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", 0xffffffffffffff67) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) socket(0x1, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r4 = memfd_create(&(0x7f0000000180)='keyring\'\x00', 0x2) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x10', 0x500, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f00000001c0)=""/225) fcntl$setlease(r4, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r4, 0x8, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r6, 0x9, 0x6) timer_create(0x3, &(0x7f0000000080)={0x0, 0x12, 0x0, @tid=r6}, &(0x7f0000000100)) r7 = socket(0xa, 0x3, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r13}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r13, @ANYBLOB="1400020000000000000000000000000000000001140006000100000082e300000000000002000000"], 0x40}}, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) 09:07:26 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f00000000c0)='2\x00\xd4>\x9e\xac1\xe1\x06c\b\x065\xfbg\x99\xd8Z\xeb\x1f\x9d\x87V\b\xf1\xca\t\xf2\xba\xb8\xac\xf1\x0e\x81?\xc32Djko\xabD\xcb\xe64\xd0G[P\x16\xc8]\xe7\xd3\x05\x18\xbfN\x17\xed0C$\x80\xbb7\xc5\xf9\x16\x9cH\x01m\xbf\x94\x8b\xf1\xa6\xd6k\xd5,\x9c7H\x17h\xd6\xfbO\\\xf0\xef{\xf9\xc3.\xfdQS\xf09!5\x81\xde\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S\x13\xef\xd5\xe8\xd4C\x88\xcd\xb2\xdb\xe8\xd7\xa7x\x11\x19N\xbbCw\'\x05\x8ff\xef\x88\x98VW\xc1\xfb_k^1\xda8\x90a\xf8\xfe\xadH0x0, 0x10001, 0x9}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f00000000c0)={0x5, r3, 0x0, 0x6}) 09:07:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000500)=""/189, 0xbd) getdents(r0, &(0x7f0000000000)=""/382, 0xffffff96) 09:07:26 executing program 3: syz_emit_ethernet(0x50, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000356058490c86dd60760851009a3afffe80034300050dff00080000000000ffff0200000000000000000000000000018800907800000000fe8800000000000000000000000000010000"], 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x191800, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x1) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) connect$x25(r1, &(0x7f00000001c0)={0x9, @remote={[], 0x0}}, 0x12) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x6, @mcast1, 0x8000}, @in={0x2, 0x4e23, @rand_addr=0x560}, @in={0x2, 0x4e21, @multicast1}], 0x3c) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f00000000c0)=0x5) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) 09:07:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) fchdir(r1) getdents64(r0, &(0x7f0000000500)=""/189, 0xbd) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:26 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x8e1000, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x6, 0x100, 0x5, 0x21fa, 0x7}) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() tkill(r3, 0x1000000000013) 09:07:26 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400081, 0x100) setsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f00000000c0)="1351e591f6258472c215992fa835457c3935ae4a5ba82b428319e46bbcd1620a90b622052647cd76e4316ceffa101cda4d0baf61550a6c3588937248bffcbe8695b1413b824f768de4351924f0d0f460a29db72ac98ff2", 0x57) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000140)=0x7ff) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x6, 0x80) write$FUSE_LSEEK(r5, &(0x7f00000001c0)={0x18, 0x0, 0x4, {0xe62e}}, 0x18) [ 927.830122] net_ratelimit: 12 callbacks suppressed [ 927.830129] protocol 88fb is buggy, dev hsr_slave_0 [ 927.840339] protocol 88fb is buggy, dev hsr_slave_1 09:07:26 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), 0x4) 09:07:26 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800b5055e") r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r7) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r9) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) socket(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r10, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='9p\x00', 0x2012008, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472423921fc57c9c6d566646e6f3d", @ANYRESHEX=r4, @ANYBLOB="5eeba97e6e6f3d", @ANYRESHEX=r5, @ANYBLOB="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"]) 09:07:26 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x8, 0x431080) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x7}) mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x2000000, &(0x7f00000000c0)='selfproc.posix_acl_accesseth1wlan1vboxnet1-ppp1trustedvmnet1system%cgroupmime_type(em0{securityselinux\x00') gettid() 09:07:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x3], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0) 09:07:27 executing program 1: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_yield() socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/exec\x00', 0x2, 0x0) splice(r0, 0x0, r4, 0x0, 0x802000004, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x200, 0x1000, 0x1007, 0x2, 0x3, 0x1, 0x1, 0x7}}) recvmmsg(r2, &(0x7f0000003340)=[{{0x0, 0x4000000000000, 0x0}}], 0x600, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r5 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r5) r6 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r5) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)="f3b7ef250df9c424e224efde18e6f77b3302fd3147f02da8f317d1b56113655a5dba120ccaaec0a81b3c5c0d68ffe6a5f5f1321af2347713c272bf2a2595913fcb9aea6bc37b5220190de254b5b6d636c38800697ca8adf16758c9798222a7d808d7", 0x62, r6) socket$nl_generic(0x10, 0x3, 0x10) [ 928.328141] IPv6: addrconf: prefix option has invalid lifetime [ 928.359403] IPv6: addrconf: prefix option has invalid lifetime 09:07:27 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) readv(r2, &(0x7f00000001c0)=[{0x0}], 0x1) fanotify_mark(r0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0xd0) tkill(r1, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1137, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3801070010001307000000fe800000000000000100000000060000008000000000473cd773991d051e2e26e1deffffffffff7af6ddb24081ed4f3e1926d95c00fded390f0000000100efff00007d0f020000000000001000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000000c0)={0x0, 0x7530}, 0x10) r7 = msgget$private(0x0, 0x10) lstat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r10) getgroups(0x5, &(0x7f0000000100)=[0x0, r9, r10, 0x0, 0xffffffffffffffff]) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) r14 = getpid() msgctl$IPC_SET(r7, 0x1, &(0x7f00000004c0)={{0x7fff, r8, r11, r12, r13, 0x110, 0x7ff}, 0x8000, 0x0, 0x4, 0x7, 0x0, 0xff, r14, r5}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b505") r15 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x200000, 0x0) sendfile(0xffffffffffffffff, r15, &(0x7f0000000240), 0x9) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x11) 09:07:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000700)=""/159, 0x9f}, {&(0x7f00000007c0)=""/95, 0x5f}, {&(0x7f0000000840)=""/98, 0x62}, {&(0x7f00000008c0)=""/152, 0x98}, {&(0x7f0000000980)=""/160, 0xa0}, {0x0}], 0x7}, 0x401}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/125, 0x7d}], 0x1}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8, 0x0, 0xfc, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001001000001000000770000f200000000a6e217b91c3b0d873722b41a118fd58fa1f0a39ad9582203daa32c9831699acc52f141eeca2bd12d2f6fb54e5bff40e062a43f80b1babfd076d2502892250deee2728316e63e589ddf142e89365bd48cf76602c6f6aa76bc37284732bd1e191ddd3c9f314e58c55b88dfd6718e0fdd39db0f827c195f3c4957c67a08466517ba136c8c9e01000000f8ffffffffffffff3e26b5ca26bb434dbd0e5085c22834533925db8b54b33da7b947aefca1f9c49c648d58d4f944264fcace71d5b384958a393d3fc241af8869c798cd3c13d7083a7eb4c526e072a23bd24cccb38e4eff542520858c940fbb95979a564d73a7af107fd5ddaa491838873914a467c3ce2805683be94559864317c0a1dac92d090f4f9093679791a2840f2851324acdf44a807e69a1bc25d265303004e8ead128a3d61c0063233501cfdf76d99dbc46b9c00203a9161b8a444001c386475c432c7a6e898885429040954ea0bd29abc7b9322f3485d99ab38a3231ea08584795647ddb75c593933e824acdab292482735cd91572d0bc3f95b61e039183f5ed7cb75f203eda396b812380f315a62003d322e8f78effd376d0304715cacdb4994e24f8fc9899487be8cf9ace80047f40d952557777c7aba5d2e6096a65bb30"], 0x18}}], 0x1, 0x4048000) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x72, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={r6, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={r7, 0x7}, &(0x7f00000003c0)=0xc) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_TPR_ACCESS_REPORTING(r8, 0xc028ae92, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) [ 928.514699] devpts: called with bogus options [ 928.528851] devpts: called with bogus options 09:07:27 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0xfffffffffffffd3b, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000013) 09:07:27 executing program 2: getpgid(0xffffffffffffffff) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r0, 0x9, 0x6) r1 = syz_open_procfs(r0, &(0x7f0000000500)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c_\xad\x1b\xb8\x0f\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zit\x1bVG\x82\"\xea\xe3\xc4\xc5\xae\xb9\xdeS\xf10\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x95\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee>\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\\\b\xa7\xe8\b1\x1b\x1d\xe3\xaf\x03V0?\x12qP\xf7h\xa7a\xadd\xdc\xa9\x16X\x14V\xf8|\xe3k\x00'/377) getdents64(r1, &(0x7f00000000c0)=""/203, 0x455) getdents(r1, &(0x7f0000000ea9)=""/375, 0x177) 09:07:27 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x2) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() [ 928.790722] protocol 88fb is buggy, dev hsr_slave_0 [ 928.796331] protocol 88fb is buggy, dev hsr_slave_1 [ 928.802571] protocol 88fb is buggy, dev hsr_slave_0 [ 928.808028] protocol 88fb is buggy, dev hsr_slave_1 09:07:27 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0xfffffffffffffffb, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1deeee29122d1c4f7ef57aa511496445b62a7fc4ff8c18cfb520145bfc55f2b6ba928393e6a404818d5428a919deab14344897342ae139d62177bd612a0a3ed544f377632ab3a8ba98b661", 0x4b, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000140)={r1, 0x58, 0x8d}, &(0x7f0000000340)=ANY=[@ANYBLOB="656e633d6f61657020686173683d77703531320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000715cae4f41cf1bfbd1113984e5fc0cca08c7f2416a6cb884835a133d5d6d20505b51faf5e26663c8828a"], &(0x7f0000000200)="1d4ee5989e084f951e91b73969fe515002b18edccb767d515576b2a88daacaf81cf97055ff975c4533d4348fbf89cec48f618f9615937fd411348a0b47658e43d6fe8141419a8acb4263ab6e2c74c9a80b409da7e714f301", &(0x7f0000000280)=""/141) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:27 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x6, @remote, 0x1}], 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x1c) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 09:07:27 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x80) ioctl$KDENABIO(r0, 0x4b36) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r1, &(0x7f0000000500)=""/189, 0xbd) getdents(r1, &(0x7f0000000ea9)=""/375, 0x177) 09:07:27 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) fcntl$dupfd(r2, 0x0, r4) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = gettid() tkill(r5, 0x1000000000013) 09:07:28 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f00000003c0)={0x22, 0x0, 0x100e, 0x8, 0x7, {0xf00, 0xfffffffe}}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r2, &(0x7f0000000500)=""/189, 0xbd) getdents(r2, &(0x7f0000000ea9)=""/375, 0x177) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000000)=""/225) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x11101, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000340)={0x6, 0xde20d8f8fd914b, 0x1, {0x5, 0xe8, 0x1ff}}) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000380)=0x7fffffff, 0x8) 09:07:28 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000001c0), &(0x7f00000007c0)=0x4) mq_notify(r4, &(0x7f0000000180)={0x0, 0x8, 0x6, @thr={&(0x7f0000000000), &(0x7f00000000c0)}}) r5 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x401, 0x420242) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xb6a}, 0x8) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @dev={0xfe, 0x80, [], 0x27}, 0x9}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0xa) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x32d) pipe(0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) write(0xffffffffffffffff, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) vmsplice(r0, 0x0, 0x4a7, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 929.350148] protocol 88fb is buggy, dev hsr_slave_0 [ 929.355339] protocol 88fb is buggy, dev hsr_slave_1 09:07:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) getsockopt$inet_int(r3, 0x0, 0x31, &(0x7f0000000040), &(0x7f00000000c0)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r7, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x72, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000180)={r8, 0x7}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000140)={r8, 0x8}, 0x8) r9 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendfile(r4, r9, 0x0, 0x8001) ioctl$RTC_PLL_SET(r9, 0x40207012, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:07:28 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4dab2, 0xffffffffffffffff, 0x4000000002) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bcsf0\x00', r0}) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) bind$nfc_llcp(r2, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0xda, 0x1, "f2626272f746c47c17d957c1f2d6d1a229e588ea063d2ba5adaf3b61cc9a2d3c762e7304cbd5d366fcf9fcc4637732c6f794edf072f64ac8915eda7f1f630e", 0x26}, 0x60) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r4) ioctl$TUNSETGROUP(r3, 0x400454ce, r4) 09:07:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x13012, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4042, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x12902, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000080)) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_smack_entry(r2, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)='[\x00', 0x2, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lblcr\x00'}, 0x2c) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, 0xc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={r7, @remote, @loopback}, 0xc) write$input_event(r1, &(0x7f0000000380)={{}, 0x5, 0xfffffffffffffff7, 0x2}, 0x10) r8 = fcntl$getown(r4, 0x9) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000200), &(0x7f0000000340)=0x4) fcntl$lock(r3, 0x5, &(0x7f0000000280)={0x4, 0x3, 0x5ba, 0x3e, r8}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000002c0)={0x77359400}, 0x8) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000640)=ANY=[@ANYBLOB="463af87bed7fe479eb5956042df94a2efa5e3340c2bab5dfd47962aab5b84bc3cf46a6307347bec2a44a0b880cf01047ece1b86f93223983ba31fde68a8ed7670a25d06a538f8aeeb433e8b1acfc9961750600e12152338fb5d3da9b03f1469085721d0de3a8e49cc2b7d476afbb239052965dc09cbab85631617053f0aae539ca3b6d539e0d7db763b6b12f25729f46787acbb1063f8b6db28cd579101f6ed3227eed24f012280e07eb78acb34873f9c765a869b9a9c9958f78b7eaecad1d51853bdb6130d9485e3034faa6aff70ca5f229fb46fddba4f0181d636700d527953f95e8bb2c014b29b431884bae4499ab3af56ea33b1da585768427ea5c4a6177405687080256163ff2975881601a918c78ccc30948e0b3aba605", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="9e9bb768feb61a009da40ddd9b718dd1dc2c2893e10063a0c394f0f837c280a0ade869b3296400"/52], @ANYBLOB="00000000000000000000000000000000000000000000000000000000614400000000584380ed8eb71cee3dd5637827b6364017c0a938d4422708d587d5c7f04a76ec2050f57acf8b4d37123de2446ccc5baea2532544e2136373cd36fee8c88268350382c029a5d4954856f3d4a7b17751a9ed5159e9fde4"], 0x3) ioctl$FICLONE(r0, 0x40049409, r4) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x3, 0x2024, 0x1}) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', r7}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x8}, &(0x7f0000000600)=0x8) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x52be876e, 0x100) r9 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000000)=@req={0x2800000, 0x4, 0x3ff}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in6=@ipv4={[], [], @dev}}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000800)=0xe8) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000105000000000000de0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c000100697036677265000014000200080010000000000008000100", @ANYRES32=r12], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:28 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000040)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x4) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:07:28 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0xe2b98c60e5ab0c2, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000040)={0x0, 0x1}) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:07:28 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000040)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18, 0x0, 0x6, {0x3ff}}, 0x18) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:28 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000040)={0x7, 0x6, [0x3, 0x7, 0x3e, 0x3f, 0x6], 0x7}) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x13012, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4042, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x12902, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000080)) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_smack_entry(r2, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)='[\x00', 0x2, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lblcr\x00'}, 0x2c) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, 0xc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={r7, @remote, @loopback}, 0xc) write$input_event(r1, &(0x7f0000000380)={{}, 0x5, 0xfffffffffffffff7, 0x2}, 0x10) r8 = fcntl$getown(r4, 0x9) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000200), &(0x7f0000000340)=0x4) fcntl$lock(r3, 0x5, &(0x7f0000000280)={0x4, 0x3, 0x5ba, 0x3e, r8}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000002c0)={0x77359400}, 0x8) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="9e9bb768feb61a009da40ddd9b718dd1dc2c2893e10063a0c394f0f837c280a0ade869b3296400"/52], @ANYBLOB="00000000000000000000000000000000000000000000000000000000614400000000584380ed8eb71cee3dd5637827b6364017c0a938d4422708d587d5c7f04a76ec2050f57acf8b4d37123de2446ccc5baea2532544e2136373cd36fee8c88268350382c029a5d4954856f3d4a7b17751a9ed5159e9fde4"], 0x3) ioctl$FICLONE(r0, 0x40049409, r4) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x3, 0x2024, 0x1}) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', r7}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x8}, &(0x7f0000000600)=0x8) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x52be876e, 0x100) r9 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000000)=@req={0x2800000, 0x4, 0x3ff}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in6=@ipv4={[], [], @dev}}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000800)=0xe8) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000105000000000000de0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c000100697036677265000014000200080010000000000008000100", @ANYRES32=r12], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:29 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x801, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000540)) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000140)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x8f\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\xb7}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\x06uW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe12d\xda\x1f\x8bVrd\xa4\xb34\xfcUb\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcfX\xdc\f,\x8ea\xb9~7:\xbe\v<\xd7\xbe\x06xF\xa4\x05\b\x8dR^\xabNc\x1c\v\x97\xbc\xa4\b\xa3\x04\xc1L\x12\xf4{61\xeb\x82\x12\xee\x81\xdbz\xfb\xf8B:\x81;>\xf3\x87\x8e\x85\xf2\xad\x05\xf1\xfc]\'`\xbdp\x01\xa5X}\xa2\x9a\x13\xbd\xc0HJ\x14\xa16F\xc3\x88\xde\x19t}\xd0\x02i\xe4\xd0', 0x2) fcntl$setlease(r2, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) accept4(r4, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x80, 0x80000) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x4}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000440)={r7, 0x6, "f6f5e64be3b0"}, &(0x7f0000000480)=0xe) tkill(r5, 0x1000000000013) 09:07:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8755, &(0x7f0000000040)=0x2) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/176, 0xb0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000280)={0x100000, 0x1d000, 0xf7, 0x1, 0x72}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$KVM_RUN(r1, 0xae80, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x802000004, 0x6) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000300)={0x2, 0x40}, 0x2) ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f00000002c0)) r5 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x3, 0x400) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000500), &(0x7f0000000540)=0x4) 09:07:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="08f8703af5292e03840071") r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in=@empty, 0x0, 0x4}}, 0xe8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x25, &(0x7f0000000b80)={@mcast2, 0x0}, &(0x7f0000000bc0)=0x14) sendmmsg(r4, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000004f40)="a4557a8d7b5febd1fa4eb78d5251603f13e4003b00000000000000006ef58e14d3f15505d608106c3f982fc3dc5f225967a7230a82099d6a94f35053db1cf702ece2c8adf6f86b4e22fce3f63d97a54bb59626a1aa1ae2dc1db01286f6379b13e64258f6f0d6fd239a5af3dae89e531087e247b84c36b88f749ad400f5ebdee835876639d7e6f60560c1081619ad0167ca456b754300cfae733bd0a6e1026ab2f45397bd5b2c264b61b9f3f0998f919765c9d804c4ad2fc0b6f62d6fa6cc49b236ce23bae401f61b91c587cff46242d92ffe826d5c8afa9dd9a397fb64d32215c2b854", 0xe3}, {&(0x7f00000002c0)="14c84592e8c498339b192fbd7907c1493c50fd972ebd7a6878888da4fbc4f6239657e78ff7662e8d0b33dbdd8db10968cede0a04eb24c7b79e18ae52bc67e64c07b65663e617f40c1f0ecc8904c178ee304a4753b68d24b0a364cf2cf64597a6a1e5679483b6fe302755c064cdda386c9e7e33aa4d09edd2cd01696d4678892ae266f302ee5f30e6c19b2bc63b3ae36884e274ccb0284b82718cd3c1f1a6bc1b3f9e9ce19e6abafa29169c5ca3269a7fc3e454b91e99c83543b51c1f04e19dbfe775a443e1f7fc52ec9d86376bb856a5732559765edd92fd15373a5792ba9c10d3300b19492247d4f0ec13c3cde682338079", 0xf2}, {&(0x7f0000000100)="7ca9ade6a22353e931aa796079603414ebd232b6f35dfd09b20133f48c7d3d75cf9d3fdb9924b0bdb0da5fd03bd85e4f34bbf1931fe890ced151c4b926835cad525fe5ecebab48dd644292e14805339e874c6023fdf54e707bf543ed7a79a8829443292e2c4876bd138a86ed307f048b92cd45a22f91ea50fb99859c5e306c5ee15767f1e710132fa8fb120b957b5b700ef2f985486961e968c06652d4bf46", 0x9f}], 0x3, &(0x7f0000000440)=[{0xc0, 0x88, 0x3, "ccb07a96477520777b47723b290d9de2dd894edf87ef8074328d2dc72d41b95e949ada628723ebadd3d37cb0f448c7bd5731817036934f8de9a0efce68c4fb2aa40d60a4fc06c25ef60ab2b9458e403f252ceef6d83d2e1970d1c299225608bf6545a4801347772bc27127e4f0937eee87da631cd625396e741273ae4967017f14920258ade833d72797be029d3e17ec0c4438b1142cf1be0e720e32a3d06d6815a110f30d3e31df53c2a20773745bcc"}, {0x60, 0x11, 0xc0000000, "1a6d0a0c330d616d1ac8df435ee9c17e7e5dc6d7eac8adc206fa45ce30d38caf461e30dd84ed27d38d6e639bcdc49ec53811caf1159a677f38c69012349a25c8cfb5c81da838a55e2af160cd"}, {0x108, 0x100, 