10)

[  104.465392][ T7815] input: syz1 as /devices/virtual/input/input11
02:38:56 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000240)}, 0x10)

02:38:56 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x40045565, 0x0)

02:38:56 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000240)}, 0x10)

[  104.865882][ T7839] input: syz1 as /devices/virtual/input/input12
02:38:57 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000240)}, 0x10)

02:38:57 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000240)}, 0x10)

02:38:57 executing program 5:
futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0)
clock_gettime(0x0, &(0x7f0000000180))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/434], 0xd8)
write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r1 = socket(0x3, 0x4, 0x0)
r2 = getpgrp(0xffffffffffffffff)
prlimit64(r2, 0x0, &(0x7f0000000100)={0x1, 0x3}, &(0x7f0000000040))
r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/mcfilter\x00')
write$P9_RAUTH(r3, &(0x7f00000002c0)={0x14, 0x67, 0x1, {0x102, 0x0, 0x6}}, 0x14)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="2e0000002300817ee45de087185082cf0124b0eba06ec4a86e8f32e00586f9835b3f00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
bind$tipc(r3, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x3}}, 0x1ac417f0bcad037c)
clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000340)={0x3}, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x8)
r5 = getpid()
rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100))
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff)

02:38:57 executing program 3:
r0 = epoll_create1(0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000000))

02:38:57 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000240)}, 0x10)

02:38:57 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000100)="b901000000000000009e40f088481fffffe100004000638477fbac141414e9a33fa1be3e7d2a182fff", 0x0, 0x100, 0x6000000000000000}, 0x28)

[  105.170741][ T7852] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'.
[  105.337537][ T7852] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'.
02:38:57 executing program 3:
r0 = epoll_create1(0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000000))

02:38:57 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000240)}, 0x10)

02:38:57 executing program 0:
futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0)
clock_gettime(0x0, &(0x7f0000000180))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/434], 0xd8)
write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r1 = socket(0x3, 0x4, 0x0)
r2 = getpgrp(0xffffffffffffffff)
prlimit64(r2, 0x0, &(0x7f0000000100)={0x1, 0x3}, &(0x7f0000000040))
r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/mcfilter\x00')
write$P9_RAUTH(r3, &(0x7f00000002c0)={0x14, 0x67, 0x1, {0x102, 0x0, 0x6}}, 0x14)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="2e0000002300817ee45de087185082cf0124b0eba06ec4a86e8f32e00586f9835b3f00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
bind$tipc(r3, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x3}}, 0x1ac417f0bcad037c)
clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000340)={0x3}, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x8)
r5 = getpid()
rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100))
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff)

02:38:57 executing program 4:
futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0)
clock_gettime(0x0, &(0x7f0000000180))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/434], 0xd8)
write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r1 = socket(0x3, 0x4, 0x0)
r2 = getpgrp(0xffffffffffffffff)
prlimit64(r2, 0x0, &(0x7f0000000100)={0x1, 0x3}, &(0x7f0000000040))
r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/mcfilter\x00')
write$P9_RAUTH(r3, &(0x7f00000002c0)={0x14, 0x67, 0x1, {0x102, 0x0, 0x6}}, 0x14)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="2e0000002300817ee45de087185082cf0124b0eba06ec4a86e8f32e00586f9835b3f00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
bind$tipc(r3, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x3}}, 0x1ac417f0bcad037c)
clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000340)={0x3}, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x8)
r5 = getpid()
rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100))
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff)

02:38:57 executing program 5:
futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0)
clock_gettime(0x0, &(0x7f0000000180))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/434], 0xd8)
write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r1 = socket(0x3, 0x4, 0x0)
r2 = getpgrp(0xffffffffffffffff)
prlimit64(r2, 0x0, &(0x7f0000000100)={0x1, 0x3}, &(0x7f0000000040))
r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/mcfilter\x00')
write$P9_RAUTH(r3, &(0x7f00000002c0)={0x14, 0x67, 0x1, {0x102, 0x0, 0x6}}, 0x14)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="2e0000002300817ee45de087185082cf0124b0eba06ec4a86e8f32e00586f9835b3f00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
bind$tipc(r3, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x3}}, 0x1ac417f0bcad037c)
clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000340)={0x3}, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x8)
r5 = getpid()
rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100))
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff)