0xfffff63f, "198447a73db7d3d0ae824a710d04ddb816d634975b08ff9ae038913ee8e4505af0ec17401af43a1f2b2db15a1fe1a01c55eab9b0db2ab1d149dd9f70bd88ef7f784f32b8fb597561cddedb06cb58b0d26744b6cc74e933a21aec141e633d48488a2d47e1750982af7af492cabb5b182912d6f5ab7e2c05eeda27d98bf0e0eaabfd6b127e2a799fae1147f8258e5af8e81cddd1d23ff4b4d651e78968408c9dba25d403a7abd4b2ecd5d42d641c7f58229d7fd20607e34e4d6296897182300a59a379680ea67259de2e02af4917e27df78e65b7c0a15e000bd75760e19b7933725a4e4615a20207caf312f74938eecb98e98e08820ba1be"}, {0xe0, 0x108, 0x4a4, "59f744834f0347fcabf9d5009a481531f73851586c0cb2b6d0ee5b45aafee748c6040312a576b3ecaff6d74ae03855792982b5a071ffecf79005215fa567cab2354ecd2e81158e1a0705fd0ff6f396a4f324661243ab682ae65247314799d2e493a22aed00ae87ef81eb6134f65e00c3926a52496cd226143bf2ee67b6fc77e579e6f001197e35392fede6ad0af475c5387007e0ee3773e61b669827018cae946c624bbc96b72c2ee854d314e5e7462a8c9c6731da5caf9080f2a59290119245b4504a50cd77298bc930193d"}, {0xc0, 0x5d, 0x1000, "10e81d15776397231a8bcf28d6570df18c39cf250fc820d550f8bed50180987e75d74bd8550a5a3accf4beb1f41bcfca1ba2e03e578235f1fad98a5e5dbfe077c3850efe15cd04bb101a6ce7bd685c14d37b41f9377dbe19389255bbf6822dfb03ad6c31b0a1f67935f622c2fc17933d9bd35cc6f514958d1c752ec40a5e087c302dec933c0b2591ed6fd4d14552210e9f1ab8cc897d771d2c46f5dc0e445270ac520f2ab839deb9eef3c11e6c5e"}, {0xe0, 0x10e, 0x4, "39ff6cb859237d9f0465a9aad6906b319d5e412dc9bc330e4be2266d276aeb991cb76986bd1071ba3f2577a602196cb3dc17a943493b9fb1f3c3b8c360d542f3142b4c876f17bba81b8054fd5539fc7163dd385556bcbccf024c38c588360a284b73d7dff7931c1d73715fa946d229c82ea4f9008c1c4aa4b7830d0a83e3d63ca98280878bbc00e0492fd995d29553bdd0b80d278c658816c908e0fb0449093880a7f66497de1dff0ddac0546bf2cbf710160e43c75da5b0b5ffa53d75e0eff7c3965fa96f920cad1f612147"}], 0x4a8}}, {{&(0x7f0000000900), 0x80, &(0x7f0000000a40)=[{&(0x7f0000000980)="d97e9c66ab1b268b7787c89d6d6dfa7d6315bd4b173cb4ab1c22e1a1dd59394f6dd3f6f8bf2e635292e1a09585c0147f27f3259187fe80993e9cecc5a88d0414319a577bcc6693bc42f15c268658b7b44c82635dda00d2b3e06b37f761bb59a3ade032075261e60b1e0881aba791e1fa2caa7c3cdb1b15b8fb1cdc790665b23781", 0x81}], 0x1, &(0x7f0000000a80)=[{0x68, 0x132, 0x3, "0929afbadc856924ace4676d40e988350f024206606f0a279e60fb1582bd54f27e0fe5ab5e20584d7e012f4ebd1cd206a63e0c2122671e10a97b0079602cfa86d472df8f8d98829d66042cc82daf104d29c7cc78a894"}, {0x90, 0x1bf, 0x1, "4c50d1633054531b21ce4bc249eb2b2075d2f547bdaa9d92f4ea832313783a5ef2c9c2d4ea2b13b5f66b7941996aafafca8e13527e4fb28563f5b8f4d6c1a1ed663d668a9a55a19c9d22e99be606fcca6c888001b3b39601a16e28c11e87a15b5ca928af03cfd5e09277406c1e524260337a62af9b9a1392a0a151"}], 0xf8}}, {{&(0x7f0000000c00)=@xdp={0x2c, 0x10, r5, 0x840}, 0xffffffffffffff2c, &(0x7f0000003100)=[{&(0x7f0000000c80)="9567248ce5e7eca2a1c3de59afa4b946c74f54bece451e2934722310f8e6906f08261db0a3bb720c0318a2ea5a78bddbcd797d4db126b43191fcbd53666c9016ba84779d27d6f5e376f2f67171a921a065b7ec7dc81abd54086f3b679319ec384d311a9309ea25b1758b1b7a5712b786fee9be509ea6a2dbfd22", 0x7a}, {&(0x7f0000000d00)="ddd13d10c9cfafab80", 0x9}, {&(0x7f0000000d40)="628957a7ad770c6f3ec952238d286553ed7b8b366b108073eb85ecbb9de68a01acf34f43f6c1c19e7826e3348c149d071a44e7a9fe2924f91796a98133ea9ddd8e7c20ca6f6442d557bbe9eb07e78899617fd704f0045824acf091fb779e5efc7147f674c66afee44209828040f7658d63d6beeb0a68ea613a495bba73cd35af1ca2181a04cd7a72f7237e2f92c71ea9f424c565cdac3af26ee035b9faef9a66108d39c8f3026ce80e8ccfe725e6b19ad39eebafd9f8a034f17a5bf7987cbd5a40", 0xc1}, {&(0x7f0000000e40)="d0913dfa21f1b887af0c05e5b8f957e17cd0bf0161cc6e3b1d0d3c64ed1a9a87eb666a397c7fd8afdcf0ccef81ad3ee275226101ff621f7d992d764eddb291638c7a38423c91fd5ebccea8708eda32ec2bc9894269fada8c94be5cf737ff0eecb1b76151d71bda3fd6beb4d5c4f6df7a646c94b6e636d180c680fe212b2dbd2208f1f2e7ce01c2bd372955161f27e6d07939f35527d50b9c706bdc418e384178f15742bfaf4645339814c14798574df33f32f27ee6f5bc1882e1668e4e825d6047661213103d18319b0644751b3af55b7b3847dc2293be91c2", 0xd9}, {&(0x7f0000000f40)="1da582e81d5dd46a6fea30e0f266d9e3dceb1407d9139ce8667b9a2cf5377d21c50266623e14ac92d8f8a2a6c8ebbd60a0a7dbfc1c4b26a51eadd7a07351adc8c412a8fb9ac3980e55209ab4594741ae87fd1380175a6f91562d239321e8f4e4916b07b7a051f0db7f4c144531cabe", 0x6f}, {&(0x7f0000000fc0)="19fef4a235bcb9dab9d4549f449b67004cdb0ecb2f412fe7c3f54ae9c7cb329e9228d8e905926b6a25c465883440f13e4d", 0x31}, {&(0x7f0000001000)="6a7d7536d47722a27e2126f6379af34601bbb77dad433ce0eab8a077ce944786a8321f79f898c5d6becabc196eac8971ca2e449c02e31922166e3be79b44b400d16ba5ca2a492d20e980d2362c5c8a6c6029aababf4b1b39e4d2f13b0565c0bd0d9f970b7ec6784acccbeef5a973ed7581805a00e6a77f51634a2ad25fdb72d7f7def1e8fcdb245ac5e1f884ee70cb2976e6dc34b31674fe9ada03b9c2e0c996bd1ec89cdd6a6891fba1ed897776a8d5b506ef8bd995a4f4ad523cc1c6068383437e1d26144879d383c8827d1be1af4085e156da43adc1ef25fe2aa60be98f329d56ae726168e05984fd", 0xea}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000002100)="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", 0x1000}], 0x9, &(0x7f00000031c0)=[{0x88, 0x0, 0x7, "951ee15ba442263ebb2d72fbaa4facd9fcbeeb0c8f645197f8bde6475720dbf68aff57374fa199fca082b323225339c309e335e39ff1bb3a6041e33962809b7e8f515cf55a3b3e141135e5eb580d6c6bdf697ce1a98280063ac5aa4b6147422de3c60a19e583aa77b646e577862937dfd98e1b9266"}, {0x70, 0x101, 0x4000, "a0b3a9c75cd4efc08e234353b41521905c220c337cbeae4d98361eaccec77163ad67dbf67e51b0b043177df805c4040ba8240e4af8c24f330b2a04f152d9487bd458ea3aa2534b9e3d2f0ddd7a8054bee888470f71b8d31ce06ae43eb9acc5"}], 0xf8}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f00000032c0)="3d1a6ace580cdeb056c55077c2b47a8fa7f9594a844503fc0ffaf775d309b7027cff1ff3378b890b82bb68e62c1bcc0e5b2074fb8f08c2f8093bf643537ea15f1fd58a5dea22958f493ce6965bc440d5453b34e2c3dd5b7bb27d3b8d895184f9c241b778f7dbb25971d27c2c2cfcfa4074bb342e5979771c36675fcfdf4638a08e4e144e74b67a7952e00b05704407", 0x8f}, {&(0x7f0000003380)="5de3ca0837e84718949aae5945261f2516755b7539af22b8a3a25958734a193eb9d68d07e6e0ec6c73e7b38746dc8817085f27e5205b359fb8da392062296a696bc8007261edab0964cbeb599dd372ac2f5ca0762d1ecddc320184491e2bd238302510f71f6047a7545e92b82659233cba695b00aa84b17a7aae8d422a1f4c0e4f8df20ced39", 0x86}, {&(0x7f0000003440)="421cbffa53d15df58fbb2893f0bfbea2b5d4c3d79a34528dc4e48bf7910e83664a0e3e448115d79c3a91c48d11b043c0498d19557291db4b8fb7ddb9dd321da8a4874d720494b62758142b09269e1c1dcaa9f2b96fccb426dbf6b1504777532e206e533ab66de6b6df7d055373da2273ef3331dd305d75966b6f4fad0578a9185aa70a41a8ec2faa803604cb41cc7cfc348b6a94a667035e79f5f7f4c9017fadfddd976c8480ff2911e4fa73c54a684e1d69338e80a132626aa76a1203213fb89e5de498196f4fe1f1f237523a7bc79ccafd80ed26614a3c4b9d054e", 0xdc}, {&(0x7f0000003540)="7de6ab4ba5f21b92c6536963ac3581d704776ac535e50871d4f18808cf72f61428e28984c17bcffc51670beb11", 0x2d}, {&(0x7f0000003580)="41015067b8bda305692093ad7b6d393a93fa9f0e662ae6d28fbcd2c20678e6cc6bee921daffc5532b7061fd07d3ad7e85e14af20a8928dfba9a39c968e10a382956b5801dc19feed01ab9d182719209592f0d360f5356eeca75d6680bdd303df395a3b3a6195d6e1e146e740fe5dafd065c76ed590fd06e7d2808e04def6415e3f731fe8e086e420116e5d927f7ebf070a8685106356e71f7b5654a7", 0x9c}], 0x5, &(0x7f00000036c0)=[{0x98, 0x115, 0x0, "8a5b16a92da9372e63a1d31cceb681d72022e364e32c4529e3654d149fcc32abfa2920995310614b2443a60d4b77c098c1d7b471141bcfd73e1e96bf30d469545b4f4498a2f5beb7feb0a2bdfc11d1fbd6a8640411afef6103ecad2ce43bc551da6cd8bdbca2682c5aed3a2a69d3610a97c0cb494a6c3c1843bd3a386217f89fb4f122"}, {0x48, 0x29, 0x1, "0f9b1307ca542eb55196eb56d940f4a0dd899caf8ad01fa87fc5b12b5355ae76f47cbdd43109e6d8c24b66b4abfb2a87fcb08be95e11cb56"}], 0xe0}}, {{&(0x7f00000037c0)=@ipx={0x4, 0x7a8, 0x29, "c34722d85177", 0x4}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003840)="c091ec743d0b79269967b81e9bdcd1b3783f7f300b0efa7208a5efc8baca9e1b2e338e45c8f694ab89decef0cca0996b5f41d231916422f127ce275c0efc87ed34240e3943494d69b0c56bed154f44edb5b8e90e10aaf1b68fb6a0b5f0c119ad6eaba217be5ae54d4ece158e00f01328ea8d3143f05f7b7865e9ab8544ca4e4d459c051c7cc62db8892ca75384596d65ad48149b75a61fff0fe51b4476c752e764e9b055cb296a62036027a32424b196c3dd9e7f440d01231bd73c4b43dd34207018540ff1f145", 0xc7}, {&(0x7f0000003940)="3c0ebcea801518e310f9b3e0140f6a4f9e42216cbcea751bd6e1fd17b8834defd6f798c259bd66487c11aa24793c4388af2996ff83c9138855d51e81f51321ec588593a9555cc89dabeb623fb6163ec180d8b42dcda5136e75ee1cb26b61f2c579f2a8f324d9568fc96527aa3d7ceb873b7ec131680740f03ed81864e5b0f605c569bb4e6fa7d514abf25a55b7aafb2f442af520d5cafd190fd12e8c01465ee01c3c339d9c1286478de2cdecdd70a864784238381e77cabea9fffa72379c9a494d", 0xc1}, {&(0x7f0000003a40)="f431b293b0a5e9af7127e1aac5fa63e5a492a954566013353fe0d7c4572f60469e9105fba8e02a357dc6b247f9c999e3dcb047659b9b901509d7cc7fdb4dfb323f370c1d44394bb7431f025f7ef9b12416db03530e7acc15eaacd03698e8ae5d8400a8b05439f8f5b76d75703df731c4c00076dd1bb5214637810698b6657b2debdaa3537df5b2a71ea5", 0x8a}, {&(0x7f0000003b00)="0105595b81af1e4b22dfdffc", 0xc}, {&(0x7f0000003b40)="a8599aff9482510f98fceacd3e55c00391cf5cd33cbd59120736d8441d47f13e36dceddc2449ca8812162a8fee43f9d817d953be153038c288e8fed37b5111b34edf06c7d34e09", 0x47}, {&(0x7f0000005040)="df28ff09eb4da9d606d1b8ca46158c55d96198674e775544e2d1", 0x1a}], 0x6, &(0x7f0000003c80)=[{0xa0, 0x1, 0x39, "3a772855c1ccf4ef361822ed4d98db49a8d3594b9362660b04ebce97777a47f179f40d3ca813673b0f83cc95c7d5f9baac0bc63d78a98bfb0c8e6ec077052018497f85d3123ac0ff786fcd4ca9b302521f89c42418ee8421eb15fa92eb7a0fb00145e9e959051f636358bace9c13611be35b84de155d60c2226a535843e4fa42af4e5bf2f7636ee7f73da5"}, {0xd0, 0x10c, 0x5, "17ff02f4ef67dae58ac9c557ea099d28f09614a3508c4596fb2a92b590a206d624b25a518160d0a167cddb71a537d1205e30981fa30f30515eab83a91bdecde4adeb27b5e9ba13928c020dd46ce7bd7e6b66cd4b89f1ce644051ca2bab0e5a0f7ab4ff16de84ee8af516764bd8e46ef775089f49ce5964302c61abfbe14d3d00b42649a7e1135231778dfb1f72d0725a6490f30c4a49afb3b3ade58d8c7a54c98ae05419802b300d090d32d923d585e778a4fe32a829b80e07b8aa0c7a321884"}, {0x1010, 0x116, 0x4, "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"}], 0x1180}}], 0x5, 0x0) 09:07:29 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x72, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={r4, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r4, 0x40}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000080)={r5, 0x1}, 0x8) 09:07:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x13012, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4042, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x12902, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000080)) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_smack_entry(r2, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)='[\x00', 0x2, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lblcr\x00'}, 0x2c) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, 0xc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={r7, @remote, @loopback}, 0xc) write$input_event(r1, &(0x7f0000000380)={{}, 0x5, 0xfffffffffffffff7, 0x2}, 0x10) r8 = fcntl$getown(r4, 0x9) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000200), &(0x7f0000000340)=0x4) fcntl$lock(r3, 0x5, &(0x7f0000000280)={0x4, 0x3, 0x5ba, 0x3e, r8}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000002c0)={0x77359400}, 0x8) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="9e9bb768feb61a009da40ddd9b718dd1dc2c2893e10063a0c394f0f837c280a0ade869b3296400"/52], @ANYBLOB="00000000000000000000000000000000000000000000000000000000614400000000584380ed8eb71cee3dd5637827b6364017c0a938d4422708d587d5c7f04a76ec2050f57acf8b4d37123de2446ccc5baea2532544e2136373cd36fee8c88268350382c029a5d4954856f3d4a7b17751a9ed5159e9fde4"], 0x3) ioctl$FICLONE(r0, 0x40049409, r4) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x3, 0x2024, 0x1}) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', r7}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x8}, &(0x7f0000000600)=0x8) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x52be876e, 0x100) r9 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000000)=@req={0x2800000, 0x4, 0x3ff}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in6=@ipv4={[], [], @dev}}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000800)=0xe8) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000105000000000000de0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c000100697036677265000014000200080010000000000008000100", @ANYRES32=r12], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:29 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() creat(&(0x7f0000000000)='./file0\x00', 0x0) tkill(r2, 0x1000000000013) 09:07:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000000)=""/201, 0xc9) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:29 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000001c0)) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7fffffff, 0x3, 0x33be, 0xfe0}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x1) gettid() 09:07:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8755, &(0x7f0000000040)=0x2) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/176, 0xb0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000280)={0x100000, 0x1d000, 0xf7, 0x1, 0x72}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$KVM_RUN(r1, 0xae80, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x802000004, 0x6) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000300)={0x2, 0x40}, 0x2) ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f00000002c0)) r5 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x3, 0x400) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000500), &(0x7f0000000540)=0x4) 09:07:29 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x400000000000}, 0x0) ptrace$cont(0x9, r0, 0x9, 0x6) r1 = getpgid(r0) r2 = syz_open_procfs(r1, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r2, &(0x7f0000000500)=""/189, 0xbd) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1a0}}, 0x24040010) getdents(r2, &(0x7f0000000ea9)=""/375, 0x177) recvfrom$rose(r2, &(0x7f0000000280)=""/112, 0x70, 0x47b4e3c73efdb8ca, &(0x7f0000000300)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 09:07:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x13012, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4042, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x12902, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000080)) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_smack_entry(r2, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)='[\x00', 0x2, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lblcr\x00'}, 0x2c) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, 0xc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={r7, @remote, @loopback}, 0xc) write$input_event(r1, &(0x7f0000000380)={{}, 0x5, 0xfffffffffffffff7, 0x2}, 0x10) r8 = fcntl$getown(r4, 0x9) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000200), &(0x7f0000000340)=0x4) fcntl$lock(r3, 0x5, &(0x7f0000000280)={0x4, 0x3, 0x5ba, 0x3e, r8}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000002c0)={0x77359400}, 0x8) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="9e9bb768feb61a009da40ddd9b718dd1dc2c2893e10063a0c394f0f837c280a0ade869b3296400"/52], @ANYBLOB="00000000000000000000000000000000000000000000000000000000614400000000584380ed8eb71cee3dd5637827b6364017c0a938d4422708d587d5c7f04a76ec2050f57acf8b4d37123de2446ccc5baea2532544e2136373cd36fee8c88268350382c029a5d4954856f3d4a7b17751a9ed5159e9fde4"], 0x3) ioctl$FICLONE(r0, 0x40049409, r4) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x3, 0x2024, 0x1}) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', r7}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x8}, &(0x7f0000000600)=0x8) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x52be876e, 0x100) r9 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000000)=@req={0x2800000, 0x4, 0x3ff}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in6=@ipv4={[], [], @dev}}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000800)=0xe8) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000105000000000000de0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c000100697036677265000014000200080010000000000008000100", @ANYRES32=r12], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8755, &(0x7f0000000040)=0x2) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/176, 0xb0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000280)={0x100000, 0x1d000, 0xf7, 0x1, 0x72}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$KVM_RUN(r1, 0xae80, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x802000004, 0x6) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000300)={0x2, 0x40}, 0x2) ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f00000002c0)) r5 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x3, 0x400) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000500), &(0x7f0000000540)=0x4) 09:07:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000500)=""/189, 0xbd) getdents(r0, &(0x7f0000000000)=""/375, 0xfffffd7e) 09:07:30 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000040)={0x1ff, 0xffffffff, 0x40}) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:07:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8755, &(0x7f0000000040)=0x2) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/176, 0xb0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000280)={0x100000, 0x1d000, 0xf7, 0x1, 0x72}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$KVM_RUN(r1, 0xae80, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x802000004, 0x6) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000300)={0x2, 0x40}, 0x2) ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f00000002c0)) r5 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x3, 0x400) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000500), &(0x7f0000000540)=0x4) 09:07:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000500)=""/189, 0xbd) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000000)) 09:07:30 executing program 1: pipe(0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getpgrp(0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r1, 0x9, 0x6) move_pages(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000100)=[0x7, 0x8001, 0x101, 0x5], &(0x7f0000001140)=[0x0, 0x0], 0x2) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r2, &(0x7f0000000140)=""/4096, 0x1000) r3 = gettid() r4 = openat$null(0xffffffffffffff9c, 0x0, 0x80000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000b34ff8), &(0x7f0000b34ffc)=0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x802000004, 0x6) read$usbfs(r6, &(0x7f0000001180)=""/8, 0x8) syz_open_procfs(r3, 0x0) syz_genetlink_get_family_id$tipc2(0x0) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x0) 09:07:30 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x80, 0x57) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0xc) fcntl$setlease(r3, 0x400, 0x3) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:30 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, r3) fcntl$setlease(r2, 0x400, 0x1) open$dir(&(0x7f00000000c0)='./file0\x00', 0x441, 0x4) mknod(0x0, 0x0, 0x6) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x20, r5, 0x5, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x4}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x2dc, r5, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x96}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4c1}]}, @TIPC_NLA_BEARER={0x10c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x55d6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x800, @mcast1, 0x10000}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @loopback, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x37aa}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x627b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xda, @local, 0x3ff}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb54a}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbe3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x22000040}, 0x4080) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = gettid() ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000140)={0x0, @reserved}) tkill(r6, 0x1000000000013) 09:07:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8755, &(0x7f0000000040)=0x2) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/176, 0xb0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000280)={0x100000, 0x1d000, 0xf7, 0x1, 0x72}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$KVM_RUN(r1, 0xae80, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x802000004, 0x6) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000300)={0x2, 0x40}, 0x2) ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f00000002c0)) syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x3, 0x400) 09:07:30 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000001c0)) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7fffffff, 0x3, 0x33be, 0xfe0}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x1) gettid() 09:07:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8755, &(0x7f0000000040)=0x2) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/176, 0xb0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000280)={0x100000, 0x1d000, 0xf7, 0x1, 0x72}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$KVM_RUN(r1, 0xae80, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x802000004, 0x6) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000300)={0x2, 0x40}, 0x2) ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f00000002c0)) 09:07:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8755, &(0x7f0000000040)=0x2) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/176, 0xb0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000280)={0x100000, 0x1d000, 0xf7, 0x1, 0x72}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$KVM_RUN(r1, 0xae80, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x802000004, 0x6) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000300)={0x2, 0x40}, 0x2) 09:07:31 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x8000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pc\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:31 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000001640)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0xe) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) ioctl(r1, 0xffffffffffffffcc, &(0x7f0000000640)="18d35872444193bd21c468a093308cbd2d3a7a79a67e38733052b22dafe5d8860c2f00745ba622d4e2af9607a749e62d8b878ab832730957704796951d3ff5dde504d26540719084aaea73051a9a9467d39bf14401ce8cf6fe245fe3a0d1a1234cc029b734c8316e4e7dd3bfd659b7318c75d142468971d7df0ddeb948d8788c8d46f1cfafed3d251278dd6e1555e609aa318063cefd97f5ed45b58e1bf52671ddfe5782696fc61658781fdb29654802a1932d340f880021990371ee796c54625b80a40a4b76c3a7d591e4d4d1b3657789ef6a9c72f0b8d4145243a705686b0e881f0fabbccffa3578cf4f765a8efd409583ddb3c18933a9fcff400fefe4def474072e80d4f55a966f571153fff1301517eb0ac46a8debebc913ccc5f3c6044f6d51389fc069f7616c6551c104025995fee7857780c60279042ca96d4d582da1a45b22f4912aefd777e36719cccd57bcc2e90a66e2184257dbe1f1f663f5fe6ba65602a261c22eee2b864084c1621d07d28df45c10573b508d00fecc4c279308ae937e24f83d6f2b10ff3cea9c2b9727803da31615d588a46128b5af10968e51d0b067d2cfbef3c45261de221b88f073d025799486594d1f80fa02167a0808d0275ad76b9c13edffa13c6aa183aae5a8adf2470af15e6118a96ab3cd312421828d3728d4be7b248658289f30d7cdc161b7100e4127081fe68b8a92602ac3050b954beba4da957fa432e9803ab5a63ba2c5d0868144591df7db1e11dfc0e1df6261f674cb8e2046642c84aaa2f66e1e133e21e1d3af750160a9036fafb39dc14b2a38268e2d2870a32de542d112ece0dcfdc32cc0126b454604fb7a8772068e6f8f1b5c4ea776d6641c43818427efb22ca620cfa92099355f40ddb3f0699ae92a37d3014f03322b1d002408a61532551f90394bb1970295e072a7945a2992087d2c52a2e388a65a328ed52ecf49a5fd61edc1f469a15cb5f1e8b2457ef4bcac3d33faddae5cb8c79b9d54bad87031399446f99d1ef40deacc0d7ff6b27afb3673ef9fc2f6f82e84739186d9c922172eccb30e9bf7d2557112cb0db7ba26fe3e9f600f9377b0ee1f785faa66bcc572c5a79fc37ffb2ddbb719a8a4d7f9a60a0896226adad1f70701f389bff3e39326586951cb92e6bb47f55ab7702cb00a627da7334ecc9ea2aaab792ff879ca3eb0dd57cf07ece71860d16ca36df432b5f1e054e42c4300b66d01b59e164e7a78a31ca65b99e0c7db93629f77e809744a2c3e1f7ddec0901218fba2c4929eb8f2c32fe811bc4a821605ac2f49a99155fe43d4fa7bb22ddddb87d90cc4dac06027804ecb6636b985fccafd351480cc91c54810a4b7f064552bd04ae078283706e012c37fca2857ed059808559c9c200600043ae727c41d955c6439fbcb4a6a93de1223b7b092b5d7cc80d3e59c4636ea60b169fe7d1be16ab5c519c374a930d24316710fc5daa419d1fd0d9f7261c0e1c4cd43ed02772e1b0e1ada595612465ba38bb3b6896975cc2f591fab5e3d8d2408b5a8e6a07aa05162e0cd4d8356a1037dccc335b8418ff4a7c1913604c158a48d43bc73a2bbacc77d9805045523a7aad9f094a6256aad885ad464ddd3b0f50f5c58057d9dcf656ee722f78e24228affe368407d405fb26f051478a4a634415255b40e5a21384b78aa86a8d9148b7aa441df20d1bda773404821cddd073e613367b6f0dde7c38560fbd22f1a799504f4817774b7c4879a85ef612f8bbd2c19a1a0ca3cfb52cc775a2030b5087aa44236385523ca217375b598f144aca260a49325e68f4f0a53763d7e26b362baca167f8f5d1356c0718582c66bb70176b927258ef054a50aa28801d29999abf32c393012fe6289e69f952329f9e7e8d94cc4c056daffa2554b606dfab4cdb0323706b03c36825cf53b7172a6d3f2985b3a11c702bb6c23454bb940e2c63af0e06a7e1d1752eb5b3722b6d9a234b1ada92d1c4db5e287b710ff3ca58f5bc7ed9dc6938935b5c2574930b621b6dc7cafff50d39562600f74cb0dfe541ab08ea89c20fe7f02330bde610d1f64d87cf24c4609bd2f96223405fe01a829ae4ad66cf455b9dad7845c4b76c88a61f35d72a702820a4e21bf97f2958518ad9eea03f41d5ce40b64d0b24eb89c4e8d5fcc60feb20cfa407a0c4f9f7d4e51513c72fd088663c1cc1373b2f686c3d873087c5cc7e2865cdbc8a001cb4725c7b152104b2f2aadc00837516f1ecd61908d99daef3547143239344de68a4e0335f28762f4b23243dfa2d27a91af350a232cedce9a69f768226661a535ff78d6a62737c09766418c0c55de74ca31fde9658b3df065ac51a14b43eb5a3fedd3653ec4f47d8e07c0ef88bfd96898102085cb6cfeaf07262a2aeb9b3ede9b62d1e9811901832aff05a15450612596c7b55a01a516abe79369f5c48bc3bfa7ae990ed49dfcde81486feeb497202ac85970ac8902fe1227aa1ce9651532dc01fa1bdb377183ebec97c98d82edb7613cd85247f51dc1178faa285eae3abf732ad3860314f91408a6758a2cb03c209ade0d46f18f9a730a500547e797298203509ab90b24d3463796d65ce77add533c57c653e1abb712819b095c434f61d2744dc1ea45bcb1bd4fe369da894a6b8f581807fec3b9cde3cc0e9713d6d6058962ca9c02ac48a252a03154330ee8b2c475fcf571fe586c92eec20d2069b19a453219d4d485eb3724d79b59d98bd15e414ee4268c688867bddb65675384b0df99d80aed5c81f2c620cc60395e31da27d2c03b909e425c28ecf41b86391768570cce49db136f9ae46b509bc7fde813dbdeae1bded04fe877d1ad8c2a768b3b6979a7e1d858ac51195ec600c471af739bcaf4334b2ad1fced4eff9aece79d22e44ec7d507e5509c0fce50bf2bca27deb16dcb518ce1a668ed750754ed7e485c475e54a0dd0fee1b3de54a76445b00c26eaddf4fc762436c1831b8de995967359b9dea2fed4b6b8e49a21675b865414fb43185c2055e38d31c7d1e4e9575d4cac578dff795564f15f53fe1d595fad4a2ea783b58505fdb1f511eaf6814db90e9b052c640431b38afaa7dde1eedbbe071e9ecb550e63665138412130de36e0cc506ac27d8322ac15b10cab28e98aa332783592b8840f880ade095ba3558a180983ccd07c0b467446a93e8845b5d13456d47cbd70047c578fad8d4d1fded69492bff361e9bee430f14dcf460b54c19fe4b15d111b8025e241850c865ec2bef5c4bb17a66570535abebfe7079ffa08d3cee840ae58e8b62e7f5b2bab5e329218eb2a270147aeb9bb54364ccf650c4db32df7d7126ad108998f119500cf4932dc016f44bafd96ba399b5ef041d4fa826db54ecfdd9c2813540894f6131c09e17147b0f275c5848087331e7252493d8c22610ea5f57ed3e86e6e988ff8fe61c7d92fd25eec9d6115c84ae6589b585c4fb566d3cedaa8c9324c6f0c22c18e77b310a41445d39773b2bf316d1d4f57ce76db977545fc42fd6f5e38e3edcd949a16e8138b0e524c78bec41220080c60f696689325cb1c9fd31b2bfb1fd82ab917bc6c4e0b279e4acd4cdb0af1eaf702bd6783ba86d4d1a442857cc77d2b75ac709d1cadde5eddcff158351eb381c299e4a5cc9841d72b5f6f64891d3d7f28cff38b8f693fa5253c0a2fafccb6003567de111346a91518bf24b3a832d15125821c64f169c582553ff06bcdbb150df50d16643a15be0e97ffa033d9f8603ef9e09374549bfa3b3d3e1a8d1d15057a0205d8bc5f6c5e8db79e839ee7161a7ee7a1112211f6d6e3f0034fc2da223ced276d3411d3f00aa043d903855c99ce01e684ede2b30f20a271c97d8feb31092d8a2d14dbc80be73c91f3ed673fe0f94ef228bf2bb387eef34565a85250ad8ce20b16f4476116bb1ec3d7527660b9340afe9daebf9503a8523f10d186a626a2edba1984d5c37aecc68cacbe33ae035c132bd5499e23d415495254c6fe9b2dd428445f2713cf84d3710761cf895313180f3528140cbf4065125336a5e3bb225bc5c4de9127e253d5ed2529b851af4d5a0320043e72b3d33a0b0ed79365a4f5f2175c8a43bc49b2c6d6add565e2ad52b7ab5cc7bc1c38e53d546418430af289ef77dee3f977333cec988425e448fc6840b0d83497e19789836fd556483ef31d52d9d3e3eec45009cdf95ec10bd941fbb74dbc609010234344c5adea933d20ab8a0fd6d1074ba801df0e4e99dcc19870371c49941e9613790e6cf22684749a5e635b883fb4e18cc23de472195e16b0f93d85e06ceecd67437597bc24fd2ab15701cf535add541678c272faf8432df5a249747c31cc9589e7c0b05df05f6d650b109b7afa4c2525992a119c4fc425278f1b91bcee761f375a9325cd8010839b731b24602bbe8cafd51b71b22641d1decb0a767eec9afd75ed8b7437e276835c91385115dd7bc22d3ab81bbf415d003d121167c3cd17505a280194969f3daaf150d48a35416d88b47acc58b3d38cdc182ff90837c26f88d072e201d49e459415b2788618b645bb38409eac1f0a09f061c46e885bf048e03e159c23395f2cd98466f9bc5ad2d4ca25d141ecc54e2e6d3580ea73f07a556be7a24d1c4c6916e9e69dfa391212406df27206b60b75c56b8ab4dd4afc9951c6d853b62de7b1ec2838fde654e3148ec2cd71f3c970cfba59b48f58e844314d9063472b443c78883e5efedfd3a1910d8491711452b44b579f5e6e5a12b42a160fad049c7f7744a224d2a47116b8b125d735e279570d1ff6813ccf8e19b21edb538048374a9283bce7f881b8b49ff3b26e7852b40810e6261486b8a464265f7b9fa642840a60763ff83e013a65c6fae0e6e52d991906561880be095019a2594e2cd9199d1f8f59b7380e73f5cde6c8fa51dcb650073b8ceff4e16fc5988a5728f98e725bad73b27fbef663ebcb02afac9292f4ec39f89f41da2c4c02467416ef0dbf5325b605185910e72508c967f9f188a8c44ad14220a21352274ed26dba03e7e785d1ec1c53b4b888ed8eb13eeb5da1d0a65d14fee39b2e13f04b92c58334a206023791a4040cdb053e9f3fc95b8ce5a2325569de194a10be860b1977b027210dafde167938bff1fdb1c9d242790ba2d1eaf90e98d55b531e003a5183978e8d1aab7a258c0a3ab7d84e9ee1649f62f1dc42bb2242e5a1a29a41f634e65c893c463913120870438b2fa7441f5e62749138d054205a34ab678749a2f7543d0a1841785356a916e9b403c93dc03560d5fdf1f49b4f45d12b960308ea64aa81c6704f682a87f9b2004c8629b0db75f6294634468e0aeec0c2acc117dbbf8829fff6ba949982d9363a332b00d64797e19f93888bbbe98981e47140e02d409bd772c20b8ad61f6f97c4b7c5daad6788b3653c388621f0e61654268cf765eaa187cb9bc76cc986641bbd2f950dac96659a5d6a7347ff0cdfc261326befb28fba1ec77497ef5e91d2f50320aea8cf2d3bc81e29a30455e98c3ea43aa6cb0cb67ba43fd3f68808d0c074fd9450f4551d66026a4bff0e64fae53653ef473136e322b22fd648f796f79acb1400917a1597c5f3e12aad6a8bc75d501f91f989ca0849647221a5c54fdb64fc597e1bf8506ba87a144ffabadf6076af98268391d2efef10c45636294f2dc2f2c92417cbbd8a585cf03ec2f3704b6e2fc696f53a8dd73ae195cf98c840fe812ec8f0be0b7d92aa7900d52443bd9fd8f1c6f84c8b1a7890e60e68ad159b4b3340c9e2e536ae140986294f885b9201ac5f8cb6178b6337beb1bcf3ae8423a5b365d54") gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x44081) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001740)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0x108, 0x0, 0x0, 0x108, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, &(0x7f0000000100), {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, '\x00', 'hsr0\x00', {}, {0xc924387a56858725}, 0x8, 0x2, 0x28}, 0x0, 0xe8, 0x108, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@loopback, @local, 0xffffff00, 0xff, 'ip6tnl0\x00', 'ipddp0\x00', {}, {0xff}, 0x11, 0x7626faf1949fdc76, 0x20}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0xd6f, 0x5, 0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) splice(r5, 0x0, r7, 0x0, 0x802000004, 0x6) r8 = dup2(r3, r7) ioctl$TIOCCBRK(r8, 0x5428) 09:07:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8755, &(0x7f0000000040)=0x2) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/176, 0xb0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000280)={0x100000, 0x1d000, 0xf7, 0x1, 0x72}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$KVM_RUN(r1, 0xae80, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) 09:07:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8755, &(0x7f0000000040)=0x2) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/176, 0xb0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000280)={0x100000, 0x1d000, 0xf7, 0x1, 0x72}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$KVM_RUN(r1, 0xae80, 0x0) pipe(&(0x7f00000000c0)) 09:07:31 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) signalfd(r0, &(0x7f0000000000)={0x1}, 0x8) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) fsetxattr$security_selinux(r2, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:public_content_rw_t:s0\x00', 0x29, 0x5) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:07:31 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0xf}, 0xff}, 0xfe72) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) mknod(0x0, 0x0, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) symlinkat(&(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000180)='./file0\x00') fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = gettid() tkill(r6, 0x1000000000013) 09:07:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8755, &(0x7f0000000040)=0x2) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/176, 0xb0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000280)={0x100000, 0x1d000, 0xf7, 0x1, 0x72}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:07:31 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f00000000c0)={0x4, 0x5}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x800) timer_create(0x0, 0x0, &(0x7f0000000100)) accept4$llc(r2, 0x0, &(0x7f0000000040), 0x80000) gettid() [ 932.950132] net_ratelimit: 10 callbacks suppressed [ 932.950139] protocol 88fb is buggy, dev hsr_slave_0 [ 932.960502] protocol 88fb is buggy, dev hsr_slave_1 [ 932.965693] protocol 88fb is buggy, dev hsr_slave_0 [ 932.970821] protocol 88fb is buggy, dev hsr_slave_1 09:07:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8755, &(0x7f0000000040)=0x2) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/176, 0xb0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000280)={0x100000, 0x1d000, 0xf7, 0x1, 0x72}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) 09:07:32 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x181000, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000080)) gettid() 09:07:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8755, &(0x7f0000000040)=0x2) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/176, 0xb0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000280)={0x100000, 0x1d000, 0xf7, 0x1, 0x72}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) 09:07:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8755, &(0x7f0000000040)=0x2) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/176, 0xb0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000280)={0x100000, 0x1d000, 0xf7, 0x1, 0x72}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:32 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x20000) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:32 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000000)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\xf25\xd2\x9a\xd2\xc0\xd0su', 0x5) fcntl$setlease(r1, 0x400, 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x9f, 0x8a7c12dad169033) recvfrom$inet6(r2, &(0x7f0000000180)=""/158, 0x9e, 0x2240, &(0x7f0000000240)={0xa, 0x4e21, 0x6, @empty, 0x1}, 0x1c) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() [ 933.510129] protocol 88fb is buggy, dev hsr_slave_0 [ 933.515397] protocol 88fb is buggy, dev hsr_slave_1 09:07:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8755, &(0x7f0000000040)=0x2) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/176, 0xb0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x2000, 0x0) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:32 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x5) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000013) 09:07:32 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchmodat(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008050}, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0xc000) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/video35\x00', 0x2, 0x0) pwritev(r4, &(0x7f0000001e80)=[{&(0x7f0000000b40)="79d1f56bf7ef75dc4f3a58533498fa44858d8d39db673c8613d1c1c0476e244619e1b39db82582a555ba064446774bb6c2f8190e83665abaab2d5703dfdb1d944d71ec5d745e1d66217f6e8f692f6085b0a1885f439811488dd15b6fd4768c559a5505aff4c16913e5aa46cba1382ba3f50f48ed4db24b229c3ab01a0de3b3b5be2edbabcac59ba10107e2cc4ec6f4f7aeaf07d14e70c3cb9f56dd3a862e00481e9d50ad58593bb91c1b483a3d6c8fd532da8e5dbb98086f99f129d586cba38fea10567b9705d59a29c4c8e4aca3159d9816b0e714da2df0d1566cc3c106a1ac57cb382f98d500ca90f7dc13e93548e4fa9702892677f4947376645cfce1875025ee7610a3c90f2fe7d4c2f92c0eee3f9df0d5966bf399cb35cc7e0c13634befb18f073fafa7bebcfaa63aa7110bc1705e225ed3d297e996374a8ee7b3966fa5a3d4e1a4e60ae9b8d01e154309a223cb718f50c92082e0eef4839c748ca3a6b3963e14bf5f626f89a7a815b6f723d9ae25656bf58ce398185af8c572d44d1b845621761282e9a85d45f14c2a7374973357ab11b1d3405f4c0f1c39060be955481991fb5877d4b00e760247b6b0690e54e313a6f80ef4dfbac5ccb7f36ec4139aadbf828ee8241c810596a6a0813c0eda286a5db45f64e2e5a8cc60ab702e61385b8086836f3f819fe289a16832acee5d45ba8923c68ad88b969f7aba5fdd899881a93ea9c0a667fe5e6c6127b86a47f67c0b3a34b89a09f68fc800db65657d82d35b394c129268542caa0ac3cab8e5e2520526448b33a0898c289ed8538ff24e08399f2d092170314cb9a09a5d2bf3e12ee2a992d4b295e9bc46ae0a2398b29c9d67fb47b9955f30284cd6d00c87e82c402477ef269ce8825a69685d251b6af390d803241b0f88eed3613c0cea1f03de7c7030fa78dda4538b9cf52c069108e5a543098510f0a681cc7eaba3356c6f06eaa1f03ff0881c3ee0d1711b2c3dbea8a9e9c39bb97707c4650c98582c996708a9f5accf413447b9bcb5b0b48434f1cc0903152879fa06e3ec8a98ae72642510e86252d4f3330b21f6c0c3279732f50dfa9667e27c0243f5a6dfdab726eeb2bc731007f942c91600ef8841e7f25cfa3207d386d23a8e3532ba58acad7f7a02169984424e263f8239ab996ecbc96c643dae8b35bf198cfe3080683c870d9b73ece60bc2c6a5fdb5e3a7b1169d7ce57b18d0a5f24d5ce4e27dbe7e3fda1911d84f8c72fd663b536195fca759ea34587799bb47632696e559e32995107a68e68cc816efacd5bc04a5bf386149f0a25ac4a7b35e15160461967572a0dffece295c7a74f50d2a08f1df9b0468f23846db1f0544fe6050a26012c4e6f688683f06ebe30e15df507e519062bd2a7f6ca5471dbe2a20082fb9ea928daa08e024281b6848781ab5e869d94616ff2690a498c8ad3ea1e3bbc9a8a44281233d767491a586d921a18e76d65bbc09c15dd2487b3988607cf59ff01e5f4b1b969629c3230136229d6587e6371c74ddff1a041ddbe1b35e961f07b28da7de65c34c02a078b8c9a9f837aefb49f21794d0fa239c659734f59624b5836c0cfb145008d8cf07c4dcf8240bd9abe865da7245be5aa4409694acaac6be0ff9a3a88d3f076a24a21a3ac99fe28cee5a376ee50cc76d63095b359402b51cb5f72d35f279d9fca61b963bf2895cf1e9c99a4b52bb21ab029781c5fae1703dc7c0682107e8db39febf2e07602abcee86ec8be36d2d4f53ad84a9f97bbc113afa5f073f64c4fa37698ca9269a2e5a1a810d5d3e1d2aa034e6b531010d8c819fc5d9105b1294abc9c61008cf98e09223ab52c5e222539458a3b14f4e30c2e43c47eede2022155ab6fee2e342325628c5e024661807d0474aadf814cd3f26b28d01e03eff606897c9778201f19cc0e9f4fbe698c9d425877499d36ec6c4405f192afd8de7be73aab24a8a1754a7059e1ef74d830ceb9d92f0cb2b01f7e3cbabde133a1d9895caf26bda1f43ac2d30ed14e54f7cdd5327add334900657e855d4a2a67a5867ef4e484e7aff7d471ba0c57bc1b3ac11dda38f76788c97ae0c987caa4dcdab170ad1fafcc41470d1526cdfd7781a21fd1eae41c56e5636c8c3a88de2856c456e0c023ec9bc9410720f6a68e6f6ff05c778c60dead9c35151d9f943701fe2a3d3b1be0a9e030f12ab75039aaca8b6b8ab5f7b86e310a2300e149740e2c50c6489c918dbfd98a99d325c46a235bb997f41de4c95c75b46ffa16c535e587ecbb6f4c30fb06b73c9605d4559db9bf7db2754ff86f93c623f304093807bb29d9f281aec129bfc053f5a47e765ced6f086ba96a91b46f22d841378d09ca48e3d56989ea382c65513cc612494495391162faefa97afce0f47bbd2a1434d38a0a28d2de1a1a0294e4cec5ab04f2003cfeb9892ed37ea72e4b3123372dd3f5548e8ceaec161e67b5e7d3c688fd318712793b2a81e5cc82b9f3d5ba91c7b182befd01cc2af3d2618666888910068a6347c3dbcda2b7bd36fa1d217caa574c4871ede2335f74051c3b3066fff44db36ea2d3aba2ef58ed2690d3685d50c8de540616c10d8c0933bb585a33eaa9038d085c7cf50efd1b6186c898141a218ee6e809c95c2d9e305d884fe53056d9acfc76edf65dc09d41e63449721a4cb6eeac7f9a17507363ae9aa50bf4d6a0fc82026a3270462824a6d816a3fad548e8b0acca216c5cea7dcab04d144d410c746cef96185b3a36e9f6febcd744e2899a14b46d75572542f0e632f79459149ad6f622c4233863b5602062814c322bab31ef0af3a2ecd78805061e29cbd6fcb66da787c5e4d966bda9a5ef3d6478a7f334c5b7ef68561b04b3de84e3405be8007d74c692d113e4cfa15d6ebfa4df66fdf7a563c48dbf79624ca79c322eaa14f5fe5453a4049d18b34129ad0c73b3f9e1e0cdc57e138fbe6d138c789ce2e21a65627796cbdb97b8d0ef66ed50123dbda076d39c6b30b3314bffcd4f5e2281e91b4b2835754779c9a8951aa12c25dc2a456469312378ec209afba92280248a6335040718473a1582eb296b56f8e60617d78235f6108693468ec4b63497f02e94b87ead1ac025daf4410852940cb2d8bd4b2349a2c51e0506a9731af1f56403eae86dffa27e2ce3099a82f955c6bdb85c28940efdedfdfd3ae554314a2241a037d019a84bf862ab5880e296ca7d4ca41834336771d0a9ba32e0a7e1c2549ea14eba4c795ae0f0cb510abe2edb75e7cc191224b24850acf9e6c2e9bb60039463a51202f9a590c337489835cb4eba8d6fcd5c23d259b8229177f4c96f8162f4578a82df1244d7f74eba3042e01f2290c89cac2d240a55c8dd63e3c4b1c873b69ac6ddb70136e42f1c80e3f3ad04397b440e83729770a75329bd192c9a36dc6c9cdc2e8317d7e407248f0ff3e8cfc3538cd7c40dd26b2e5dfb230ee46d26bf4329f0b0eb0f4e528d8b9233aa364cfd300448c6376585249971f8827165dad3f1f32f86f81fb090bb7bc593eb695f4b678e5091d70a6f4c857d567d491dae51bb846958aaa679206e34255f9c3c57fe2d26f91080c6727d54bf95c64ba2d3eeca9db09ca1130d8a2bd3f12cd7969e99a9712ae8def0e6c048260e51f0e1166fdf0c56e00857866b8900af56f34c4cac35c01ed7011ded487d9acf4d9e53e51a918a262af3ab984e81895f21aab8acf5eb9c5abf488701ad3e12536e1ec7d36f8e88c91a10f3b6db69adad053133617d432d98ce731ac5c493987ecd8b9fef32e38049fce7c63b85446becfe32c9a6ba80667ebcec5895eb63b581a29c6c85b2a57de23a4ba49e36b616dc1275d1bd38fd00ca7794777a8f15cec79200f9846f8f192f83ee7ceadcae531a9dad228200b02c4893f03943397cdc06c14d1de973c5dac354a8ff41a95208588fe890169467d36beb9ea0b70fb3a4c2ea15c0c4482cb1df77cdab86984848f09e28efbf96b777d8d3d653e82b9f328d7447d98c02ad946988d8716f13a341c0914b46b7d4283b24eaff06358468c3f603884d7e9e5c6d90388f4d064fe3c61bb1e458c131bea9ce6992757c31f8c479f7036d0d3b972a56a7389377f2788f1d118cea4dbb2b979afdcc694463c5407086b0a13705d0f83f9bb818ab890bdc20a498da5a7c92a0dc6dcf417e6e16cc60a65dc43c9b121ae95ddf21208d3a1de5c482bb8f167b322a1f6e45fa671429faa0c44e4573d3b3ee7178db6b999b96a2cb3f1522ffb38dac921b5f243e065b6c3737d3fefead8c4adbbbc81d4a5e0bebfaaa1ce14cf09daed127141dafa485174ced0f5f69be589446fadd03448b55e87d2062cdf45c657816dd42d0101a40db71f403c3b189e70ed0e396e4a39754c668ed9714f380fe36309347bde48109cf09bee9a863689183df816826a3c89e13823fd03b9bc5558e20ff01ca5aff899c6764c8379bcf6f466f7c900fa815f9e1518da206b6bcb20325982f63b02876d10e02a35a1cc77287a34552d4dd64749763d30d4d7cc5efcf40a9a5611923cb29cf088de4ec06c8dbd01957800ff775ee0b5f0aba18276cda21e4d0de5e9f9d7bf49c561b1d9f444c3b0315115404b12f3be435bb98a16c82519c3e9fff320a643e5b2e4816800d7a846846e468a9e359af00de8e8f551c49372441b380ffdfae88573fcf86bae2d7ea75c55ad3c670a78d1eaa384c6a78c028ce656c190342e7e966a4d24d1d8be95683b82f7e6324de7894860473edd28aff0a26c0617fae261386c70adade5452ef3fe4e11ffce989a799c58e0036c47d12704867ea488b7839530428584da4cd4bdc759a02a3f027b557145eff13a8331cc364bb9eda937e292b19a4a45b164adba707330701e9181c54ba878247ec6d76b98ad74d916a782fa1419ba9ea66184e9dbff554ef4f8d0e27d9bf9395c5226e45959988c4616cf1786c3641328e0412c55cd346edbcaf08eeda1136a53a4218a45788e6a47547efdd1b3b8c80d1084a7a37c79bdb62befd08b59aeab75c7b49c5e6a4fb251a99b7633d69909a3e7a285844defdaee5942133e6464ac8e4f23630602c7efdc1216bcb641e1c0058fa39042a0ef7afb61e26fe99a485caba2e04b5b7f635d9df6c064c8374a20028ae36c717712e6d6b98c02068140b787d2589f34d9495a5043666b6e92f3c68cb1b77ff738ce3402108a89c110874cdc5cbaa9eac85b4437f622bb91ad5e8e6127926b3a80852f3a10c5bb0301d25a28156de2364fbc400d0e2c7060d2de013dbbbfeeee02e9fdbb4ecb80feced60ff68870740580af4de7bb6e1d65f658f02dc34af0e454daf72a5b2fa938f22f30335b3ac32291cfbbdbebaa1bc38f6e8b93ced877b8934ed5b4be91aed2a98017c5011b1efeb50eb66f521b78afd9191a3833c849155e69c611325f8b22d45910d64605ef926a37e8b1aea30874ef3e59f1520055b41c431202cfd05a1770cbf7882aa86679429410203f4794546a02483454e865b9a10a029237e7cd4db02d9ce595fc2887aa860fe0bf3f00ffffedeee50579b4f5e215b064c914510ef3599a528f3e9ed5b8c9036381a7f4d6e5e1600a72c4f52be2af8d911e7f6a1cd8eb3bb6111835d740987f119b48322cb1aeb89f56086b31484e8bd9a788c8c841d64b490ee3c3746ca772b53fe4fbc28453b05bca4637cea5abee4f6210e06355e893745f8f803c9d41842e0deee0438337e095e115aa375201ed4d5db1f6c33cb4ec526a3971252c6d647d37b9a6c88d4727784aeaf61e530302ae40349813a812766c5f1722a3ad", 0x133b}, {&(0x7f0000001b40)="e049e54e87e882f117725abdc7d912b2a23c90aa885a92fd12dc45cd43878b6780cda10ed039d9080cd24ce2f3ff4a3b100fd2ee0216780fe9f147d009535bab2dae1aa4e7bad084871b81757684756923d27e6463ab7b3d09687fb7bcd2f1c37b85cb92efb35e2af51f803ec433c46546f0918f1f428d02ebbd20758f3f4c84528347a267f9eec6997d8aacea276f399e9d4fb36d69358af7f63d447aa39fce4013f75bbc0763fc008edbfc43a1a9833fc9a50b4ad02f0c1574300029eae2e4721ea18dc2e349bb07cac900c1cc7c94f4c9f2e116dd5ff602c44cf9f4", 0xdd}, {&(0x7f0000001c40)="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", 0xfc}, {&(0x7f0000001fc0)="17dd26f5a390ce7db6ff6df594487f6cb6844297539eed86008cd5ce941b82de6897447a3bc74ff808f6218e9522fbf14dcefdc1ef630dc55975ac3db26f37e84eadc977000ea0c9368b99b802d323faedcd050f5e4dfef2d612e7ed7bd012b053803cd30566589b47afc046819673039ef82d92b55f49c61a492306f459b0d1ef9c6801010010c2fad6b390eaad45d7f00758d8e43475c5bf11d8609dd7d0c836baafa9832c61238636558f35e46d7537f0485b1f3e8dc21d1064147fc94712097760e532208115db3dff3286c4b7b2a088659f43377bb9a9642c00f70300fa1b9958a48364a7f300000000", 0xec}, {&(0x7f0000001e40)}], 0x5, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0x228, 0x228, 0x0, 0x0, 0x228, 0x360, 0x360, 0x360, 0x360, 0x360, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0x6, 0xffffffff, 0x101, 0x3, 0x1, 0x2, [@rand_addr="a7743ee6e6ddcb02d0eacf88b4b9bcea", @rand_addr="da601117d8467774e51e408f41841a36", @ipv4={[], [], @broadcast}, @empty, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, @rand_addr="e742cdb603994383759e56782d9f6857", @remote, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, @remote, @empty, @mcast1, @mcast2, @dev={0xfe, 0x80, [], 0xb}], 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc8, 0x110}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x3f, 0x2, 'pptp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r6 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) accept4$nfc_llcp(r6, &(0x7f0000000980), &(0x7f0000000a00)=0x60, 0x80800) write$binfmt_misc(r5, &(0x7f0000001f00)=ANY=[@ANYBLOB="73797a31f409a7619b857f0cb09baa3386a60ad88ca7008a69847995fdb577acb54236987f4d5de4cddc0f0da39be38c81bd23bde755d3882aa772f1b84bfc6eebe8bc9963bdea96f1038acb0f82de4bf354509dafa6a6377fef09caf9eac25b6d666f2ce64cbda8f640e75fe02b196b396f9493be49767b2675bb61753e44bda481966253973d4c84f9cacf4b1bbcc3bfce7aadc65ff12ef79eac7de68d97da7cce364fd948b58255"], 0x9e) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000a80)='/selinux/avc/cache_stats\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r9, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}]}, 0x48}, 0x1, 0x0, 0x0, 0x4dc02}, 0x20004041) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000001e40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x360f0a927bddb241}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d40)={0x84, r9, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x35f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9b3b}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa7e4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8}, 0xc000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000a40)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000020c0)={{0x5, 0x0, 0x1, 0x5, 'syz1\x00', 