[  105.750257][ T7873] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'.
[  105.831679][ T7877] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'.
[  105.844626][ T7872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:38:57 executing program 3:
r0 = epoll_create1(0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000000))

02:38:58 executing program 1:
futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0)
clock_gettime(0x0, &(0x7f0000000180))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="fd0000002901000000000000000000000000000000000000007e25cc90d78a27fe07002e7066696c6530ac4f4ca927347482f0ace44e9ad67be1d466fce37f8bc603353610afce743204a957f9cac53b0a2ed6a3f287f1bbe56efe37046c882918c2f3857c98e383b7dd853f714b7b7ae6e5e20f296c9beedf74e5ee0cdcd20600e316205c61a40dfa646510d062feb37b3c304d85a2fc84c69295f3c6669f5f63b5971a095ed037fa3b0fa5898c5c2e860be071e0a558a3146da922616932fb0d00ac5707af5f2b0fd46d8c3904d146586216fa0374ecbbdf103f97cb7195ec3be622d00000000000182d8baa708b1f97806b4c8a4e338e791e256ab473fbdeaa6916a1e4a63a56cb2cd4247ad0dde57520654b0a28ce74c466b0151fcc8ebc4dffe614153f9e357c793e6072621acbce88e01b86dd8c5105967b23a7a5f50719fce094a9b0aa5381a68975250e7bda49817c04322c71c957a9657887e26f3de9078c7c03dadc9cd61da70c895488f15852dae5304d4dafb38be564158bd0038d6191e853fa837bd12dfed522ed18783b2ff6d19beb14a3ba93e4500dcb48adb2d47d57381000"/434], 0xd8)
write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r1 = socket(0x3, 0x4, 0x0)
r2 = getpgrp(0xffffffffffffffff)
prlimit64(r2, 0x0, &(0x7f0000000100)={0x1, 0x3}, &(0x7f0000000040))
r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/mcfilter\x00')
write$P9_RAUTH(r3, &(0x7f00000002c0)={0x14, 0x67, 0x1, {0x102, 0x0, 0x6}}, 0x14)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="2e0000002300817ee45de087185082cf0124b0eba06ec4a86e8f32e00586f9835b3f00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
bind$tipc(r3, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x3}}, 0x1ac417f0bcad037c)
clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000340)={0x3}, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x8)
r5 = getpid()
rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100))
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff)

[  105.909871][ T7880] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'.
02:38:58 executing program 3:
r0 = epoll_create1(0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000000))

[  105.977753][ T7871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:38:58 executing program 5:
futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0)
clock_gettime(0x0, &(0x7f0000000180))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="fd0000002901000000000000000000000000000000000000007e25cc90d78a27fe07002e7066696c6530ac4f4ca927347482f0ace44e9ad67be1d466fce37f8bc603353610afce743204a957f9cac53b0a2ed6a3f287f1bbe56efe37046c882918c2f3857c98e383b7dd853f714b7b7ae6e5e20f296c9beedf74e5ee0cdcd20600e316205c61a40dfa646510d062feb37b3c304d85a2fc84c69295f3c6669f5f63b5971a095ed037fa3b0fa5898c5c2e860be071e0a558a3146da922616932fb0d00ac5707af5f2b0fd46d8c3904d146586216fa0374ecbbdf103f97cb7195ec3be622d00000000000182d8baa708b1f97806b4c8a4e338e791e256ab473fbdeaa6916a1e4a63a56cb2cd4247ad0dde57520654b0a28ce74c466b0151fcc8ebc4dffe614153f9e357c793e6072621acbce88e01b86dd8c5105967b23a7a5f50719fce094a9b0aa5381a68975250e7bda49817c04322c71c957a9657887e26f3de9078c7c03dadc9cd61da70c895488f15852dae5304d4dafb38be564158bd0038d6191e853fa837bd12dfed522ed18783b2ff6d19beb14a3ba93e4500dcb48adb2d47d57381000"/434], 0xd8)
write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r1 = socket(0x3, 0x4, 0x0)
r2 = getpgrp(0xffffffffffffffff)
prlimit64(r2, 0x0, &(0x7f0000000100)={0x1, 0x3}, &(0x7f0000000040))
r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/mcfilter\x00')
write$P9_RAUTH(r3, &(0x7f00000002c0)={0x14, 0x67, 0x1, {0x102, 0x0, 0x6}}, 0x14)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="2e0000002300817ee45de087185082cf0124b0eba06ec4a86e8f32e00586f9835b3f00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
bind$tipc(r3, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x3}}, 0x1ac417f0bcad037c)
clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000340)={0x3}, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x8)
r5 = getpid()
rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100))
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff)