0x4}, 0x0, [0x8, 0x8000, 0x1ff, 0x9, 0x4, 0x80000001, 0x7, 0x7fff, 0x1, 0xffffffff, 0x5, 0x26, 0x7fff, 0x5, 0x3ff, 0x5, 0x8001, 0x6bcb0a99, 0x6, 0xfffffffffffffffb, 0x3, 0x10001, 0x9, 0x800, 0x4, 0x1, 0x40, 0xd5, 0x5, 0x6, 0x1, 0x2, 0x101, 0x7, 0x10000, 0x1, 0xffff, 0x80000001, 0xfff000000, 0x0, 0x80000001, 0xff, 0x21bc800000000000, 0x1, 0xd18b, 0x7fffffff, 0x4, 0x0, 0x7, 0x3, 0x7, 0xcabe, 0x788, 0x7, 0x100, 0x2, 0xffff, 0x400, 0x1f, 0xfffffffffffffffc, 0x10000000000000, 0x5, 0x7, 0x4e0bc508, 0x9, 0x7, 0x1, 0x0, 0xa7, 0x4000000000000, 0x0, 0x0, 0xffffffffffff8000, 0xa210, 0x8, 0x7, 0x2, 0xc5, 0x4, 0x1, 0x0, 0x0, 0x3, 0x7fffffff, 0x0, 0x3, 0x6, 0x2, 0x8, 0xb54, 0x4, 0x5, 0x8, 0x100, 0x100000001, 0xa4, 0xedb, 0x4, 0x4, 0x80000001, 0x4, 0x80, 0x101, 0x6, 0x0, 0x4, 0x0, 0x4, 0x2fb, 0x8, 0x96, 0x2e69, 0x8001, 0xc84d, 0x7, 0x3, 0x8001, 0x0, 0x3, 0x2, 0x80000000, 0x0, 0x8, 0x7f, 0x5, 0x8, 0x2, 0x1], {r10, r11+30000000}}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r5, 0xae80, 0x0) 09:07:32 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xd9b12709ad8ae6dc}, 0x0, 0x20002a5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000140)) r3 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x57, 0x101000) execveat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x100) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:07:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8755, &(0x7f0000000040)=0x2) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/176, 0xb0) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:32 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x214840, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x100, @empty, 0x10000}, 0x1c) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x802000004, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r8, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x72, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000180)={r9, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000140)=ANY=[@ANYRES32=r9, @ANYBLOB="02007f"], &(0x7f0000000180)=0xa) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r10, @in={{0x2, 0x4e21, @multicast1}}, 0xfffffff8, 0x2, 0x1, 0x1, 0x120}, 0x98) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() r11 = getpid() sched_setattr(r11, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r11, 0x9, 0x6) gettid() 09:07:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8755, &(0x7f0000000040)=0x2) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 934.070143] protocol 88fb is buggy, dev hsr_slave_0 [ 934.075406] protocol 88fb is buggy, dev hsr_slave_1 09:07:33 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000080)="651b8a6af2", 0x5}, {&(0x7f0000000200)="cad7fe70e8474f389caed42c932d11a0a7e6078798d2478715eeb1238f271074941ade86cb8a733392dedc72f22ffba36aa0c7900a35ea70cbdb8c712c3081dc9f3cfa41642c1935c33109da148082e5bc5319c7ea8535ea3187ea86a0be16698e1a3dcef6be8f0d2daf0c51e0f2dc7f313ce321951a631bf26db6a945cd1d629b4efcc942", 0x85}, {&(0x7f00000002c0)="e69c802dc1d51194053612171e32417817216a1fcf0d5c", 0x17}], 0x3) fcntl$setlease(r0, 0x400, 0x1) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f0000000100)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0xf9, 0x0) fcntl$setown(r3, 0x8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() [ 934.262650] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 934.299715] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 934.309836] CPU: 0 PID: 8483 Comm: syz-executor.1 Not tainted 4.14.150 #0 [ 934.316798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 934.326341] Call Trace: [ 934.328939] dump_stack+0x138/0x197 [ 934.332576] warn_alloc.cold+0x96/0x1af [ 934.336841] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 934.341783] ? check_preemption_disabled+0x3c/0x250 [ 934.347075] ? retint_kernel+0x2d/0x2d [ 934.350987] __alloc_pages_slowpath+0x23c6/0x2930 [ 934.355875] ? warn_alloc+0xf0/0xf0 [ 934.359529] ? __might_sleep+0x93/0xb0 [ 934.363432] __alloc_pages_nodemask+0x62c/0x7a0 [ 934.368109] ? rcu_read_lock_sched_held+0x110/0x130 [ 934.373134] ? __alloc_pages_slowpath+0x2930/0x2930 [ 934.378164] alloc_pages_current+0xec/0x1e0 [ 934.382496] kvm_mmu_create+0xdf/0x1e0 [ 934.386394] kvm_arch_vcpu_init+0x29c/0x8e0 [ 934.390730] kvm_vcpu_init+0x272/0x360 [ 934.394631] vmx_create_vcpu+0xfc/0x29c0 [ 934.398702] ? mutex_trylock+0x1c0/0x1c0 [ 934.402780] ? handle_wrmsr+0x6d0/0x6d0 [ 934.406939] ? wait_for_completion+0x420/0x420 [ 934.411537] kvm_arch_vcpu_create+0x8c/0xc0 [ 934.415868] kvm_vm_ioctl+0x501/0x1600 [ 934.419771] ? __lock_acquire+0x5f7/0x4620 [ 934.424014] ? v4l2_write+0x183/0x200 [ 934.427830] ? kvm_set_memory_region+0x50/0x50 [ 934.432425] ? debug_smp_processor_id+0x1c/0x20 [ 934.437092] ? perf_trace_lock+0x109/0x500 [ 934.437108] ? check_preemption_disabled+0x3c/0x250 [ 934.446966] ? debug_smp_processor_id+0x1c/0x20 [ 934.451635] ? perf_trace_lock+0x109/0x500 [ 934.451647] ? save_trace+0x290/0x290 [ 934.451657] ? SOFTIRQ_verbose+0x10/0x10 [ 934.451669] ? __fget+0x210/0x370 [ 934.451680] ? find_held_lock+0x35/0x130 [ 934.451691] ? __fget+0x210/0x370 [ 934.451709] ? kvm_set_memory_region+0x50/0x50 [ 934.451720] do_vfs_ioctl+0x7ae/0x1060 [ 934.451734] ? selinux_file_mprotect+0x5d0/0x5d0 [ 934.451742] ? lock_downgrade+0x740/0x740 [ 934.451752] ? ioctl_preallocate+0x1c0/0x1c0 [ 934.451764] ? __fget+0x237/0x370 [ 934.451782] ? security_file_ioctl+0x89/0xb0 [ 934.451793] SyS_ioctl+0x8f/0xc0 [ 934.507691] ? do_vfs_ioctl+0x1060/0x1060 [ 934.511857] do_syscall_64+0x1e8/0x640 [ 934.515731] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 934.520565] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 934.525741] RIP: 0033:0x459ef9 [ 934.528914] RSP: 002b:00007f46f1d67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 934.539213] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 934.546469] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009 [ 934.553724] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 09:07:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 934.560978] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f46f1d686d4 [ 934.568229] R13: 00000000004c300e R14: 00000000004d6d80 R15: 00000000ffffffff 09:07:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 934.620599] warn_alloc_show_mem: 1 callbacks suppressed [ 934.620605] Mem-Info: [ 934.629297] active_anon:1113388 inactive_anon:19562 isolated_anon:0 [ 934.629297] active_file:13028 inactive_file:6615 isolated_file:8 [ 934.629297] unevictable:2560 dirty:43 writeback:0 unstable:0 [ 934.629297] slab_reclaimable:19529 slab_unreclaimable:127258 [ 934.629297] mapped:60600 shmem:4153 pagetables:45791 bounce:0 [ 934.629297] free:158966 free_pcp:535 free_cma:0 09:07:33 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000013) [ 934.730010] Node 0 active_anon:1820856kB inactive_anon:66744kB active_file:4kB inactive_file:28kB unevictable:10240kB isolated(anon):0kB isolated(file):32kB mapped:208928kB dirty:0kB writeback:0kB shmem:3048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 886784kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 09:07:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 934.859595] Node 1 active_anon:2632696kB inactive_anon:11504kB active_file:52108kB inactive_file:26432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:33572kB dirty:172kB writeback:0kB shmem:13564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 09:07:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) r4 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f00000002c0)={r5}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000100)={r5, &(0x7f0000001040)=""/4096}) r6 = getpid() ptrace$setregs(0x82c8b97d255a6967, r6, 0x3c, &(0x7f0000000000)="cd6e9cc263158c980e86c39189") ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getdents64(r7, &(0x7f0000000500)=""/189, 0xbd) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80026700000", @ANYRES16=0x0, @ANYBLOB="000329bd7000fcdbdf25040000002c0009000800010007000000080001001700000008000200bc00000008000200040000000800020004000000980005004c000200080001000300000008000300060000000800020005000000080003004700000008000300840100000800010005000000080001000c0000000800030004000000080001000c0000000c0002000800040007000000080001006962000008000100657468000800010065746800080001006574680014000200080002000200000008000100010000000800010065746800"], 0xd8}, 0x1, 0x0, 0x0, 0xb6cbf724580b81d9}, 0x404c000) getdents(r7, &(0x7f0000000ea9)=""/375, 0x177) [ 934.897530] Node 0 DMA free:10524kB min:216kB low:268kB high:320kB active_anon:5052kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 934.931774] lowmem_reserve[]: 0 2580 2580 2580 09:07:33 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0xf5359550b5abbf6f, 0xfffffffffffffffc, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, r2, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x2c, 0x0, 0x3f) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x683a15046b0ff6c3) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() [ 934.936920] Node 0 DMA32 free:37472kB min:36468kB low:45584kB high:54700kB active_anon:1815804kB inactive_anon:66744kB active_file:4kB inactive_file:28kB unevictable:10240kB writepending:0kB present:3129332kB managed:2644884kB mlocked:10240kB kernel_stack:19232kB pagetables:64060kB bounce:0kB free_pcp:104kB local_pcp:0kB free_cma:0kB [ 935.030178] protocol 88fb is buggy, dev hsr_slave_0 [ 935.035335] protocol 88fb is buggy, dev hsr_slave_1 [ 935.106475] lowmem_reserve[]: 0 0 0 0 [ 935.127034] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 935.280162] lowmem_reserve[]: 0 0 0 0 [ 935.284273] Node 1 Normal free:588188kB min:53420kB low:66772kB high:80124kB active_anon:2632560kB inactive_anon:11512kB active_file:52116kB inactive_file:26464kB unevictable:0kB writepending:428kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:43296kB pagetables:118936kB bounce:0kB free_pcp:1324kB local_pcp:700kB free_cma:0kB [ 935.318052] lowmem_reserve[]: 0 0 0 0 [ 935.322258] Node 0 DMA: 7*4kB (UME) 12*8kB (UME) 12*16kB (U) 13*32kB (UM) 9*64kB (UE) 6*128kB (UE) 3*256kB (UE) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10524kB [ 935.338978] Node 0 DMA32: 434*4kB (UMEH) 468*8kB (UMEH) 869*16kB (UMEH) 549*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36952kB [ 935.353638] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 935.373462] Node 1 Normal: 129*4kB (UME) 144*8kB (UME) 46*16kB (UME) 15*32kB (UME) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 141*4096kB (M) = 589188kB [ 935.392363] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 935.404761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 935.413491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 09:07:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000500)=""/189, 0xbd) semget$private(0x0, 0x9e4aee7569f229b9, 0x4) r1 = semget$private(0x0, 0x207, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0x6}], 0x1) semop(r1, &(0x7f0000000080)=[{}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) semtimedop(r1, &(0x7f0000000200)=[{0x0, 0xfd, 0x800}, {0x0, 0x8000, 0x800}, {0x4, 0x0, 0x2800}, {0x2, 0xfffa, 0x1800}], 0x4, &(0x7f0000000240)={0x77359400}) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000040)="e25683a85209a61c1c7267d474e8f5d3837372ff11581c055adcac827831c6bbe356259392f3aafcdec44e81f5c017f6511482ef53edb84bd7cb62fcc12429b9134cd4329f43b24ebdbb6dc8831d2d1265c775243f02a398a08b82bc1457648448174798312d2f08441d81f3ee4ba09f9e", &(0x7f00000000c0)=""/216}, 0x20) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:34 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) keyctl$session_to_parent(0x12) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="c40d9e38469731b7e83dafb89af29ab8deb81fdf69ac9ddbeeaf25fd7b6bfbc54ef14a697235e85a882f8262b28ee5abf78e5a3b044b0b6a4853cc394a8efd3ac8ddea037bac572cae4247445ce22b7c499b664fdcb24eb508100010ae6b165cd2a110fb36456c6a5e8b0709b4429eae6a11a76a02feb6c8c6a22d17cdd378f2a32dccffda02e3aec034b9547e84599301f78b810b3855a95afdac318e966d26c731926b9154708a34e502c5bd586f28e843f667eafd7d58084b29c0342645", 0xbf}], 0x1, &(0x7f0000000180)}, 0x800) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:07:34 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x145460, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x800) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r4, 0x9, 0x6) r5 = syz_open_procfs(r4, &(0x7f00000001c0)='cmdline\x00') ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000200)=0x1) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @loopback, 0x80000001, 0x2, 0x3, 0x100, 0x3, 0x20001, r3}) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = gettid() tkill(r6, 0x1000000000013) 09:07:34 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000000)={0x1, 0x8, 0x7, 0x9, 0xfff, 0x0, 0x5}) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() [ 935.423010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 935.431715] 23813 total pagecache pages [ 935.435692] 0 pages in swap cache [ 935.439126] Swap cache stats: add 0, delete 0, find 0/0 [ 935.445168] Free swap = 0kB [ 935.448194] Total swap = 0kB [ 935.451349] 1965979 pages RAM [ 935.454446] 0 pages HighMem/MovableOnly [ 935.458475] 333229 pages reserved [ 935.462330] 0 pages cma reserved 09:07:34 executing program 3: getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/189, 0x25c) getdents(0xffffffffffffffff, &(0x7f0000000ea9)=""/375, 0x177) 09:07:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) socket$rxrpc(0x21, 0x2, 0xb) getdents64(r0, &(0x7f0000000500)=""/189, 0xbd) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x40080, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x401) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) getdents(r2, &(0x7f0000000ea9)=""/375, 0xffffff27) 09:07:34 executing program 3: getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/189, 0x25c) getdents(0xffffffffffffffff, &(0x7f0000000ea9)=""/375, 0x177) 09:07:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f00000000c0)=""/189, 0x77) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000280)={{0x1f, 0x40}, {0x36, 0x80}, 0x8, 0x4, 0xcd}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0xc) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x7f, 0x0, 0x2, 0x1f, 0x96, 0x7, 0x7ff, 0xe546c5e, 0xf5b, 0xbf0c, 0x1, 0x100000000, 0x3, 0x400000000000, 0x2, 0xcc3], 0x10000, 0x100080}) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000180)) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:34 executing program 3: getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/189, 0x25c) getdents(0xffffffffffffffff, &(0x7f0000000ea9)=""/375, 0x177) 09:07:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000500)=""/189, 0xbd) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) socket$inet(0x2, 0x0, 0x3) 09:07:34 executing program 3: r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:34 executing program 3: r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:34 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000180)={0x8, 0x2, 0x3, 0x68890e6b061fb8e2, 0x8}) getdents64(r0, &(0x7f0000000500)=""/189, 0xbd) write$UHID_CREATE(r0, &(0x7f0000000000)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00@\x00\xed|\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\b\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', &(0x7f00000015c0)=""/4096, 0x1000, 0x4, 0x6, 0x6, 0x4, 0x7}, 0x120) 09:07:35 executing program 3: r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:35 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000013) 09:07:35 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000000)) socket(0x0, 0x80000, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:35 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="02051f080f0000002dbd7000fbdbdf25010014000100000002000100000004d520882704000000200800120000007300bf6b6e00f30600000600ff00040200004100000000000000e000000200000000000000000000000002001300030000002dbd7000"/120], 0x78}}, 0x4c010) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x802000004, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000240)={@remote, 0x3d, r8}) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:07:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000500)=""/189, 0xbd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) getdents(r2, &(0x7f0000000000)=""/342, 0x156) 09:07:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x37, 0x4) getdents64(r0, &(0x7f0000000500)=""/189, 0xbd) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(0xffffffffffffffff, &(0x7f0000000500)=""/189, 0xbd) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000, 0x7f) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10b002, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) 09:07:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000500)=""/189, 0xbd) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000001c0)={0x0, 0x7, 0x8, 0x1, 0xb, 0x9, 0x7f, 0x20, 0x8, 0xff}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/375, 0x177) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)="8aaffc21d990c216e3cffd1b3110fc167c96a3cc1f0ffe63f2f05437fa63295c2ee8c18681c436901ee123d7c22fbc654f209f7fe1e671606b31181b1cf88850c67bc9419f4d98f6ecf888544158fae8fdaf3d66d333d21666c8fbe802f58fc464db76226f5dbeddd902fa8f394b59983c3c889d45b8f022dbb64fe926b0ad40024211f7aee4016f6940ea79fa2926a7fcb745c0f5168f9a7070e05e59bbe237c1170395143ff57567deef5ebfafda1cc389caade943e70c697648d1", 0xbc, r0}, 0x68) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000340)=0x2, 0x4) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) syz_open_pts(r2, 0x88000) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) 09:07:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, 0x0, 0x0) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:36 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, 0x0, 0x0) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r4 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) sendfile(r3, r4, 0x0, 0x20000102000007) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x802000004, 0x6) r9 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r9, 0xc0086423, &(0x7f00000002c0)={r10}) ioctl$DRM_IOCTL_RM_CTX(r8, 0xc0086421, &(0x7f0000000080)={r10, 0x1}) 09:07:36 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f}, 0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$RTC_PIE_OFF(r3, 0x7006) r4 = gettid() tkill(r4, 0x1000000000013) 09:07:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000500)=""/189, 0xbd) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40200, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) sendfile(r3, r1, &(0x7f0000000080), 0x7) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000000)={{0x7, 0x0, @identifier="4efcce63e1aa93d99f0900f3414995ea"}}) 09:07:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, 0x0, 0x0) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000500)=""/189, 0xbd) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) r1 = accept4$x25(r0, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x800) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) 09:07:36 executing program 1: setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140)={{0x5e, @broadcast, 0x4e24, 0x0, 'wlc\x00', 0x18, 0x4, 0x5e}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x4e21, 0x10000, 0x8d5, 0x72, 0xffff}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000040)) ioctl(r0, 0x75de, &(0x7f0000001140)="0800b5055e0bcfe87b0071") setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x1, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0xfffffffa]}, 0x5c) pipe(&(0x7f00000004c0)) socket$inet(0x2, 0x5, 0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 09:07:36 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r2, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x802000004, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r8, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01004100", @ANYRES32=0x0], &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x72, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000180)={r9, 0x7}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={r9, @in6={{0xa, 0x4e22, 0x9, @empty, 0x1}}, 0x0, 0xd, 0x800, 0x7fff, 0x80}, 0x98) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000000)={0x80fa8e6f65d50158, 0x597, 0x1}) fcntl$setown(r3, 0x8, 0x0) execveat(r5, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r10, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) write$binfmt_aout(r10, &(0x7f0000000640)={{0x10b, 0x5, 0x0, 0x2fe, 0x19, 0x282, 0x2fb, 0x1}, "01c806ae739640a9d815ffc4c118c1a8553c4486f5bc6c012d2851e6ef01f0ce3371f83331f305f1effa30c1a544511ca2bb", [[], [], [], [], [], []]}, 0x652) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:07:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(0xffffffffffffffff, &(0x7f0000000ea9)=""/375, 0x177) 09:07:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(0xffffffffffffffff, &(0x7f0000000ea9)=""/375, 0x177) 09:07:36 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, r2, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) lookup_dcookie(0xb4, &(0x7f0000000000)=""/182, 0xb6) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() [ 938.019013] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 938.061465] EXT4-fs error (device loop1): ext4_iget:4712: inode #2: comm syz-executor.1: root inode unallocated 09:07:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000500)=""/189, 0xbd) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x802000004, 0x6) ioctl$VIDIOC_TRY_DECODER_CMD(r7, 0xc0485661, &(0x7f0000000980)={0x6, 0x1, @stop_pts=0x7f}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000080", @ANYRES32=0x0], &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x72, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000180)={r8, 0x7}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r8, 0xfffffffe, 0x5de2e7edec222a9c}, 0xc) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x3ff, 0x6, &(0x7f0000000800)=[{&(0x7f0000000280)="3c474b240e3dfcb80ebf16ffcbda8e68640f673a1f1e196617d1d72ba07d43c0dc9bda6a4f0c3a6f0c15b011b35f51f5641228876f0a5459a0cd694e4379199498618a774e2f33aba30f57207b7a6f1369927cb486d3c876de88d5800d90dbfb3e58b4cd0e93520ee24f83be223f0f0907d62248bb2b86c497cfca", 0x7b, 0x8000}, {&(0x7f0000000600)="beb2a9a0c122cabd10c97caa3a43182b162c7fdfc720e15010c8bfc176e0d139ead1f9855fcfe346675ecfdd9e5585315c4448f2446300161d0c1fb408e7e111ef07ccc9981b170b12a5ef04bb875937ba9f78648a4b68c8b52637da4aa450b93f6c4d803da0e0dbc977391b427c50e2e51a026b8ed206968ef7d62735ae53ad0cb9d09a", 0x84, 0x91}, {&(0x7f00000006c0)="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", 0xfe, 0x7fffffff}, {&(0x7f0000000300)="de61bc5fad480e7f89594b634993d6ffa97ac5212e80ca4272fbaf326a4fe8fc91468a548094a879d8c88066d5fe2bd5e700918d290148e735daddd6f73fefb7aa03f7e5f9cda41a8578eb69f51cbc8a1bbc745ce784014ce85212eb8f03c4f879", 0x61, 0x15af}, {&(0x7f00000001c0)="a9a0c77621ab594a76b73d4bdaf6367627f86d1e179d214b420ac997fc61", 0x1e, 0x1}, {&(0x7f00000007c0)="fc4a408f52d8a1ae386c71ed82ad72fc29130d7ff4eac4204c9796bf4bc2de8dd9a1947d", 0x24, 0xe78}], 0x8, &(0x7f00000008c0)={[{@uni_xlateno='uni_xlate=0'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}, {@uni_xlateno='uni_xlate=0'}, {@utf8='utf8=1'}, {@iocharset={'iocharset', 0x3d, 'cp860'}}], [{@obj_type={'obj_type'}}, {@dont_measure='dont_measure'}, {@smackfstransmute={'smackfstransmute'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x36, 0x35, 0x38, 0x35, 0x62, 0x64, 0x63], 0x2d, [0x2, 0x35, 0x63, 0x64], 0x2d, [0x61, 0x36, 0x722ecf4a6e0362f8, 0x36], 0x2d, [0x35, 0x66, 0x3, 0x35], 0x2d, [0x72, 0x2, 0x30, 0x64, 0x38, 0x63, 0xdd80d9d08b5cb083, 0x38]}}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r11, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x72, &(0x7f0000000000)={r12, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000180)={r12, 0x7}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000a00)={r12, 0x400}, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r13, 0x0, 0x802000004, 0xa559fd51e8ea9566) fcntl$setlease(r9, 0x400, 0x4) 09:07:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(0xffffffffffffffff, &(0x7f0000000ea9)=""/375, 0x177) [ 938.121038] EXT4-fs (loop1): get root inode failed [ 938.141127] EXT4-fs (loop1): mount failed [ 938.230146] net_ratelimit: 12 callbacks suppressed [ 938.230152] protocol 88fb is buggy, dev hsr_slave_0 [ 938.240617] protocol 88fb is buggy, dev hsr_slave_1 09:07:37 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000040)={0x330, "f0bb9f9d5a235f6af6294ede700748a7f15da72fdced073555ce76800dafcd3e", 0x75a4ff3ea130801c}) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz0\x00', {0x9, 0x6, 0x3, 0x38}, 0x48, [0x3f, 0x401, 0x3f, 0x10000, 0x6, 0x80000000, 0x5, 0x7, 0x0, 0x10001, 0x800, 0xfffffff7, 0xec, 0x1ff, 0xf716, 0x7ff, 0x6, 0xb732, 0x23, 0xffff, 0xffff, 0x5, 0x4c, 0x3ae, 0x7, 0xbc1d, 0x80000000, 0x0, 0x7, 0x800, 0x3, 0x81, 0x0, 0x4, 0x9, 0x200, 0xd2c9, 0x80, 0x8, 0x2, 0x5, 0x101, 0x800, 0x1, 0x88, 0x3e79, 0x6, 0x1ff, 0xca2a, 0x1, 0x5, 0x3, 0x8000, 0x7, 0x50, 0x8eb, 0xff000, 0xd820, 0x8, 0x1, 0xb5, 0x8, 0x4, 0xdc2], [0xfff, 0x6, 0xea83, 0x6, 0x80, 0x7f, 0x0, 0x9, 0x100, 0x0, 0x10001, 0x400, 0x1, 0x9, 0x4, 0x400, 0xdb1, 0x5, 0x4, 0x7fffffff, 0x7fff, 0x8, 0x8001, 0x2, 0x0, 0x0, 0x7, 0x10001, 0x9, 0x5, 0xfffffffd, 0x800, 0x8001, 0x69b5, 0x101, 0xf1ad, 0xbce, 0xb, 0xe76, 0x0, 0x77, 0x2, 0x57, 0x1, 0x17f21a8c, 0x20, 0x80000000, 0x8, 0x81, 0x0, 0x4, 0x3, 0x6, 0x9, 0xfbe, 0xffffff82, 0x5, 0x9, 0x33, 0x80000001, 0x54800000, 0xfc4, 0x1, 0x5], [0x4481, 0x100, 0x0, 0x80000000, 0x3, 0x74f6, 0x1, 0x7, 0x200, 0xefc, 0x9, 0x0, 0xfe, 0x4, 0x7fff, 0x0, 0xff, 0x1ff, 0x0, 0x0, 0xb80677c, 0x80, 0x84d1, 0x8b, 0x5, 0x1, 0x2, 0x200, 0x0, 0x1, 0xffffff81, 0x2, 0x4, 0x1000000, 0x4, 0x6, 0x40000000, 0x7f, 0x8000, 0x7, 0x100, 0xe034, 0x5, 0x1, 0x909d, 0x0, 0x1000, 0x4, 0xfff, 0x40, 0xffff0000, 0xffffffff, 0x3e8, 0x193, 0x5f, 0x401, 0x1ff, 0xf47c, 0x8001, 0x7fff, 0x5, 0x80000000, 0x7010, 0x80000000], [0x6, 0x7f3, 0x200, 0x1c0c9990, 0x7, 0x8, 0x0, 0x0, 0x1, 0x1579, 0xffff, 0x8001, 0x9, 0x8001, 0x7, 0x1, 0xa8c5, 0x8, 0x1, 0x0, 0x0, 0x7, 0x41, 0x6, 0x800, 0x75e, 0x2, 0x8001, 0x0, 0x6, 0x400, 0x7bc7eeb5, 0x6, 0x0, 0x200, 0xbf, 0x1f, 0x3, 0xb3, 0x400, 0x0, 0x8, 0x2, 0x3e36, 0x0, 0x6, 0x3, 0x5648000, 0xffffff00, 0x6eac8c09, 0x2, 0x5, 0x0, 0xfa, 0xffff, 0x9, 0x7, 0x492dc093, 0x9, 0x3, 0x5, 0x3000000, 0x6, 0x4]}, 0x45c) r5 = gettid() tkill(r5, 0x1000000000013) 09:07:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) write$ppp(r2, &(0x7f0000000040)="4ac95f941414ef1801b3efa1c7ae6ce9cd9f67c64b75714f36c213c813b26f2d1dad4b63a10b5943a6819b81527d2e0098954165059be0bf27ec25c484c16eaa619557e0337764895bfcd0e4b2f5769f56fa19f9df1dc55c6f30978f07fdcb1838202cdea7d0025543f60b6065240f8359f34e8ce8426455a05b6d36fc86df4dd717194b2862506ae5975eaedf7cf4aea51e79dc78683a", 0x97) sendmsg$nl_route(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="280008000000000000006500000000009db910d4", @ANYRES32=0x0, @ANYBLOB="000000000000000008000e0000000000"], 0x28}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x297ef) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x200000, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000380)={0x4, 0xc000}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x1000000080}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000140)={'bond_slave_0\x00', {0x2, 0x4e21, @remote}}) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x400000, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000180)={@multicast1, @broadcast, 0x0}, &(0x7f00000001c0)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r9, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0x802000004, 0x6) ioctl$FICLONE(r9, 0x40049409, r11) bind$bt_hci(r7, &(0x7f0000000200)={0x1f, r8, 0x1}, 0xc) ioctl$RTC_PIE_ON(r2, 0x7005) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) [ 938.337399] FAT-fs (loop2): Unrecognized mount option "obj_type=" or missing value 09:07:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, 0x0, 0x0) 09:07:37 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0x4056e4977c4bb72) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r3) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() [ 938.534089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8816 comm=syz-executor.1 09:07:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, 0x0, 0x0) 09:07:37 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xa25120adced8aab2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r2, 0x8) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r4, 0x9, 0x6) getpgrp(r4) 09:07:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, 0x0, 0x0) [ 938.952313] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) 09:07:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x802000004, 0x6) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@bcast, @null, @bcast, @rose, @netrom, @default, @remote, @netrom]}, &(0x7f0000000080)=0x48) getdents64(r0, &(0x7f0000000500)=""/189, 0xbd) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 939.036274] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 939.066455] CPU: 1 PID: 8816 Comm: syz-executor.1 Not tainted 4.14.150 #0 [ 939.073440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 939.082808] Call Trace: [ 939.085493] dump_stack+0x138/0x197 [ 939.089128] warn_alloc.cold+0x96/0x1af [ 939.093106] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 939.097963] ? wait_for_completion+0x420/0x420 [ 939.103074] __alloc_pages_slowpath+0x23c6/0x2930 [ 939.107940] ? warn_alloc+0xf0/0xf0 [ 939.111579] ? __might_sleep+0x93/0xb0 [ 939.115473] __alloc_pages_nodemask+0x62c/0x7a0 [ 939.120146] ? rcu_read_lock_sched_held+0x110/0x130 [ 939.125167] ? __alloc_pages_slowpath+0x2930/0x2930 [ 939.130193] alloc_pages_current+0xec/0x1e0 [ 939.134521] kvm_mmu_create+0xdf/0x1e0 [ 939.138438] kvm_arch_vcpu_init+0x29c/0x8e0 [ 939.142770] kvm_vcpu_init+0x272/0x360 [ 939.146669] vmx_create_vcpu+0xfc/0x29c0 [ 939.150736] ? mutex_trylock+0x1c0/0x1c0 [ 939.154818] ? handle_wrmsr+0x6d0/0x6d0 [ 939.158802] ? wait_for_completion+0x420/0x420 [ 939.163483] kvm_arch_vcpu_create+0x8c/0xc0 [ 939.167819] kvm_vm_ioctl+0x501/0x1600 [ 939.171718] ? __lock_acquire+0x5f7/0x4620 [ 939.175958] ? find_held_lock+0x35/0x130 [ 939.180039] ? kvm_set_memory_region+0x50/0x50 [ 939.184976] ? debug_smp_processor_id+0x1c/0x20 [ 939.189650] ? perf_trace_lock+0x109/0x500 [ 939.193893] ? check_preemption_disabled+0x3c/0x250 [ 939.198917] ? debug_smp_processor_id+0x1c/0x20 [ 939.203594] ? perf_trace_lock+0x109/0x500 [ 939.207842] ? save_trace+0x290/0x290 [ 939.211648] ? SOFTIRQ_verbose+0x10/0x10 [ 939.215717] ? __fget+0x210/0x370 [ 939.219172] ? find_held_lock+0x35/0x130 [ 939.223242] ? __fget+0x210/0x370 [ 939.226707] ? kvm_set_memory_region+0x50/0x50 [ 939.231328] do_vfs_ioctl+0x7ae/0x1060 [ 939.235264] ? selinux_file_mprotect+0x5d0/0x5d0 [ 939.240036] ? lock_downgrade+0x740/0x740 [ 939.244195] ? ioctl_preallocate+0x1c0/0x1c0 [ 939.248614] ? __fget+0x237/0x370 [ 939.252079] ? security_file_ioctl+0x89/0xb0 [ 939.256501] SyS_ioctl+0x8f/0xc0 [ 939.259881] ? do_vfs_ioctl+0x1060/0x1060 [ 939.264558] do_syscall_64+0x1e8/0x640 [ 939.268446] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 939.273301] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 939.278490] RIP: 0033:0x459ef9 [ 939.281680] RSP: 002b:00007f46f1d67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 939.289394] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 939.296773] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009 [ 939.304052] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 939.311344] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f46f1d686d4 [ 939.318620] R13: 00000000004c300e R14: 00000000004d6d80 R15: 00000000ffffffff [ 939.326383] protocol 88fb is buggy, dev hsr_slave_0 [ 939.331536] protocol 88fb is buggy, dev hsr_slave_1 [ 939.336805] protocol 88fb is buggy, dev hsr_slave_0 [ 939.341928] protocol 88fb is buggy, dev hsr_slave_1 [ 939.344835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8820 comm=syz-executor.1 [ 939.350551] Mem-Info: [ 939.364341] active_anon:1113786 inactive_anon:19561 isolated_anon:0 [ 939.364341] active_file:13049 inactive_file:6635 isolated_file:0 [ 939.364341] unevictable:2560 dirty:56 writeback:0 unstable:0 [ 939.364341] slab_reclaimable:19347 slab_unreclaimable:127891 [ 939.364341] mapped:60614 shmem:4153 pagetables:46094 bounce:0 [ 939.364341] free:157827 free_pcp:346 free_cma:0 [ 939.399518] Node 0 active_anon:1820856kB inactive_anon:66744kB active_file:32kB inactive_file:32kB unevictable:10240kB isolated(anon):0kB isolated(file):0kB mapped:208928kB dirty:12kB writeback:0kB shmem:3048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 886784kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 09:07:38 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:38 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x7) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:07:38 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3499}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:38 executing program 2: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x2) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x1, 0x2}) fcntl$setstatus(r0, 0x4, 0x44000) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000001, &(0x7f00000001c0)=0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r3, 0x9, 0x6) r4 = open(&(0x7f0000000200)='./bus\x00', 0x148000, 0xe1) ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000000240)=0x10001) r5 = syz_open_procfs(r3, &(0x7f0000000080)='attr/current\x00') getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000100)={0x5, 0x100, 0x400, 0x3, 0x16, 0x0, 0x2c, 0x5, 0xffff, 0x9, 0x0, 0x9}) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) 09:07:38 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x35, "1a62b7517471446614f6b14fee42a03156136825f10abeb57013797d7956fd598e5255b018335cbdeb2a2b9c45f7d275cee0bb84df"}, &(0x7f0000000040)=0x3d) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r5, 0x7fffffff, 0x30}, 0xc) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x510320801640165b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r6 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r6, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r6, 0x8, 0x0) execveat(r6, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = gettid() tkill(r7, 0x1000000000013) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x802000004, 0x6) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]}) [ 939.619036] Node 1 active_anon:2634488kB inactive_anon:11500kB active_file:52164kB inactive_file:26508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:33728kB dirty:212kB writeback:0kB shmem:13564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 939.666980] Node 0 DMA free:10524kB min:216kB low:268kB high:320kB active_anon:5052kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 939.676808] FAULT_INJECTION: forcing a failure. [ 939.676808] name failslab, interval 1, probability 0, space 0, times 0 [ 939.698695] lowmem_reserve[]: 0 2580 2580 2580 [ 939.746456] Node 0 DMA32 free:36348kB min:36468kB low:45584kB high:54700kB active_anon:1815804kB inactive_anon:66744kB active_file:32kB inactive_file:32kB unevictable:10240kB writepending:12kB present:3129332kB managed:2644884kB mlocked:10240kB kernel_stack:19232kB pagetables:64060kB bounce:0kB free_pcp:424kB local_pcp:268kB free_cma:0kB [ 939.780120] protocol 88fb is buggy, dev hsr_slave_0 [ 939.785337] protocol 88fb is buggy, dev hsr_slave_1 [ 939.799231] CPU: 0 PID: 8873 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 939.805509] lowmem_reserve[]: [ 939.806204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 939.806206] 0 0 [ 939.809384] Call Trace: [ 939.809404] dump_stack+0x138/0x197 [ 939.809423] should_fail.cold+0x10f/0x159 [ 939.809442] should_failslab+0xdb/0x130 [ 939.824387] 0 [ 939.826942] kmem_cache_alloc+0x2d7/0x780 [ 939.826958] ? debug_smp_processor_id+0x1c/0x20 [ 939.832309] 0 [ 939.835243] ? perf_trace_lock+0x109/0x500 [ 939.835260] __d_alloc+0x2d/0x9f0 [ 939.835271] ? __d_lookup+0x37b/0x670 [ 939.841204] d_alloc+0x4d/0x270 [ 939.841213] ? __d_lookup+0x37b/0x670 [ 939.841224] d_alloc_parallel+0xe5/0x1800 [ 939.841240] ? lock_downgrade+0x740/0x740 [ 939.841255] ? __d_lookup+0x3a2/0x670 [ 939.841264] ? mark_held_locks+0xb1/0x100 [ 939.841276] ? __d_lookup_rcu+0x630/0x630 [ 939.841287] ? __lockdep_init_map+0x10c/0x570 [ 939.841297] ? __lockdep_init_map+0x10c/0x570 [ 939.841310] ? lockdep_init_map+0x9/0x10 [ 939.841326] proc_fill_cache+0x2c1/0x500 [ 939.841336] ? proc_pid_instantiate+0x160/0x160 [ 939.841353] ? proc_task_lookup+0x4d0/0x4d0 [ 939.841381] proc_pident_readdir+0x3ac/0x520 [ 939.854086] Node 0 [ 939.855509] proc_tgid_base_readdir+0x2a/0x30 [ 939.855522] iterate_dir+0x1a2/0x5f0 [ 939.859396] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 939.862577] SyS_getdents+0x132/0x260 [ 939.862588] ? SyS_old_readdir+0x130/0x130 [ 939.862599] ? SyS_write+0x15e/0x230 [ 939.862606] ? iterate_dir+0x5f0/0x5f0 [ 939.862621] ? do_syscall_64+0x53/0x640 [ 939.862631] ? SyS_old_readdir+0x130/0x130 [ 939.862643] do_syscall_64+0x1e8/0x640 [ 939.862653] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 939.862672] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 939.862680] RIP: 0033:0x459ef9 [ 939.862684] RSP: 002b:00007fb315eabc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 939.862695] RAX: ffffffffffffffda RBX: 00007fb315eabc90 RCX: 0000000000459ef9 [ 939.862701] RDX: 0000000000000177 RSI: 0000000020000ea9 RDI: 0000000000000003 [ 939.862707] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 939.862713] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb315eac6d4 [ 939.862718] R13: 00000000004c0b2d R14: 00000000004d3480 R15: 0000000000000004 [ 939.874284] audit: type=1804 audit(1571994458.756:290): pid=8885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir268639978/syzkaller.9bIuGU/899/bus" dev="sda1" ino=16996 res=1 [ 939.878608] lowmem_reserve[]: [ 939.909909] audit: type=1804 audit(1571994458.786:291): pid=8885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir268639978/syzkaller.9bIuGU/899/bus" dev="sda1" ino=16996 res=1 [ 939.936615] 0 [ 940.026377] 0 [ 940.040687] 0 0 [ 940.103857] Node 1 Normal free:581728kB min:53420kB low:66772kB high:80124kB active_anon:2634852kB inactive_anon:11508kB active_file:52172kB inactive_file:26552kB unevictable:0kB writepending:404kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:44064kB pagetables:120580kB bounce:0kB free_pcp:1208kB local_pcp:496kB free_cma:0kB [ 940.134533] lowmem_reserve[]: 0 0 0 0 [ 940.138375] Node 0 DMA: 7*4kB (UME) 12*8kB (UME) 12*16kB (U) 13*32kB (UM) 9*64kB (UE) 6*128kB (UE) 3*256kB (UE) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10524kB [ 940.154065] Node 0 DMA32: 321*4kB (MEH) 425*8kB (UMEH) 879*16kB (UMEH) 553*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36444kB [ 940.168170] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 940.179044] Node 1 Normal: 167*4kB (UME) 104*8kB (UME) 46*16kB (UME) 11*32kB (UME) 3*64kB (UME) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 140*4096kB (M) = 581852kB [ 940.199652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 940.208613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 940.217307] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 940.227604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 940.236256] 23850 total pagecache pages [ 940.240336] 0 pages in swap cache [ 940.243795] Swap cache stats: add 0, delete 0, find 0/0 [ 940.249156] Free swap = 0kB [ 940.261389] Total swap = 0kB [ 940.264522] 1965979 pages RAM [ 940.271664] 0 pages HighMem/MovableOnly [ 940.275721] 333229 pages reserved [ 940.279173] 0 pages cma reserved 09:07:39 executing program 3 (fault-call:2 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) rmdir(0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x802000004, 0x6) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x0, 0x0, 0x2, 0x1, {0xa, 0x4e22, 0x2, @local, 0x4}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000340)="77a8fe16416fb7d7eb83350891b62045ac3e5c62ac9ef4e81462935694f69ee5d330d8c4cc8b1da3344c74541f46cf15cf66ec86063116a1983c8d7583fb939c4cc4aa24182068dbf7c2512987f642ce0673b4e97c0a17e94d1a7ea298bb69f093b0233b7ac9ea2bde99e31aec22c45b566d10193d91ac04e3bb907e8c304d399999ebf6b5062be2784d3ac2207cf898224899f48b677df474fd83e3ec59c9c15f90746e19db3472fbda45bc6afa7b15b0e55ab201ff1c58f149578011ae4d76de895c5c0fc059bf1a2961dce53895df034573ab4caa72a1696f2252dcb69cf9c0118a81459f", 0xe6}, {&(0x7f0000000440)="ac7dbbeb4029528816852c6a238df26231a3394194ba65b0322f51f38f40b317c0477eda7bbc6e093a0b3229600a06a4b374df2c5dc32c993678f237d3dc2a027f73f5f3f1edf2b1614d5b2a331bc5b18f912063c4c261ca58eb2f7b8a5bd5865b9d8224c569aa0ddae68d9c9d3a289d4a936807d939a1d15c0475f7936081611adca74b33a568551ef6665e392f22c51c0a620df6bd1e2ac9b6123d614c65e25dbb395f625535d4bb80864ec064fd1608796e7d3ce641dd8a69398d58", 0xbd}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000640)="a26a66f540cf815953f3caf6a659ba74ed9b03782f960a6cf782f39f57350bcfb8fd535f48a85bc9e8f96ea50dc97a6f67e1b9779b9f31175580161a33abf3c99b3f5516770f67b84dda942f4a358f7f7521bcc0b5e0aa8d07ab4d5a9f789e5992cd6f35ef30fd2572e673216ec27e1b6aea0335eba563447d3c2d948f6a7104dcdb8943de6b393d46de05d5779961e3c53f661321faca12b2c44c0970ac8dc1b4760902a6d27b1d00673235a0b82b7d2be54c15fffb74b49b058f376eca4dd4ea9d440cb00b68703a2a6e6b429b9811942b3021b7a223ed7e75194cb31d75ca36cc1c0dba8eb31170ab940798231e1434497ecf98472b3d098d00a18b", 0xfd}, {&(0x7f0000000140)="2e8f4c8d2edc755bd51e6c1f8315c55dd9db07e7cc52d009f5ec79a82a5f7be12535189e70476fd288681c58691dfee1857a70d0b679e71e51cf3d34b67189d030b72c1264dc282f5a4da3e7087119c73035e16d588f08632aa1bb6b9712032387d6597d2d569d96406e4b38b89b837177d0607701b88848e297134151f412d429a8eb7da8db4dabf6d1667038bbb9827ebfb4c76b7d97cdf47ef7d365", 0x9d}, {&(0x7f0000000500)}, {&(0x7f0000000540)="a848f2aded88cf060937f99cbe6bf2ba645e99ce5e9292ea9af3ad337d639f2de6aae891efdbd8c1546f66f635e07912c96c7880037eb786062b1b", 0x3b}, {&(0x7f00000024c0)="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", 0x1000}], 0x8}, 0x4) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) openat$vsock(0xffffffffffffff9c, 0x0, 0x501, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x802000004, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001480)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 940.310177] protocol 88fb is buggy, dev hsr_slave_0 [ 940.315305] protocol 88fb is buggy, dev hsr_slave_1 09:07:39 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmctl$SHM_LOCK(r2, 0xb) r3 = shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmdt(r3) close(r0) r4 = socket$isdn_base(0x22, 0x3, 0x0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x1, 0x0) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f00000000c0)=0x83) dup(r4) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000040)='trusted.overlay.upper\x00', 0xfffffffffffffffd, 0x0, 0x2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_int(r6, 0x1, 0xc, &(0x7f000059dffc), &(0x7f0000000280)=0x3) [ 940.388754] FAULT_INJECTION: forcing a failure. [ 940.388754] name failslab, interval 1, probability 0, space 0, times 0 [ 940.408744] CPU: 1 PID: 8904 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 940.415731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 940.425099] Call Trace: [ 940.427749] dump_stack+0x138/0x197 [ 940.431411] should_fail.cold+0x10f/0x159 [ 940.435588] should_failslab+0xdb/0x130 [ 940.439598] kmem_cache_alloc+0x2d7/0x780 [ 940.443769] ? proc_i_callback+0x30/0x30 [ 940.447846] proc_alloc_inode+0x1c/0x1a0 [ 940.451923] alloc_inode+0x64/0x180 [ 940.455563] new_inode_pseudo+0x19/0xf0 [ 940.455576] new_inode+0x1f/0x40 [ 940.455590] proc_pid_make_inode+0x22/0x230 [ 940.455601] proc_pident_instantiate+0x7f/0x290 [ 940.455614] proc_fill_cache+0x34c/0x500 [ 940.455621] ? proc_pid_instantiate+0x160/0x160 [ 940.455639] ? proc_task_lookup+0x4d0/0x4d0 [ 940.485307] proc_pident_readdir+0x3ac/0x520 [ 940.489725] proc_tgid_base_readdir+0x2a/0x30 [ 940.494271] iterate_dir+0x1a2/0x5f0 [ 940.498001] SyS_getdents+0x132/0x260 [ 940.501859] ? SyS_old_readdir+0x130/0x130 [ 940.506095] ? SyS_write+0x15e/0x230 [ 940.509850] ? iterate_dir+0x5f0/0x5f0 [ 940.513752] ? do_syscall_64+0x53/0x640 [ 940.517727] ? SyS_old_readdir+0x130/0x130 [ 940.521965] do_syscall_64+0x1e8/0x640 [ 940.525859] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 940.530703] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 940.535888] RIP: 0033:0x459ef9 09:07:39 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x32, 0x0, 0x358, 0x0, 0x157}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff6e, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000080)=0x9, 0x4) preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000600aaaaaaaaaabbaaaaaaaaaa26000000000000000000000000ffffffffffff0180c20000011635750a80cdf111f0f2b2b9732455f879b3efe15bbf1a41414f0f1f8da59dd537efa1d196e5ac3903ba607c3fb254eeae4d237925151d8c4974b2bbea2be79579766f02e144ff453a54ff047ebdbbf94ff2effe044aff08821545823333de16"]) [ 940.539074] RSP: 002b:00007fb315eabc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 940.546782] RAX: ffffffffffffffda RBX: 00007fb315eabc90 RCX: 0000000000459ef9 [ 940.554056] RDX: 0000000000000177 RSI: 0000000020000ea9 RDI: 0000000000000003 [ 940.554062] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 940.554067] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb315eac6d4 [ 940.554072] R13: 00000000004c0b2d R14: 00000000004d3480 R15: 0000000000000004 09:07:39 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() pselect6(0x40, &(0x7f0000000000)={0x1f, 0x20000000f156, 0x5, 0x91a, 0x0, 0x7f, 0x2, 0x20}, &(0x7f0000000040)={0x9, 0x100, 0x8, 0x400, 0x6, 0x2, 0x1f, 0x3}, &(0x7f0000000080)={0x2, 0x9, 0x7, 0x9, 0x2, 0xfffffffffffffe01, 0x100000001, 0xfff}, &(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f00000001c0)={0x2}, 0x8}) 09:07:39 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r6, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x72, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000180)={r7, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={r7, 0x96}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000000c0)={r8, 0x1}, &(0x7f0000000140)=0xc) r9 = gettid() tkill(r9, 0x1000000000013) 09:07:39 executing program 3 (fault-call:2 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:39 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffeffffefffffffb) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa192bce5e2dfb0806000186dd06100008aaaaaaaaaa23000000000000000000000000000000000180c2007903fe8000000000000000000000000000bb"], 0x0) syz_emit_ethernet(0x92, &(0x7f00000000c0)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x5c, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@generic={0x8, 0x10, "c0f094fb45510ade8c827ab8d68c"}, @exp_fastopen={0xfe, 0x13, 0xf989, "c88c07000000a842507067b9d4edaf"}, @md5sig={0x13, 