02:38:58 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000100)="b901000000000000009e40f088481fffffe100004000638477fbac141414e9a33fa1be3e7d2a182fff", 0x0, 0x100, 0x6000000000000000}, 0x28)

02:38:58 executing program 4:
futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0)
clock_gettime(0x0, &(0x7f0000000180))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/434], 0xd8)
write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r1 = socket(0x3, 0x4, 0x0)
r2 = getpgrp(0xffffffffffffffff)
prlimit64(r2, 0x0, &(0x7f0000000100)={0x1, 0x3}, &(0x7f0000000040))
r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/mcfilter\x00')
write$P9_RAUTH(r3, &(0x7f00000002c0)={0x14, 0x67, 0x1, {0x102, 0x0, 0x6}}, 0x14)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="2e0000002300817ee45de087185082cf0124b0eba06ec4a86e8f32e00586f9835b3f00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
bind$tipc(r3, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x3}}, 0x1ac417f0bcad037c)
clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000340)={0x3}, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x8)
r5 = getpid()
rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100))
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff)

[  106.208637][ T7893] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
02:38:58 executing program 0:
futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0)
clock_gettime(0x0, &(0x7f0000000180))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/434], 0xd8)
write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r1 = socket(0x3, 0x4, 0x0)
r2 = getpgrp(0xffffffffffffffff)
prlimit64(r2, 0x0, &(0x7f0000000100)={0x1, 0x3}, &(0x7f0000000040))
r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/mcfilter\x00')
write$P9_RAUTH(r3, &(0x7f00000002c0)={0x14, 0x67, 0x1, {0x102, 0x0, 0x6}}, 0x14)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="2e0000002300817ee45de087185082cf0124b0eba06ec4a86e8f32e00586f9835b3f00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
bind$tipc(r3, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x3}}, 0x1ac417f0bcad037c)
clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000340)={0x3}, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x8)
r5 = getpid()
rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100))
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff)

[  106.283256][ T7897] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'.
02:38:58 executing program 1:
futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0)
clock_gettime(0x0, &(0x7f0000000180))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/434], 0xd8)
write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r1 = socket(0x3, 0x4, 0x0)
r2 = getpgrp(0xffffffffffffffff)
prlimit64(r2, 0x0, &(0x7f0000000100)={0x1, 0x3}, &(0x7f0000000040))
r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/mcfilter\x00')
write$P9_RAUTH(r3, &(0x7f00000002c0)={0x14, 0x67, 0x1, {0x102, 0x0, 0x6}}, 0x14)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="2e0000002300817ee45de087185082cf0124b0eba06ec4a86e8f32e00586f9835b3f00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
bind$tipc(r3, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x3}}, 0x1ac417f0bcad037c)
clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000340)={0x3}, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x8)
r5 = getpid()
rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100))
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff)