0xda9e17aaef2e62f6, "d31c8190da8dfe461d135b075be2c1c4"}, @window]}}}}}}}}, 0x0) 09:07:39 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:07:39 executing program 2: ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000000c0)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x10}, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) [ 940.912742] FAULT_INJECTION: forcing a failure. [ 940.912742] name failslab, interval 1, probability 0, space 0, times 0 [ 940.940160] CPU: 0 PID: 8946 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 940.947145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 940.956512] Call Trace: [ 940.959123] dump_stack+0x138/0x197 [ 940.962774] should_fail.cold+0x10f/0x159 [ 940.966949] should_failslab+0xdb/0x130 [ 940.970943] kmem_cache_alloc+0x2d7/0x780 [ 940.971131] device gretap0 left promiscuous mode [ 940.975103] ? proc_alloc_inode+0x1c/0x1a0 [ 940.975123] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 940.975143] selinux_inode_alloc_security+0xb6/0x2a0 [ 940.975161] security_inode_alloc+0x94/0xd0 [ 940.975182] inode_init_always+0x552/0xaf0 [ 940.980773] bridge0: port 3(gretap0) entered disabled state [ 940.984155] alloc_inode+0x81/0x180 [ 940.984168] new_inode_pseudo+0x19/0xf0 [ 940.984180] new_inode+0x1f/0x40 [ 940.984193] proc_pid_make_inode+0x22/0x230 [ 940.984206] proc_pident_instantiate+0x7f/0x290 [ 941.030389] proc_fill_cache+0x34c/0x500 [ 941.034501] ? proc_pid_instantiate+0x160/0x160 [ 941.039178] ? proc_task_lookup+0x4d0/0x4d0 [ 941.043538] proc_pident_readdir+0x3ac/0x520 [ 941.047969] proc_tgid_base_readdir+0x2a/0x30 [ 941.052487] iterate_dir+0x1a2/0x5f0 [ 941.056204] SyS_getdents+0x132/0x260 [ 941.059999] ? SyS_old_readdir+0x130/0x130 [ 941.064227] ? SyS_write+0x15e/0x230 [ 941.067935] ? iterate_dir+0x5f0/0x5f0 [ 941.071840] ? do_syscall_64+0x53/0x640 [ 941.075868] ? SyS_old_readdir+0x130/0x130 [ 941.080126] do_syscall_64+0x1e8/0x640 [ 941.084014] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 941.088862] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 941.094062] RIP: 0033:0x459ef9 [ 941.097248] RSP: 002b:00007fb315eabc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 941.104954] RAX: ffffffffffffffda RBX: 00007fb315eabc90 RCX: 0000000000459ef9 09:07:40 executing program 3 (fault-call:2 fault-nth:3): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 941.112367] RDX: 0000000000000177 RSI: 0000000020000ea9 RDI: 0000000000000003 [ 941.119738] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 941.127021] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb315eac6d4 [ 941.134297] R13: 00000000004c0b2d R14: 00000000004d3480 R15: 0000000000000004 [ 941.176144] device bridge_slave_0 left promiscuous mode [ 941.195212] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.225687] FAULT_INJECTION: forcing a failure. [ 941.225687] name failslab, interval 1, probability 0, space 0, times 0 [ 941.237888] CPU: 1 PID: 8958 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 941.244890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 941.254245] Call Trace: [ 941.256839] dump_stack+0x138/0x197 [ 941.260466] should_fail.cold+0x10f/0x159 [ 941.264606] should_failslab+0xdb/0x130 [ 941.268575] kmem_cache_alloc+0x2d7/0x780 [ 941.272728] ? debug_smp_processor_id+0x1c/0x20 [ 941.277388] ? perf_trace_lock+0x109/0x500 [ 941.281639] __d_alloc+0x2d/0x9f0 [ 941.285095] ? __d_lookup+0x37b/0x670 [ 941.288898] d_alloc+0x4d/0x270 [ 941.292184] ? __d_lookup+0x37b/0x670 [ 941.295997] d_alloc_parallel+0xe5/0x1800 [ 941.300287] ? lock_downgrade+0x740/0x740 [ 941.304469] ? __d_lookup+0x3a2/0x670 [ 941.308281] ? mark_held_locks+0xb1/0x100 [ 941.312429] ? __d_lookup_rcu+0x630/0x630 [ 941.316563] ? __lockdep_init_map+0x10c/0x570 [ 941.321042] ? __lockdep_init_map+0x10c/0x570 [ 941.325526] ? lockdep_init_map+0x9/0x10 [ 941.329591] proc_fill_cache+0x2c1/0x500 [ 941.333662] ? proc_pid_instantiate+0x160/0x160 [ 941.338332] ? proc_task_lookup+0x4d0/0x4d0 [ 941.342656] proc_pident_readdir+0x3ac/0x520 [ 941.347057] proc_tgid_base_readdir+0x2a/0x30 [ 941.351546] iterate_dir+0x1a2/0x5f0 [ 941.355252] SyS_getdents+0x132/0x260 [ 941.359053] ? SyS_old_readdir+0x130/0x130 [ 941.363295] ? SyS_write+0x15e/0x230 [ 941.367016] ? iterate_dir+0x5f0/0x5f0 [ 941.370907] ? do_syscall_64+0x53/0x640 [ 941.374972] ? SyS_old_readdir+0x130/0x130 [ 941.379227] do_syscall_64+0x1e8/0x640 [ 941.383110] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 941.387946] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 941.393120] RIP: 0033:0x459ef9 [ 941.396295] RSP: 002b:00007fb315eabc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 941.403996] RAX: ffffffffffffffda RBX: 00007fb315eabc90 RCX: 0000000000459ef9 [ 941.411277] RDX: 0000000000000177 RSI: 0000000020000ea9 RDI: 0000000000000003 [ 941.418571] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 941.425831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb315eac6d4 [ 941.433103] R13: 00000000004c0b2d R14: 00000000004d3480 R15: 0000000000000004 [ 941.442514] device bridge_slave_1 left promiscuous mode [ 941.448256] bridge0: port 2(bridge_slave_1) entered disabled state 09:07:40 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:07:40 executing program 3 (fault-call:2 fault-nth:4): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 941.549988] bond0: Releasing backup interface bond_slave_0 09:07:40 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000000)=0xffffff01) 09:07:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)="42b0a2da3bb9c8ee6417a20a73a91c3e3e688601c7ac065400ea0c65d1d9e058bc2929d9c9dd5387404b4d5149fd03cf37c7e245b374cec1651aaf14ebd115bae9ee54c94d8845d4e7abea8c3a8f7c0d761b2090a68d33f364ccf47503b0a9a0f9a359548999a47903f7c4a3a0ddc95a20d634adf7536dcfae4631acc5b2ed1f362b84ebedfb5f4ddd2ba73dd214a77c6d5a52bea3df6fcecf059e5a8b8ab91c0ce27e1057e8925ecacddf95d700583a983a320338ed2ea6d53ecddf3065c9c71168a3a02fde609de6ddd7ac7cd210535e4860c8f0e057a8789de33cfee596f222e0eeee43a435eda70b2470078f0ee5c992b192", 0xf4}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ptrace$cont(0x9, r0, 0x9, 0x6) socket$inet6(0xa, 0x3, 0x2) getpid() openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x9888b15a0ce71df8, 0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x800, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x760030) r5 = socket$inet6(0xa, 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) write(r6, 0x0, 0xfffffffffffffd53) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x802000004, 0x6) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, r8, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x86) ioctl$EVIOCGABS0(r9, 0x80184540, &(0x7f00000003c0)=""/195) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="5000000010000507000000000000000000000000233f53f3642a94e37e047792ccd4c59e7f944898146eb70e7ce34a086022bc5ad7e72b2f779b0f7ed2aba99e8f75d5611048cd3b56703691ac0e0331b4a52376ada4d4656f740ae24a4b43a243a4d68bd6062f5f7c75d428a90e7b215f821d89f0f1b895c74191abf27c34a77ffa52056f8c91852e", @ANYRES32=0x0, @ANYRESOCT, @ANYRES16, @ANYBLOB="280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYRESHEX=0x0], 0x7}}, 0x4002041) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', r12}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000500)={@remote, @empty, @loopback, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x42, r13}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) [ 941.621807] bond0: Releasing backup interface bond_slave_1 09:07:40 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r6, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x72, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x802000004, 0x6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x3, @loopback, 0x7}}, 0x4, 0x0, 0x0, 0x5, 0x46}, &(0x7f00000002c0)=0x98) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r11, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="00040000", @ANYRES32=0x0], &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x72, &(0x7f0000000000)={r12, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000180)={r12, 0x7}, &(0x7f0000000240)=0x8) syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0xfc, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r13, 0x0, r14, 0x0, 0x802000004, 0x6) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f0000000380)={r12, 0x7}, &(0x7f0000000280)=0xc6) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000000c0)={r7, 0x90, 0x9, [0x0, 0x101, 0x7, 0x5, 0x156d, 0x4, 0x7, 0x8000, 0x4]}, &(0x7f0000000140)=0x1a) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r15, 0x7}, 0x8) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r16 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r16, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r16, 0x8, 0x0) execveat(r16, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r17 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r18, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(r18) tkill(r17, 0x1000000000013) [ 941.718266] team0: Port device team_slave_0 removed [ 941.727530] team0: Port device team_slave_1 removed [ 941.743777] FAULT_INJECTION: forcing a failure. [ 941.743777] name failslab, interval 1, probability 0, space 0, times 0 [ 941.775333] CPU: 0 PID: 8984 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 941.782354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 941.791723] Call Trace: [ 941.794328] dump_stack+0x138/0x197 [ 941.797977] should_fail.cold+0x10f/0x159 [ 941.802148] should_failslab+0xdb/0x130 [ 941.806149] kmem_cache_alloc+0x2d7/0x780 [ 941.810312] ? proc_i_callback+0x30/0x30 [ 941.814384] proc_alloc_inode+0x1c/0x1a0 [ 941.818450] alloc_inode+0x64/0x180 [ 941.822082] new_inode_pseudo+0x19/0xf0 [ 941.826061] new_inode+0x1f/0x40 [ 941.829432] proc_pid_make_inode+0x22/0x230 [ 941.833765] proc_pident_instantiate+0x7f/0x290 [ 941.838506] proc_fill_cache+0x34c/0x500 [ 941.842567] ? proc_pid_instantiate+0x160/0x160 [ 941.847254] ? proc_task_lookup+0x4d0/0x4d0 [ 941.851610] proc_pident_readdir+0x3ac/0x520 [ 941.856046] proc_tgid_base_readdir+0x2a/0x30 [ 941.860564] iterate_dir+0x1a2/0x5f0 [ 941.864283] SyS_getdents+0x132/0x260 [ 941.868090] ? SyS_old_readdir+0x130/0x130 [ 941.872329] ? SyS_write+0x15e/0x230 [ 941.876055] ? iterate_dir+0x5f0/0x5f0 [ 941.879941] ? do_syscall_64+0x53/0x640 [ 941.884013] ? SyS_old_readdir+0x130/0x130 [ 941.888258] do_syscall_64+0x1e8/0x640 [ 941.892151] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 941.897067] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 941.902246] RIP: 0033:0x459ef9 [ 941.905435] RSP: 002b:00007fb315eabc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 941.913231] RAX: ffffffffffffffda RBX: 00007fb315eabc90 RCX: 0000000000459ef9 09:07:40 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r6, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x72, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000180)={r7, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={r7, 0x96}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000000c0)={r8, 0x1}, &(0x7f0000000140)=0xc) r9 = gettid() tkill(r9, 0x1000000000013) 09:07:40 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, r5, 0x1}, 0xc) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() [ 941.920494] RDX: 0000000000000177 RSI: 0000000020000ea9 RDI: 0000000000000003 [ 941.927764] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 941.935036] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb315eac6d4 [ 941.942326] R13: 00000000004c0b2d R14: 00000000004d3480 R15: 0000000000000004 09:07:40 executing program 3 (fault-call:2 fault-nth:5): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 942.103345] FAULT_INJECTION: forcing a failure. [ 942.103345] name failslab, interval 1, probability 0, space 0, times 0 [ 942.136832] CPU: 1 PID: 9017 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 942.143824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.153192] Call Trace: [ 942.155791] dump_stack+0x138/0x197 [ 942.159443] should_fail.cold+0x10f/0x159 [ 942.163593] should_failslab+0xdb/0x130 [ 942.167569] kmem_cache_alloc+0x2d7/0x780 [ 942.171708] ? proc_alloc_inode+0x1c/0x1a0 [ 942.176026] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 942.181484] selinux_inode_alloc_security+0xb6/0x2a0 [ 942.186603] security_inode_alloc+0x94/0xd0 [ 942.190925] inode_init_always+0x552/0xaf0 [ 942.195173] alloc_inode+0x81/0x180 [ 942.198806] new_inode_pseudo+0x19/0xf0 [ 942.202787] new_inode+0x1f/0x40 [ 942.206160] proc_pid_make_inode+0x22/0x230 [ 942.210488] proc_pident_instantiate+0x7f/0x290 [ 942.216291] proc_fill_cache+0x34c/0x500 [ 942.220354] ? proc_pid_instantiate+0x160/0x160 [ 942.225120] ? proc_task_lookup+0x4d0/0x4d0 [ 942.229615] proc_pident_readdir+0x3ac/0x520 [ 942.234034] proc_tgid_base_readdir+0x2a/0x30 [ 942.238531] iterate_dir+0x1a2/0x5f0 [ 942.238549] SyS_getdents+0x132/0x260 [ 942.238561] ? SyS_old_readdir+0x130/0x130 [ 942.238574] ? SyS_write+0x15e/0x230 [ 942.238583] ? iterate_dir+0x5f0/0x5f0 [ 942.238602] ? do_syscall_64+0x53/0x640 [ 942.246098] ? SyS_old_readdir+0x130/0x130 [ 942.246115] do_syscall_64+0x1e8/0x640 [ 942.246125] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 942.246146] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 942.246158] RIP: 0033:0x459ef9 [ 942.254091] RSP: 002b:00007fb315eabc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 942.254104] RAX: ffffffffffffffda RBX: 00007fb315eabc90 RCX: 0000000000459ef9 09:07:41 executing program 3 (fault-call:2 fault-nth:6): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 942.254109] RDX: 0000000000000177 RSI: 0000000020000ea9 RDI: 0000000000000003 [ 942.254115] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 942.254121] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb315eac6d4 [ 942.254127] R13: 00000000004c0b2d R14: 00000000004d3480 R15: 0000000000000004 09:07:41 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x101000, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)=0x7fffffff) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x3) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() [ 942.432996] FAULT_INJECTION: forcing a failure. [ 942.432996] name failslab, interval 1, probability 0, space 0, times 0 [ 942.460873] CPU: 0 PID: 9033 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 942.467851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.477210] Call Trace: [ 942.479813] dump_stack+0x138/0x197 [ 942.483464] should_fail.cold+0x10f/0x159 [ 942.487646] should_failslab+0xdb/0x130 [ 942.491638] kmem_cache_alloc+0x2d7/0x780 [ 942.495800] ? debug_smp_processor_id+0x1c/0x20 [ 942.500484] ? perf_trace_lock+0x109/0x500 [ 942.504735] __d_alloc+0x2d/0x9f0 [ 942.508224] ? __d_lookup+0x37b/0x670 [ 942.512041] d_alloc+0x4d/0x270 [ 942.515319] ? __d_lookup+0x37b/0x670 [ 942.519179] d_alloc_parallel+0xe5/0x1800 [ 942.523356] ? lock_downgrade+0x740/0x740 [ 942.527517] ? __d_lookup+0x3a2/0x670 [ 942.531332] ? mark_held_locks+0xb1/0x100 [ 942.535488] ? __d_lookup_rcu+0x630/0x630 [ 942.539655] ? __lockdep_init_map+0x10c/0x570 [ 942.544170] ? __lockdep_init_map+0x10c/0x570 [ 942.548677] ? lockdep_init_map+0x9/0x10 [ 942.552750] proc_fill_cache+0x2c1/0x500 [ 942.556821] ? proc_pid_instantiate+0x160/0x160 [ 942.561509] ? proc_task_lookup+0x4d0/0x4d0 [ 942.565855] proc_pident_readdir+0x3ac/0x520 [ 942.570277] proc_tgid_base_readdir+0x2a/0x30 [ 942.574783] iterate_dir+0x1a2/0x5f0 [ 942.578513] SyS_getdents+0x132/0x260 [ 942.582322] ? SyS_old_readdir+0x130/0x130 [ 942.586569] ? SyS_write+0x15e/0x230 [ 942.590284] ? iterate_dir+0x5f0/0x5f0 [ 942.594184] ? do_syscall_64+0x53/0x640 [ 942.598171] ? SyS_old_readdir+0x130/0x130 [ 942.602424] do_syscall_64+0x1e8/0x640 [ 942.606317] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 942.611175] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 942.616366] RIP: 0033:0x459ef9 [ 942.619566] RSP: 002b:00007fb315eabc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e 09:07:41 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x2) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x2) socket$inet6(0xa, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x900, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb61a, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, r5, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) mmap(&(0x7f0000955000/0x2000)=nil, 0x2000, 0x0, 0x8031, r6, 0x0) [ 942.627341] RAX: ffffffffffffffda RBX: 00007fb315eabc90 RCX: 0000000000459ef9 [ 942.634612] RDX: 0000000000000177 RSI: 0000000020000ea9 RDI: 0000000000000003 [ 942.641893] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 942.649233] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb315eac6d4 [ 942.656504] R13: 00000000004c0b2d R14: 00000000004d3480 R15: 0000000000000004 09:07:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0xc22}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x21, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0xffffffffffffffff}, 0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) dup3(r4, r0, 0x0) 09:07:41 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x38cd47e5ebfea4c5, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32) socket$inet6(0xa, 0x801, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x802000004, 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x3bcf5475ea5e9a96) r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r7, 0x9, 0x6) r8 = geteuid() setreuid(r8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r9) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140)={r7, r8, r9}, 0xc) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x269) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r10 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r10, 0x400, 0x1) fcntl$setown(r10, 0x8, 0x0) execveat(r10, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:41 executing program 3 (fault-call:2 fault-nth:7): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 942.955657] FAULT_INJECTION: forcing a failure. [ 942.955657] name failslab, interval 1, probability 0, space 0, times 0 [ 942.968360] CPU: 0 PID: 9071 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 942.975319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.984682] Call Trace: [ 942.987282] dump_stack+0x138/0x197 [ 942.990942] should_fail.cold+0x10f/0x159 [ 942.995097] should_failslab+0xdb/0x130 [ 942.999077] kmem_cache_alloc+0x2d7/0x780 [ 943.003230] ? proc_i_callback+0x30/0x30 [ 943.007461] proc_alloc_inode+0x1c/0x1a0 [ 943.011521] alloc_inode+0x64/0x180 [ 943.015145] new_inode_pseudo+0x19/0xf0 [ 943.019128] new_inode+0x1f/0x40 [ 943.022549] proc_pid_make_inode+0x22/0x230 [ 943.026865] proc_pident_instantiate+0x7f/0x290 [ 943.031537] proc_fill_cache+0x34c/0x500 [ 943.035600] ? proc_pid_instantiate+0x160/0x160 [ 943.040280] ? proc_task_lookup+0x4d0/0x4d0 [ 943.044611] proc_pident_readdir+0x3ac/0x520 [ 943.049014] proc_tgid_base_readdir+0x2a/0x30 [ 943.053773] iterate_dir+0x1a2/0x5f0 [ 943.057488] SyS_getdents+0x132/0x260 [ 943.061281] ? SyS_old_readdir+0x130/0x130 [ 943.065557] ? SyS_write+0x15e/0x230 [ 943.069258] ? iterate_dir+0x5f0/0x5f0 [ 943.073143] ? do_syscall_64+0x53/0x640 [ 943.077120] ? SyS_old_readdir+0x130/0x130 [ 943.081356] do_syscall_64+0x1e8/0x640 [ 943.085231] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 943.090076] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 943.095259] RIP: 0033:0x459ef9 [ 943.098434] RSP: 002b:00007fb315eabc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e 09:07:42 executing program 3 (fault-call:2 fault-nth:8): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 943.106128] RAX: ffffffffffffffda RBX: 00007fb315eabc90 RCX: 0000000000459ef9 [ 943.113398] RDX: 0000000000000177 RSI: 0000000020000ea9 RDI: 0000000000000003 [ 943.120671] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 943.127930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb315eac6d4 [ 943.135219] R13: 00000000004c0b2d R14: 00000000004d3480 R15: 0000000000000004 09:07:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000003c0)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='nem\xf0ents\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r1, 0x9, 0x6) ptrace$cont(0x9, r1, 0x6, 0x7fffffff) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000100)=@rose) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/create\x00', 0x2, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0xc2ffce8d15bdd090, 0x0) ioctl$TIOCLINUX6(r4, 0x541c, &(0x7f0000000140)={0x6, 0x88}) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=@known='trusted.syz\x00', &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x15, 0x3) r5 = syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x400, 0x2) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000380)=0x111) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0xfffffffffffffffd, 0xfffffffffffffffe}, 0x0) sync() [ 943.354287] FAULT_INJECTION: forcing a failure. [ 943.354287] name failslab, interval 1, probability 0, space 0, times 0 [ 943.388935] CPU: 1 PID: 9084 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 943.395926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 943.405296] Call Trace: [ 943.407913] dump_stack+0x138/0x197 [ 943.411573] should_fail.cold+0x10f/0x159 [ 943.415845] should_failslab+0xdb/0x130 [ 943.419882] kmem_cache_alloc+0x2d7/0x780 [ 943.424029] ? proc_alloc_inode+0x1c/0x1a0 [ 943.428254] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 943.433699] selinux_inode_alloc_security+0xb6/0x2a0 [ 943.438812] security_inode_alloc+0x94/0xd0 [ 943.443137] inode_init_always+0x552/0xaf0 [ 943.447366] alloc_inode+0x81/0x180 [ 943.452238] new_inode_pseudo+0x19/0xf0 [ 943.456255] new_inode+0x1f/0x40 [ 943.459646] proc_pid_make_inode+0x22/0x230 [ 943.463986] proc_pident_instantiate+0x7f/0x290 [ 943.468663] proc_fill_cache+0x34c/0x500 [ 943.472722] ? proc_pid_instantiate+0x160/0x160 [ 943.477405] ? proc_task_lookup+0x4d0/0x4d0 [ 943.481730] proc_pident_readdir+0x3ac/0x520 [ 943.486129] proc_tgid_base_readdir+0x2a/0x30 [ 943.490629] iterate_dir+0x1a2/0x5f0 [ 943.494333] SyS_getdents+0x132/0x260 [ 943.498123] ? SyS_old_readdir+0x130/0x130 [ 943.502359] ? SyS_write+0x15e/0x230 [ 943.506077] ? iterate_dir+0x5f0/0x5f0 [ 943.509969] ? do_syscall_64+0x53/0x640 [ 943.513961] ? SyS_old_readdir+0x130/0x130 [ 943.518216] do_syscall_64+0x1e8/0x640 [ 943.522096] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 943.526943] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 943.532135] RIP: 0033:0x459ef9 [ 943.535311] RSP: 002b:00007fb315eabc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 943.543039] RAX: ffffffffffffffda RBX: 00007fb315eabc90 RCX: 0000000000459ef9 [ 943.552296] RDX: 0000000000000177 RSI: 0000000020000ea9 RDI: 0000000000000003 [ 943.559555] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 943.566828] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb315eac6d4 [ 943.574110] R13: 00000000004c0b2d R14: 00000000004d3480 R15: 0000000000000004 [ 943.581718] net_ratelimit: 8 callbacks suppressed [ 943.581724] protocol 88fb is buggy, dev hsr_slave_0 [ 943.591758] protocol 88fb is buggy, dev hsr_slave_1 [ 943.596899] protocol 88fb is buggy, dev hsr_slave_0 [ 943.602065] protocol 88fb is buggy, dev hsr_slave_1 [ 943.990165] protocol 88fb is buggy, dev hsr_slave_0 [ 943.995390] protocol 88fb is buggy, dev hsr_slave_1 [ 944.470147] protocol 88fb is buggy, dev hsr_slave_0 [ 944.475235] protocol 88fb is buggy, dev hsr_slave_1 09:07:43 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000140)=0x65435e7b) fcntl$setown(r1, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r8, 0x9, 0x6) r9 = getpgrp(r8) ptrace(0x4208, r9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r10, 0x0, 0x802000004, 0x6) bind$bt_l2cap(r10, &(0x7f0000000180)={0x1f, 0x2, {0x1b, 0x5, 0x3, 0x81, 0x7, 0x9}, 0x6, 0x1}, 0x38f) getsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) splice(r6, 0x0, r7, 0x0, 0x802000004, 0x6) execveat(r7, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x46000) io_setup(0x2344, &(0x7f0000000100)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x0, 0x0, r7, 0x0}]) io_cancel(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x640e0911ee9be440, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)="2c83ab506927c271efdd733e22659f18d36aca53b2b007e90379d29966056899a29b1f726b39a9918c271a735aaf9a173b95d10b900e692e79162f1cdfd7bb8e71053a91367ac3e635d552ef838f51957b0113e9730ff72fad2b1bfdbae6862ba05c1dbf0ca5df7b48b844", 0x6b, 0x0, 0x0, 0x1}, &(0x7f0000000100)) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f0000000040)) 09:07:43 executing program 3 (fault-call:2 fault-nth:9): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:43 executing program 2: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x2f, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = open(0x0, 0x1a3204, 0x143) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x2, 0x3, 0xff) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x29) r6 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) ftruncate(r6, 0x8007ffc) sendfile(r5, r6, 0x0, 0xffff) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4f884daff4a018ee8349bf91a20eddde2dc4dc99e39be962f0565d1d06e461ed9ab9660b20ccb98a6671e3e0c5d420530ce86fa177cdb81ec10db35bc5ef83ca4bf685b9d33a03b4ec296ecd4100ffbf1f2315ab56b8c0b7b192f62fa5d33b31c8e6e6e0290231a9fc9d9f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000003200)={r11, 0x3}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r11, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000002c0)={r8, 0x7}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000340)={r12, 0x41}, 0x8) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x2, 0x121140) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r13 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r14 = accept4$inet(r13, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r14, 0x0) close(r13) r15 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r15, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r13, 0x8004e500, &(0x7f0000000240)=r15) 09:07:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='\x00\x1d\x04\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40, &(0x7f0000000080)={[{@shortname_win95='shortname=win95'}, {@utf8no='utf8=0'}, {@shortname_win95='shortname=win95'}, {@fat=@usefree='usefree'}, {@uni_xlate='uni_xlate=1'}]}) 09:07:43 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x4a0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) clone(0x131120a1ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x4, 0x80, 0xc8, 0x6, 0x0, 0x6, 0x40, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x4, 0x3}, 0x20028, 0xe0fe, 0x0, 0x1, 0x5, 0x1a6af5ff, 0x1}, 0x0, 0xb, r3, 0x2) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000000)={0x2, 0x200, [0x0, 0x55c], 0x140}) tkill(r4, 0x1000000000013) 09:07:43 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x2033, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() [ 944.832166] FAULT_INJECTION: forcing a failure. [ 944.832166] name failslab, interval 1, probability 0, space 0, times 0 [ 944.901183] CPU: 1 PID: 9116 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 944.908173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 944.917538] Call Trace: [ 944.920141] dump_stack+0x138/0x197 [ 944.923795] should_fail.cold+0x10f/0x159 [ 944.927996] should_failslab+0xdb/0x130 [ 944.932009] kmem_cache_alloc+0x2d7/0x780 [ 944.936186] ? debug_smp_processor_id+0x1c/0x20 [ 944.940864] ? perf_trace_lock+0x109/0x500 [ 944.945107] __d_alloc+0x2d/0x9f0 [ 944.948566] ? __d_lookup+0x37b/0x670 [ 944.952381] d_alloc+0x4d/0x270 [ 944.955665] ? __d_lookup+0x37b/0x670 [ 944.959473] d_alloc_parallel+0xe5/0x1800 [ 944.963645] ? lock_downgrade+0x740/0x740 [ 944.967803] ? __d_lookup+0x3a2/0x670 [ 944.971607] ? mark_held_locks+0xb1/0x100 [ 944.975765] ? __d_lookup_rcu+0x630/0x630 [ 944.979922] ? __lockdep_init_map+0x10c/0x570 [ 944.984429] ? __lockdep_init_map+0x10c/0x570 [ 944.988941] ? lockdep_init_map+0x9/0x10 [ 944.993014] proc_fill_cache+0x2c1/0x500 [ 944.997079] ? proc_pid_instantiate+0x160/0x160 [ 945.001767] ? proc_task_lookup+0x4d0/0x4d0 [ 945.006123] proc_pident_readdir+0x3ac/0x520 [ 945.010546] proc_tgid_base_readdir+0x2a/0x30 [ 945.015053] iterate_dir+0x1a2/0x5f0 [ 945.018781] SyS_getdents+0x132/0x260 [ 945.022583] ? SyS_old_readdir+0x130/0x130 [ 945.026823] ? SyS_write+0x15e/0x230 [ 945.030539] ? iterate_dir+0x5f0/0x5f0 [ 945.034433] ? do_syscall_64+0x53/0x640 [ 945.038432] ? SyS_old_readdir+0x130/0x130 [ 945.042672] do_syscall_64+0x1e8/0x640 [ 945.046559] ? trace_hardirqs_off_thunk+0x1a/0x1c 09:07:43 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000000)="4d449066ba074e75145740b5cebff69e80a845c287073e943c22fa1dd2faf86e270df881c2a9a8748798d06a2b7eccb6d9014af9e961df3e2fbad11ccf94cbf4c90d40c2a223a77bea1c7b1c402496d9b0ec40afdb65964a9092f550a01b4ed727149559c9fd159bc4b4954e504785fd1ebeafdb38b25da452f538000e7b5015cc035265aa20a5a212c43c99adf9f625032418c168afca44e7681e565cd306d3132aae418fc3c8b5"}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000440)={'syzkaller0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) [ 945.051420] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 945.056614] RIP: 0033:0x459ef9 [ 945.059802] RSP: 002b:00007fb315eabc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 945.067524] RAX: ffffffffffffffda RBX: 00007fb315eabc90 RCX: 0000000000459ef9 [ 945.074797] RDX: 0000000000000177 RSI: 0000000020000ea9 RDI: 0000000000000003 [ 945.082065] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 945.089333] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb315eac6d4 [ 945.096606] R13: 00000000004c0b2d R14: 00000000004d3480 R15: 0000000000000004 09:07:44 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @empty}, 0xa8, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='veth0_to_team\x00', 0x3ff, 0x5, 0x8001}) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) ftruncate(r4, 0x200004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 09:07:44 executing program 3 (fault-call:2 fault-nth:10): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="696f636861727365743d757466382c0059fcec0d5bec59a49b708825d128beeb70f86ad549417df5eaa2bb6ba54300968f7fd4bc"]) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x1a4, 0xb, 0x3, 0x400, 0x70bd2a, 0x25dfdbfc, {0x5, 0x0, 0xa}, [@generic="1041092f4d108627e2fcd17b763ef5990238d4e6b8e6130db8a7e43f5966f6cfea761f538423d8b2c4a7fb4052c1b8f90e6dd5406e43b0a5f1883f3f8c365379623f3f7d5e3c89b5436837e435e45be9f18cc0447798f756d44f3d0da4f887c4537a9055d6d5bb6e9d31c18a25f5456f8bcd7ab34aed045bbb6fe7097e57c8", @nested={0x1c, 0x6d, [@generic="867d8dac", @typed={0x14, 0x82, @ipv6=@dev={0xfe, 0x80, [], 0x26}}]}, @nested={0xf4, 0x7c, [@generic="7a6eca318a1fc1877a86ebae5fc9179b2a58a8949085df74c18cc31444c4db50039a0d287be79fe652b17e25014c5b3f8e826ec29fe7f46ede8bcd18cde0f95e636650783d584938b0c4184846720f657f9d39e20ece7b1f1b15e72ea77c91695933c0ff3348cc9ce149ebcfbb19bcb97387312682df", @typed={0x8, 0x5c, @fd=r3}, @generic="04b0944879f08d51dba830968c6705a3c064346c15e492ff382cbc573652134db81112672303df2b6299e84157af44dc", @generic="bcd49103424a29c7a4dae1b38928fadb945173c5fd7778c6d482a07657a8fa63de044d98a25aa38db97a1d8cfa0f3e1373797707fc1049ecc0b7", @typed={0x8, 0x84, @uid=r4}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) 09:07:44 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) sched_setattr(r3, &(0x7f0000000080)={0x30, 0x3, 0x1, 0x38f45fba, 0x1, 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r5 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000000)=0x9) fcntl$setlease(r5, 0x400, 0x1) fcntl$setown(r5, 0x8, 0x0) execveat(r5, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:07:44 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000f00000000080b5c75", @ANYRES32=r4, @ANYBLOB="280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @rand_addr=0x4, r4}, 0xc) poll(0x0, 0x0, 0x8000000000000200) r5 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) r6 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r8, r7}, &(0x7f0000000400)=""/262, 0x106, &(0x7f0000000040)={&(0x7f0000000000)={'crc32-generic\x00'}}) keyctl$read(0xb, r7, &(0x7f0000000040)=""/119, 0x77) fcntl$setlease(r5, 0x400, 0x1) fcntl$setown(r5, 0x8, 0x0) execveat(r5, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:44 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) open(&(0x7f0000000940)='./file0\x00', 0x40, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_bp={0x0}, 0x200000000, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x100000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x2, 0x4}}, 0x20) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000180)={{0x4, @addr=0x2}, "e2d57446c5e89e227ebcdc68e39f573f29ad29ce181d45c2443636bc9dd573ab", 0x5}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() tkill(r4, 0x1000000000013) [ 945.537351] FAULT_INJECTION: forcing a failure. [ 945.537351] name failslab, interval 1, probability 0, space 0, times 0 [ 945.597897] CPU: 1 PID: 9165 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 945.604878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 945.614230] Call Trace: [ 945.614256] dump_stack+0x138/0x197 [ 945.614278] should_fail.cold+0x10f/0x159 [ 945.614293] should_failslab+0xdb/0x130 [ 945.614312] kmem_cache_alloc+0x2d7/0x780 [ 945.614329] ? proc_i_callback+0x30/0x30 [ 945.614339] proc_alloc_inode+0x1c/0x1a0 [ 945.614349] alloc_inode+0x64/0x180 09:07:44 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/create\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x802000004, 0x6) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r0, 0x0) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @null}, [@netrom, @null, @bcast, @remote, @netrom, @rose]}, &(0x7f0000000240)=0x48, 0x80000) ioctl(r2, 0x61fe, &(0x7f0000000340)="20b4e8e5adf2d906c2a192f9699b2461babaac23a1cf5b0cbc39c00b05fa178bbe728d0a9330ad539f1e34b6e95899e8f2378edbc6e0aee8b0b9b471c002e9886a6d30b2ff6150aa66650c179cdcbe66598b6f21ac69616e71d983a7088685da920d40f999d8c262dedb913a25a8ec84799f80eb11222150ce6c2d42dc15ce097b879231c64f787b03cc72fa33d0e77f12e3d2242c553699746b05d4f2ef9b3add5430ba6c84390755ac") setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000280), 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000140)=""/39) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0xe3, 0x0, 0x80, 0x4, 0x3f, 0x3, 0x3e, 0x10001, 0x0, 0x40, 0x0, 0xfffffffa, 0x40, 0x38, 0x2, 0x0, 0x401, 0x5}, [{0x0, 0x3ff, 0x7, 0x7d7c, 0xfffffffffffffc00}, {0x6, 0x0, 0x100000000, 0x0, 0x7fff, 0x1, 0x3}], "", [[], [], []]}, 0x3b0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x802000004, 0x6) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000180)={'vxcan1\x00', 0x1}) [ 945.614360] new_inode_pseudo+0x19/0xf0 [ 945.614370] new_inode+0x1f/0x40 [ 945.614380] proc_pid_make_inode+0x22/0x230 [ 945.614392] proc_pident_instantiate+0x7f/0x290 [ 945.614405] proc_fill_cache+0x34c/0x500 [ 945.614415] ? proc_pid_instantiate+0x160/0x160 [ 945.614433] ? proc_task_lookup+0x4d0/0x4d0 [ 945.614461] proc_pident_readdir+0x3ac/0x520 [ 945.614476] proc_tgid_base_readdir+0x2a/0x30 [ 945.614485] iterate_dir+0x1a2/0x5f0 [ 945.614498] SyS_getdents+0x132/0x260 [ 945.624266] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 945.624846] ? SyS_old_readdir+0x130/0x130 [ 945.624860] ? SyS_write+0x15e/0x230 [ 945.624870] ? iterate_dir+0x5f0/0x5f0 [ 945.624886] ? do_syscall_64+0x53/0x640 [ 945.624897] ? SyS_old_readdir+0x130/0x130 [ 945.624909] do_syscall_64+0x1e8/0x640 [ 945.631797] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 945.633021] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 945.633041] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 945.633054] RIP: 0033:0x459ef9 [ 945.637611] FAT-fs (loop1): bogus number of reserved sectors [ 945.641163] RSP: 002b:00007fb315eabc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 945.641176] RAX: ffffffffffffffda RBX: 00007fb315eabc90 RCX: 0000000000459ef9 [ 945.641182] RDX: 0000000000000177 RSI: 0000000020000ea9 RDI: 0000000000000003 [ 945.641188] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 945.641193] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb315eac6d4 [ 945.641199] R13: 00000000004c0b2d R14: 00000000004d3480 R15: 0000000000000004 [ 945.649338] FAT-fs (loop1): Can't find a valid FAT filesystem [ 945.680165] protocol 88fb is buggy, dev hsr_slave_0 [ 945.708295] protocol 88fb is buggy, dev hsr_slave_1 09:07:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x10000000006) r1 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x100, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getpriority(0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0xdd06f9bec05c1792) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f00000001c0)={0x8, 0x0, 0x1007, 0x114815e4, 0x800, 0x3, 0x5}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80, 0x180) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000140)={0x8, 0x8001, 0x3e325ad6, 0x8, 0x1f}, 0x14) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x1, 0x0) 09:07:44 executing program 3 (fault-call:2 fault-nth:11): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 945.864156] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 945.886937] FAT-fs (loop1): bogus number of reserved sectors [ 945.942094] FAT-fs (loop1): Can't find a valid FAT filesystem 09:07:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="0f6465762f6e756c6c62300016152b142ab2756fa246eb2c7b698819124e947a18f0798ee1a08405b62448a2f1345c0c0c791f9788b7c65474696fba8ea82b7fef4682080bd093f9ac86b3faaae0be34f0848ab26b932d06ad328bff6ccf45f84c6253ce6e6412f522a3c9800354e9d1d16b9a7e8283414adf922cd86536a40a3967b56eacc99f5afb70d5ddb907e788a77efcfda5d3a24d138b016e4f119d4bb7a46f0cf44e2b5fb94f48d3bb14"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='vfat\x00', 0x0, 0x0) [ 946.045204] FAULT_INJECTION: forcing a failure. [ 946.045204] name failslab, interval 1, probability 0, space 0, times 0 [ 946.057694] CPU: 1 PID: 9200 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 946.064644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 946.074088] Call Trace: [ 946.076699] dump_stack+0x138/0x197 [ 946.080339] should_fail.cold+0x10f/0x159 [ 946.084501] should_failslab+0xdb/0x130 [ 946.088480] kmem_cache_alloc+0x2d7/0x780 [ 946.088494] ? proc_alloc_inode+0x1c/0x1a0 [ 946.088507] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 946.088524] selinux_inode_alloc_security+0xb6/0x2a0 [ 946.088538] security_inode_alloc+0x94/0xd0 [ 946.088552] inode_init_always+0x552/0xaf0 [ 946.088572] alloc_inode+0x81/0x180 [ 946.102449] new_inode_pseudo+0x19/0xf0 [ 946.102462] new_inode+0x1f/0x40 [ 946.102477] proc_pid_make_inode+0x22/0x230 [ 946.102488] proc_pident_instantiate+0x7f/0x290 [ 946.102500] proc_fill_cache+0x34c/0x500 [ 946.102509] ? proc_pid_instantiate+0x160/0x160 [ 946.102526] ? proc_task_lookup+0x4d0/0x4d0 [ 946.102555] proc_pident_readdir+0x3ac/0x520 [ 946.102574] proc_tgid_base_readdir+0x2a/0x30 [ 946.102587] iterate_dir+0x1a2/0x5f0 [ 946.102600] SyS_getdents+0x132/0x260 [ 946.102610] ? SyS_old_readdir+0x130/0x130 [ 946.102620] ? SyS_write+0x15e/0x230 [ 946.102630] ? iterate_dir+0x5f0/0x5f0 [ 946.102645] ? do_syscall_64+0x53/0x640 [ 946.102656] ? SyS_old_readdir+0x130/0x130 [ 946.102668] do_syscall_64+0x1e8/0x640 09:07:45 executing program 3 (fault-call:2 fault-nth:12): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 946.102678] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 946.102697] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 946.102707] RIP: 0033:0x459ef9 [ 946.102713] RSP: 002b:00007fb315eabc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 946.102725] RAX: ffffffffffffffda RBX: 00007fb315eabc90 RCX: 0000000000459ef9 [ 946.102731] RDX: 0000000000000177 RSI: 0000000020000ea9 RDI: 0000000000000003 [ 946.102737] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 946.102743] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb315eac6d4 [ 946.102749] R13: 00000000004c0b2d R14: 00000000004d3480 R15: 0000000000000004 [ 946.315992] BTRFS error (device loop2): superblock checksum mismatch [ 946.345911] FAULT_INJECTION: forcing a failure. [ 946.345911] name failslab, interval 1, probability 0, space 0, times 0 [ 946.358252] CPU: 0 PID: 9204 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 946.365203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 946.365208] Call Trace: [ 946.365232] dump_stack+0x138/0x197 [ 946.365254] should_fail.cold+0x10f/0x159 [ 946.365276] should_failslab+0xdb/0x130 [ 946.365295] kmem_cache_alloc+0x2d7/0x780 [ 946.365311] ? debug_smp_processor_id+0x1c/0x20 [ 946.365321] ? perf_trace_lock+0x109/0x500 [ 946.365336] __d_alloc+0x2d/0x9f0 [ 946.365347] ? __d_lookup+0x37b/0x670 [ 946.409661] d_alloc+0x4d/0x270 [ 946.412960] ? __d_lookup+0x37b/0x670 [ 946.416878] d_alloc_parallel+0xe5/0x1800 [ 946.421047] ? lock_downgrade+0x740/0x740 [ 946.425204] ? __d_lookup+0x3a2/0x670 [ 946.429004] ? mark_held_locks+0xb1/0x100 [ 946.433169] ? __d_lookup_rcu+0x630/0x630 [ 946.437336] ? __lockdep_init_map+0x10c/0x570 [ 946.441835] ? __lockdep_init_map+0x10c/0x570 [ 946.446331] ? lockdep_init_map+0x9/0x10 [ 946.450390] proc_fill_cache+0x2c1/0x500 [ 946.454441] ? proc_pid_instantiate+0x160/0x160 [ 946.459107] ? proc_task_lookup+0x4d0/0x4d0 09:07:45 executing program 1: openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) close(r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x1, 0x0) io_setup(0x7, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x1}]) [ 946.463429] proc_pident_readdir+0x3ac/0x520 [ 946.467839] proc_tgid_base_readdir+0x2a/0x30 [ 946.472445] iterate_dir+0x1a2/0x5f0 [ 946.476150] SyS_getdents+0x132/0x260 [ 946.479935] ? SyS_old_readdir+0x130/0x130 [ 946.484158] ? SyS_write+0x15e/0x230 [ 946.487866] ? iterate_dir+0x5f0/0x5f0 [ 946.491759] ? do_syscall_64+0x53/0x640 [ 946.495739] ? SyS_old_readdir+0x130/0x130 [ 946.500846] do_syscall_64+0x1e8/0x640 [ 946.500856] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 946.500873] entry_SYSCALL_64_after_hwframe+0x42/0xb7 09:07:45 executing program 3 (fault-call:2 fault-nth:13): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 946.500883] RIP: 0033:0x459ef9 [ 946.509585] RSP: 002b:00007fb315eabc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 946.509595] RAX: ffffffffffffffda RBX: 00007fb315eabc90 RCX: 0000000000459ef9 [ 946.509601] RDX: 0000000000000177 RSI: 0000000020000ea9 RDI: 0000000000000003 [ 946.509606] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 946.509612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb315eac6d4 [ 946.509617] R13: 00000000004c0b2d R14: 00000000004d3480 R15: 0000000000000004 [ 946.572104] BTRFS error (device loop2): open_ctree failed [ 946.628513] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:45 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) open(&(0x7f0000000940)='./file0\x00', 0x40, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_bp={0x0}, 0x200000000, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x100000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x2, 0x4}}, 0x20) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000180)={{0x4, @addr=0x2}, "e2d57446c5e89e227ebcdc68e39f573f29ad29ce181d45c2443636bc9dd573ab", 0x5}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() tkill(r4, 0x1000000000013) 09:07:45 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x3c0aca1ea9a83130, 0x0) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000040)) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0xffffffffffffdffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x7ad4ebe54c8e917c, 0x84) r3 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r4 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default}) fcntl$setlease(r4, 0x400, 0x0) fcntl$setown(r4, 0x8, 0x0) execveat(r4, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:07:45 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8002b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) r4 = accept4$tipc(r3, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000080)=0x1ff, 0x4) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:45 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x72, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={r5, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x190}, &(0x7f0000000040)=0x8) mknod(0x0, 0x0, 0x6) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = gettid() tkill(r6, 0x1000000000013) [ 946.738626] FAULT_INJECTION: forcing a failure. [ 946.738626] name failslab, interval 1, probability 0, space 0, times 0 [ 946.771509] CPU: 1 PID: 9232 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 946.778496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 946.787868] Call Trace: [ 946.790473] dump_stack+0x138/0x197 [ 946.794111] should_fail.cold+0x10f/0x159 [ 946.798282] should_failslab+0xdb/0x130 [ 946.802282] kmem_cache_alloc+0x2d7/0x780 [ 946.806456] ? proc_i_callback+0x30/0x30 [ 946.810534] proc_alloc_inode+0x1c/0x1a0 [ 946.814600] alloc_inode+0x64/0x180 [ 946.818236] new_inode_pseudo+0x19/0xf0 [ 946.822222] new_inode+0x1f/0x40 [ 946.825596] proc_pid_make_inode+0x22/0x230 [ 946.829929] proc_pident_instantiate+0x7f/0x290 [ 946.834612] proc_fill_cache+0x34c/0x500 [ 946.838679] ? proc_pid_instantiate+0x160/0x160 [ 946.843367] ? proc_task_lookup+0x4d0/0x4d0 [ 946.847714] proc_pident_readdir+0x3ac/0x520 [ 946.852146] proc_tgid_base_readdir+0x2a/0x30 [ 946.856662] iterate_dir+0x1a2/0x5f0 [ 946.860387] SyS_getdents+0x132/0x260 [ 946.864192] ? SyS_old_readdir+0x130/0x130 [ 946.868433] ? SyS_write+0x15e/0x230 [ 946.872156] ? iterate_dir+0x5f0/0x5f0 [ 946.876052] ? do_syscall_64+0x53/0x640 [ 946.880054] ? SyS_old_readdir+0x130/0x130 [ 946.884298] do_syscall_64+0x1e8/0x640 [ 946.888190] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 946.893329] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 946.898523] RIP: 0033:0x459ef9 [ 946.901711] RSP: 002b:00007fb315eabc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 946.909453] RAX: ffffffffffffffda RBX: 00007fb315eabc90 RCX: 0000000000459ef9 [ 946.917074] RDX: 0000000000000177 RSI: 0000000020000ea9 RDI: 0000000000000003 [ 946.924351] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 946.931653] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb315eac6d4 [ 946.939293] R13: 00000000004c0b2d R14: 00000000004d3480 R15: 0000000000000004 09:07:45 executing program 1: syz_mount_image$xfs(&(0x7f0000000300)='xfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@logbufs={'logbufs', 0x3d, 0x6}}]}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x100000000}, 0x28, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x2001, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000280)={0x2, 0x0, 0xa9d}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x802000004, 0x6) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000100)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) 09:07:46 executing program 3 (fault-call:2 fault-nth:14): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:46 