[  106.366614][ T7374] ==================================================================
[  106.374754][ T7374] BUG: KCSAN: data-race in generic_fillattr / shmem_mknod
[  106.381975][ T7374] 
[  106.384310][ T7374] read to 0xffff88812926c990 of 16 bytes by task 7208 on cpu 0:
[  106.391944][ T7374]  generic_fillattr+0x16a/0x1e0
[  106.396803][ T7374]  vfs_getattr_nosec+0x160/0x170
[  106.401746][ T7374]  vfs_getattr+0x54/0x70
[  106.406012][ T7374]  vfs_statx+0x102/0x190
[  106.410257][ T7374]  __do_sys_newstat+0x51/0xb0
[  106.414944][ T7374]  __x64_sys_newstat+0x3a/0x50
[  106.419734][ T7374]  do_syscall_64+0xcc/0x370
[  106.424237][ T7374]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  106.430126][ T7374] 
[  106.432461][ T7374] write to 0xffff88812926c990 of 16 bytes by task 7374 on cpu 1:
[  106.440185][ T7374]  shmem_mknod+0x12f/0x180
[  106.440412][ T7908] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'.
[  106.444712][ T7374]  shmem_create+0x34/0x50
[  106.444727][ T7374]  path_openat+0x2b4d/0x36e0
[  106.444738][ T7374]  do_filp_open+0x11e/0x1b0
[  106.444751][ T7374]  do_sys_open+0x3b3/0x4f0
[  106.444763][ T7374]  __x64_sys_open+0x55/0x70
[  106.444779][ T7374]  do_syscall_64+0xcc/0x370
[  106.444794][ T7374]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  106.444798][ T7374] 
[  106.444802][ T7374] Reported by Kernel Concurrency Sanitizer on:
[  106.444838][ T7374] CPU: 1 PID: 7374 Comm: udevd Not tainted 5.4.0-rc3+ #0
[  106.502960][ T7374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  106.513108][ T7374] ==================================================================
[  106.514424][ T7913] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'.
[  106.521169][ T7374] Kernel panic - not syncing: panic_on_warn set ...
[  106.521185][ T7374] CPU: 1 PID: 7374 Comm: udevd Not tainted 5.4.0-rc3+ #0
[  106.521192][ T7374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  106.521196][ T7374] Call Trace:
[  106.521221][ T7374]  dump_stack+0xf5/0x159
[  106.521237][ T7374]  panic+0x210/0x640
[  106.521255][ T7374]  ? vprintk_func+0x8d/0x140
[  106.521321][ T7374]  kcsan_report.cold+0xc/0x10
[  106.575395][ T7374]  __kcsan_setup_watchpoint+0x32e/0x4a0
[  106.580981][ T7374]  __tsan_write16+0x32/0x40
[  106.585495][ T7374]  shmem_mknod+0x12f/0x180
[  106.590010][ T7374]  shmem_create+0x34/0x50
[  106.594434][ T7374]  ? shmem_mkdir+0x70/0x70
[  106.598889][ T7374]  path_openat+0x2b4d/0x36e0
[  106.603627][ T7374]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  106.609540][ T7374]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[  106.615184][ T7374]  do_filp_open+0x11e/0x1b0
[  106.619098][ T7916] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'.
[  106.619697][ T7374]  ? __alloc_fd+0x316/0x4c0
[  106.619721][ T7374]  do_sys_open+0x3b3/0x4f0
[  106.619741][ T7374]  __x64_sys_open+0x55/0x70
[  106.619773][ T7374]  do_syscall_64+0xcc/0x370
[  106.647475][ T7374]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  106.653372][ T7374] RIP: 0033:0x7f334e393120
[  106.657796][ T7374] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24
[  106.677515][ T7374] RSP: 002b:00007ffcf420abf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  106.686077][ T7374] RAX: ffffffffffffffda RBX: 0000000000972bb0 RCX: 00007f334e393120
[  106.694061][ T7374] RDX: 00000000000001b6 RSI: 0000000000080241 RDI: 00007ffcf420b0e0
[  106.702042][ T7374] RBP: 00007ffcf420ac70 R08: 0000000000000004 R09: 0000000000000001
[  106.710014][ T7374] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000004
[  106.717990][ T7374] R13: 0000000000420721 R14: 00007ffcf420ace0 R15: 0000000000000001
[  106.727444][ T7374] Kernel Offset: disabled
[  106.731941][ T7374] Rebooting in 86400 seconds..