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a000, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000040)={0x3}) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() [ 947.344506] FAULT_INJECTION: forcing a failure. [ 947.344506] name failslab, interval 1, probability 0, space 0, times 0 [ 947.358804] CPU: 1 PID: 9292 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 947.365771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 947.375149] Call Trace: [ 947.378456] dump_stack+0x138/0x197 [ 947.382124] should_fail.cold+0x10f/0x159 [ 947.386299] should_failslab+0xdb/0x130 [ 947.390293] kmem_cache_alloc+0x2d7/0x780 [ 947.394453] ? proc_alloc_inode+0x1c/0x1a0 [ 947.398697] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 947.404161] selinux_inode_alloc_security+0xb6/0x2a0 [ 947.409274] security_inode_alloc+0x94/0xd0 [ 947.413683] inode_init_always+0x552/0xaf0 [ 947.418057] alloc_inode+0x81/0x180 [ 947.421789] new_inode_pseudo+0x19/0xf0 [ 947.425775] new_inode+0x1f/0x40 [ 947.429151] proc_pid_make_inode+0x22/0x230 [ 947.433575] proc_pident_instantiate+0x7f/0x290 [ 947.438262] proc_fill_cache+0x34c/0x500 [ 947.442423] ? proc_pid_instantiate+0x160/0x160 [ 947.447102] ? proc_task_lookup+0x4d0/0x4d0 [ 947.451442] proc_pident_readdir+0x3ac/0x520 [ 947.455856] proc_tgid_base_readdir+0x2a/0x30 [ 947.460354] iterate_dir+0x1a2/0x5f0 [ 947.464069] SyS_getdents+0x132/0x260 [ 947.467858] ? SyS_old_readdir+0x130/0x130 [ 947.472090] ? SyS_write+0x15e/0x230 [ 947.475799] ? iterate_dir+0x5f0/0x5f0 [ 947.479677] ? do_syscall_64+0x53/0x640 [ 947.483640] ? SyS_old_readdir+0x130/0x130 [ 947.487873] do_syscall_64+0x1e8/0x640 [ 947.491779] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 947.496627] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 947.501814] RIP: 0033:0x459ef9 [ 947.504999] RSP: 002b:00007fb315eabc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 947.512732] RAX: ffffffffffffffda RBX: 00007fb315eabc90 RCX: 0000000000459ef9 [ 947.520013] RDX: 0000000000000177 RSI: 0000000020000ea9 RDI: 0000000000000003 [ 947.527301] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 947.534572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb315eac6d4 09:07:46 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000020000ee19, 0x10002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000300000085000000220000000969f8ff0e0000002b2520194976ddd2e3a996850000002e000000b55ac0001f"], &(0x7f00000001c0)='syzkaller\x00', 0x1f, 0x58, &(0x7f0000000200)=""/88, 0x41100, 0x0, [], 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xd, 0x1, 0x6b}, 0x10}, 0x70) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x24000, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f00000003c0)=0x5372) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000100)={0x8021}) [ 947.541851] R13: 00000000004c0b2d R14: 00000000004d3480 R15: 0000000000000004 09:07:46 executing program 3 (fault-call:2 fault-nth:15): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 947.598640] XFS (loop1): Invalid superblock magic number 09:07:46 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x6) tkill(r2, 0x1000000000013) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x802000004, 0x6) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000180)=0x0) fcntl$lock(r5, 0x7, &(0x7f00000001c0)={0x1, 0x4, 0xcbc, 0xffffffffffffffac, r9}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0x802000004, 0x6) ioctl$BLKDISCARD(r11, 0x1277, &(0x7f0000000140)=0x200) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f00000000c0)) 09:07:46 executing program 2: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000009c0)) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x3, 0x1}, &(0x7f0000000a40)=0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000540)={0x4331538a67d891eb}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x1b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x85, 0x14020, 0xbca30812b69f0e01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x285a0, 0x0, 0x0, 0x5, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='io\x00') sendto$inet6(r5, 0x0, 0x0, 0x4000000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr="a62a96499930e2fbafe4a66ed4fd140e"}, 0x1c) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000001c0)="04", 0x1, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r7, r6, r7}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={'sha384-generic\x00\n\x00'}}) 09:07:46 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="01"], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) r4 = geteuid() setreuid(r4, 0x0) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x800448d2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x800448d2, 0x0) fchdir(0xffffffffffffffff) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x1) socket(0x10, 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r5 = getpgid(0x0) wait4(r5, 0x0, 0x40000000, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 947.901168] FAULT_INJECTION: forcing a failure. [ 947.901168] name failslab, interval 1, probability 0, space 0, times 0 [ 947.935981] CPU: 1 PID: 9322 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 947.942968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 947.952334] Call Trace: [ 947.954930] dump_stack+0x138/0x197 [ 947.958574] should_fail.cold+0x10f/0x159 [ 947.962742] should_failslab+0xdb/0x130 [ 947.967336] kmem_cache_alloc+0x2d7/0x780 [ 947.971500] ? debug_smp_processor_id+0x1c/0x20 [ 947.976175] ? perf_trace_lock+0x109/0x500 [ 947.980444] __d_alloc+0x2d/0x9f0 [ 947.983899] ? __d_lookup+0x37b/0x670 [ 947.987705] d_alloc+0x4d/0x270 [ 947.990984] ? __d_lookup+0x37b/0x670 [ 947.994790] d_alloc_parallel+0xe5/0x1800 [ 947.998945] ? lock_downgrade+0x740/0x740 [ 948.003098] ? __d_lookup+0x3a2/0x670 [ 948.006907] ? mark_held_locks+0xb1/0x100 [ 948.011063] ? __d_lookup_rcu+0x630/0x630 [ 948.015324] ? __lockdep_init_map+0x10c/0x570 [ 948.019829] ? __lockdep_init_map+0x10c/0x570 [ 948.024334] ? lockdep_init_map+0x9/0x10 [ 948.028397] proc_fill_cache+0x2c1/0x500 [ 948.032461] ? proc_pid_instantiate+0x160/0x160 [ 948.037239] ? proc_task_lookup+0x4d0/0x4d0 [ 948.041571] ? kasan_check_read+0x11/0x20 [ 948.045732] proc_pident_readdir+0x3ac/0x520 09:07:46 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000380)={@local, @rand_addr, 0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000400)={@rand_addr="e406c1f69c17d4f8bbe88ecbb5b1251f", 0x8, r3}) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() [ 948.050162] proc_tgid_base_readdir+0x2a/0x30 [ 948.054663] iterate_dir+0x1a2/0x5f0 [ 948.058385] SyS_getdents+0x132/0x260 [ 948.062195] ? SyS_old_readdir+0x130/0x130 [ 948.066461] ? SyS_write+0x15e/0x230 [ 948.070173] ? iterate_dir+0x5f0/0x5f0 [ 948.074066] ? do_syscall_64+0x53/0x640 [ 948.078031] ? SyS_old_readdir+0x130/0x130 [ 948.078043] do_syscall_64+0x1e8/0x640 [ 948.078056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 948.091003] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 948.096195] RIP: 0033:0x459ef9 [ 948.099380] RSP: 002b:00007fb315eabc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 948.107113] RAX: ffffffffffffffda RBX: 00007fb315eabc90 RCX: 0000000000459ef9 [ 948.114386] RDX: 0000000000000177 RSI: 0000000020000ea9 RDI: 0000000000000003 [ 948.121666] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 09:07:47 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13113901ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() [ 948.122841] audit: type=1400 audit(1571994467.006:292): avc: denied { map } for pid=9325 comm="syz-executor.2" path="/dev/vbi9" dev="devtmpfs" ino=15683 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:v4l_device_t:s0 tclass=chr_file permissive=1 [ 948.128937] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb315eac6d4 [ 948.128943] R13: 00000000004c0b2d R14: 00000000004d3480 R15: 0000000000000004 09:07:47 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x4000, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) creat(0x0, 0x10) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = gettid() process_vm_writev(r8, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) r9 = gettid() timer_create(0x7, &(0x7f0000000040)={0x0, 0x8, 0x4, @tid=r9}, &(0x7f0000000180)) r10 = getpid() sched_setattr(r10, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r10, 0x9, 0x6) gettid() sched_getattr(r9, &(0x7f0000000480)={0x30}, 0x6, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/289, @ANYRESHEX, @ANYBLOB, @ANYRES32=r6, @ANYRESDEC=r8, @ANYBLOB="66ff59fa46183631b95a55b28c2b8060826156fd28449cbdccbc833daa6b8df5209bc4cdff4c01b940df0a3a5fd3486545a90c22c0c513fef2ff964a54b6d27d7cf32c809d1ff0c8168a6c77b692d3ed06487e8a8993f5490b18b89ee4a201c441a944a971a51eb766b72a1b69dbb22e0e512df94972e799c6df471192d0ed349846fefcfe8e23b4fc446608295111411052fc668a25e2ddbb9ee2bd69bc25efec4a"]) sendfile(r7, r7, 0x0, 0x2008000fffffffe) socket$inet_tcp(0x2, 0x1, 0x0) r11 = gettid() timer_create(0x7, &(0x7f0000000040)={0x0, 0x8, 0x4, @tid=r11}, &(0x7f0000000180)) sched_getaffinity(r11, 0x8, &(0x7f0000000380)) [ 948.630130] net_ratelimit: 12 callbacks suppressed [ 948.630136] protocol 88fb is buggy, dev hsr_slave_0 [ 948.640474] protocol 88fb is buggy, dev hsr_slave_1 09:07:47 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0100050200804000690000000700"], 0x12) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x8}, 0x28, 0x2) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() [ 948.712805] devpts: called with bogus options 09:07:47 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x90010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000013) 09:07:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init() r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80102, 0x0) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000140)=""/17, &(0x7f0000000180)=0x11) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$ax25(0xffffffffffffffff, &(0x7f00000000c0)="e9a04fc320bfd10c744e56591aabf9abb45bec2dc6192237bca0141b", 0x1c, 0x200080c1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r4, &(0x7f0000000080)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0xfffffc17}], 0x1, 0x0) ioperm(0x5, 0x9, 0x938) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000480)={0x0, 0x5e, "820e3ddd5bd3fc00493775ecb14d410946bfe19d9b00d25af6f47a694bb82025a852c25e48cbfc70d34e3c8ca5049b7d4da531341023e9f20b191e5c5b0b6fe470d70b176039b0dfb6ec795db979d9816a4c7986c25070ab44a70b2a4553"}, &(0x7f0000000500)=0x66) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000540)={r6, 0x5, 0x0, 0x101}, &(0x7f0000000580)=0x10) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_ifreq(r7, 0x891e, &(0x7f0000000000)={'gre0\x00', @ifru_mtu=0x7}) r8 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=@newpolicy={0xe0, 0x13, 0x0, 0x70bd2a, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@ipv4={[], [], @loopback}, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0x779395544de33314, 0x0, 0x0, 0x0, r8}, {0x1000, 0x7, 0x2784, 0x31, 0x0, 0x6, 0x8, 0x8cc}, {0x7, 0x7, 0x7, 0x4}, 0xfffffe00, 0x0, 0x0, 0x0, 0x1, 0x2}, [@replay_val={0x10, 0xa, {0x70bd2d, 0x70bd28, 0x4}}, @ipv6_hthresh={0x8, 0x4, {0x40, 0x3e}}, @ipv4_hthresh={0x8, 0x3, {0x17, 0x18}}, @output_mark={0x8, 0x1d, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40004}, 0x40000000) 09:07:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.Z\x11j\xe5\xaa\xb3\xc9\\x\x1fO\xfd\x1e~\xf1\x98\xdc\xa4\x1e\x0f\x9c\xd7\b\xde!\xd4\x9eu/c\xb2\x11\x89\xe5\x8a') getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:47 executing program 2: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000009c0)) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x3, 0x1}, &(0x7f0000000a40)=0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000540)={0x4331538a67d891eb}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x1b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x85, 0x14020, 0xbca30812b69f0e01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x285a0, 0x0, 0x0, 0x5, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='io\x00') sendto$inet6(r5, 0x0, 0x0, 0x4000000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr="a62a96499930e2fbafe4a66ed4fd140e"}, 0x1c) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000001c0)="04", 0x1, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r7, r6, r7}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={'sha384-generic\x00\n\x00'}}) 09:07:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000140)) ptrace$cont(0x9, r1, 0x9, 0x6) prlimit64(r1, 0xf3396a56a5d4e932, &(0x7f0000000000)={0x4, 0x2}, 0x0) 09:07:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$x25(r1, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r2, 0x0) r3 = accept(r2, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x103) [ 949.006207] ptrace attach of "/root/syz-executor.1"[11833] was attempted by "/root/syz-executor.1"[9400] 09:07:48 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0xffffffffffffff69, 0x2, 0x0, 0x1, 0x5}, 0x0) ptrace$cont(0x9, r0, 0x9, 0x6) r1 = syz_open_procfs(r0, &(0x7f0000000140)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r1, &(0x7f0000000080)=""/189, 0x25c) getdents(r1, &(0x7f0000000ea9)=""/375, 0x177) 09:07:48 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000000)=0xae8a) bind$inet6(r0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r4 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) execveat(r4, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000040)) 09:07:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80802, 0x0) getdents64(r1, &(0x7f0000000140)=""/202, 0xca) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r3, 0x9, 0x6) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r4, 0x9, 0x6) sendmsg$nl_netfilter(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x86198404869e0df3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x1d4, 0x13, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {0xc, 0x0, 0x1}, [@generic="387883239ddcf72f6ec83aaef8d4913c9f2935a0ca966c2094f3643974983768e441c4e2d33084b8017e7e8fd21ce2e386dc903ec4a10b5fe06e19f7f23893a003ac8645a285ec2b2de4bb18ba3dc192da9a70e19f8ddfa27b780162d447c8c875cee0aa2cbf50b08b8c67bc441f59a40ad55ad4823332", @nested={0x74, 0x8e, [@generic="8a781a6eb8ccc86c219f749b5fd740153a64b4278765f31407e53fb4edd63baad69fc8c0f992fec4cae818e8bab963dfeab37373fba4445d6f4774862e782a25e1725f6c6c7f896fa5e267c7519801d25290a44823220ae42b89ad6c216a9b83f51bf8fc20a6", @typed={0x8, 0x32, @pid=r3}]}, @typed={0x8, 0x1, @pid=r4}, @generic="a01f011b0149dbac58e4b88f4d8b5b17c6499bfda8556d0bcfd014e8a4f1b836d558b63a8b54b4def0ec3c45f8046df4448b43100f9bcc9f77db7d005e4ce5f2c832dbbaf11873ca6114cb047bd59aeab17a0c42f453b971b773a61af5d21fccfe4f276ad4007ec42e6d3a4241731fa968533c24f3b53193da1765608aaee2482c483c18edad350263bd1a848c2c92a711af8c18e91b0d1359b1ae765b13c37720c64b276bc66b917ce97c10fb95114b2057b69e9dd34a7dae2480592e7d0c078c4ace6d5553bc5ae37726"]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000010}, 0x14080854) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f00000a5000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000000)=""/39, 0x17, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 09:07:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) getdents64(r2, &(0x7f0000000500)=""/192, 0xc0) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:48 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x90010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000013) 09:07:48 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000140)='\x00', 0x1, 0x2) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeff, 0x0, @perf_config_ext, 0x10000, 0x401, 0x3}, 0x0, 0xe, r2, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) fcntl$setlease(r3, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r3, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) ioctl$TIOCLINUX2(r5, 0x541c, &(0x7f0000000200)={0x2, 0x1, 0x8, 0x8, 0x7, 0x9}) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x10000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = gettid() tkill(r6, 0x1000000000013) 09:07:48 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={[{@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@nocompress='nocompress'}]}) 09:07:48 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r1, 0x9, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x2, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000080)={'bridge_slave_0\x00', {0x2, 0x4e20, @loopback}}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000000)={0xa8, 0xdad6, 0x3, {0x7fff, 0xc4ae}, {0x2, 0x20}, @ramp={0x1ff, 0x0, {0x6a33, 0x4, 0x4}}}) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:07:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x2200) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 949.910122] protocol 88fb is buggy, dev hsr_slave_0 [ 949.915304] protocol 88fb is buggy, dev hsr_slave_1 [ 949.920507] protocol 88fb is buggy, dev hsr_slave_0 [ 949.925621] protocol 88fb is buggy, dev hsr_slave_1 09:07:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4\xc6\n\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!d\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34ky\xe0\xeb\xc86\xe6n=\x0f\xc2\xb8F[\xf7\xc8VK\xad\x90\x00\x00\x00\x00\x00\x00\x00o\xac\xfe|\x16E\xa6\x16\xe1%I4\xce$#\xd2\xfbdV\xb1\x80\xed#1\xe1\xc9\xa0\xd4\xcbuO\x8e\x0e{\x94\xb3\xa2\xecn\xdcR\x1eY/\xbb\x0f\x93m9\xa2I_2\xd2\x8c\r\x95IM`Ka\x9e\x8b\x18=\xc6\a\xdd\xb8\xd9\x19\xfb1L\x1d\xe8i\xbe\xbe\xaaj#\xa0<^E\xf8\xf2\xd0>\xe1\xe6\xfb\xba\xfc=Nk]\xb5\xce\x8fS[\xe4\xcc\xee\xc9N\x1bv\xe3\xd2\xf8\xf3\x92\xfe\x04?\xe7\x15\x9bTB;\xf5\xab\xaa\"}\xe9\x15\xe6\'\xfc\x1f\xdfv\xbc\x00\xd5\x85 \x94$\xae\xa1\xb7\x86\xdd\x9a\xb1v\xd1\xaf\x83\xe0y\x89W9B\x12\x8d\xafm\t\xfaB\x8f\xf4\x06\xc29\xf18\x81\xb6\xde\xd7J\xc1\xd4\x8aiG\xd3\x10\xe3o\aT\xe6\xf7,') getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 950.084838] ISOFS: Unable to identify CD-ROM format. 09:07:49 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000640)=@security={'security\x00', 0xe, 0x4, 0x438, 0x138, 0x138, 0x0, 0x278, 0x138, 0x368, 0x368, 0x368, 0x368, 0x368, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@ipvs={0x48, 'ipvs\x00', 0x0, {@ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xff000000], 0x4e21, 0x32, 0x2, 0x4e20, 0x26, 0x20}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x20}}}, {{@ipv6={@loopback, @ipv4={[], [], @local}, [0x7f8000ff, 0xffffffff, 0x0, 0xff000000], [0xff, 0xff000000, 0xffffff00, 0xff], 'veth1_to_team\x00', 'syzkaller0\x00', {}, {0xff}, 0x14, 0x37, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x6, 0x2, 0xff, 0x0, 0x4, 0x152, 0xa0}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3f, 'syz0\x00', 0x6}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xff000000], [0xff, 0xff000000, 0xffffff00, 0xffffffff], 'veth1_to_bond\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x62, 0x81, 0x2, 0x41}, 0x0, 0xc8, 0xf0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v2, 0x14, 0x0) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r5 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r5, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r5, 0x8, 0x0) execveat(r5, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = gettid() tkill(r6, 0x1000000000013) [ 950.230601] protocol 88fb is buggy, dev hsr_slave_0 [ 950.235719] protocol 88fb is buggy, dev hsr_slave_1 09:07:49 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x80000}, 0x10}, 0x70) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000030000000000000006000000850000006f000000182a0000", @ANYRES32=r2, @ANYBLOB="00000000ac0d000020b10400f0ffffff1800000076020000000000000500000018280000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff18220000", @ANYRES32=r4, @ANYBLOB="00000000160000008f470fa1709cb90a740000000000ae820a2f28ccc99ab0f12394ce4eb8c3ee4fed47872da36a897ae6a419cd53fef5"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6, [], r7, 0x16, r8, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x944e}, 0x10}, 0x70) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec300, 0x1, @perf_bp={&(0x7f0000000040), 0x3f85af197b8a0822}, 0x2501, 0x2, 0x1, 0x7, 0x101}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000440)=ANY=[@ANYBLOB="20ffbf87404d2410fd9975371eb613482ef136699705c049ca186f1bc5a6a61414d1e40e261ce85695b78643b72be55c4e0b9e862196f7f77826f3017f88fbb1254d195c82027de19aad871c6b973c12af0fb533fbaea43bc9c182d63218e2437ad9d7fdfcec4b01775853e0334068a0cfc08d9f4ab8fe82dce17e2b7f87dcd2c236c72e57d52bb8427c2dc328b0e2ede23c7a72eb5b481adfc41515bc4b0000"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0xc0c0583b, 0x20000001) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x305200, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r10, 0xc0485661, &(0x7f00000003c0)={0x4, 0x3, @raw_data=[0x9, 0x5db1, 0x1, 0x40, 0x0, 0x6, 0x2, 0x40b514db, 0xaef, 0x0, 0x60626774, 0x80000000, 0x2, 0x9, 0xffffff06, 0x6]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 09:07:49 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x20000, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0xd0f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x66}, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, @in6={0xa, 0x4e20, 0x7, @rand_addr="a849cd50d23826e9cbca0423e3b96559", 0x1f}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, @in6={0xa, 0x4e20, 0xffffffff, @mcast1, 0x4}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @broadcast}], 0xd0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) accept(0xffffffffffffffff, &(0x7f0000000140)=@nl=@unspec, &(0x7f00000001c0)=0x80) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:49 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xd9, 0x22200) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r1, &(0x7f0000000080)=""/189, 0x25c) getdents(r1, &(0x7f0000000ea9)=""/375, 0x177) 09:07:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x0, 0x2, @thr={0x0, 0x0}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="9000000010003b2400e625010b00fffff0000000", @ANYRES32=0x0, @ANYBLOB="b56d08000000000008000a00", @ANYRES32=0x6, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 09:07:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000140)=""/200, 0xc8) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:49 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000040)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000080)=""/93, 0x5d, 0x40000102, 0x0, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:07:49 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x101, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@local, @in6=@remote}}, {{@in=@remote}, 0x0, @in6=@dev}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) clock_gettime(0x0, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1}, {r0, 0x4081}], 0x2, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x142c1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@null=' \x00', 0xa, 'rose0\x00'}) clone(0x2162001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000540)={@empty, @dev={0xfe, 0x80, [], 0x15}, @loopback, 0x0, 0x400, 0x0, 0x100, 0x8}) socket$nl_route(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) r3 = eventfd(0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, r3}) 09:07:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x802000004, 0x6) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000500)='net/nfsfs\x00') getdents64(r3, &(0x7f0000000080)=""/189, 0x25c) getdents(r3, &(0x7f0000000ea9)=""/375, 0x177) [ 950.710127] protocol 88fb is buggy, dev hsr_slave_0 [ 950.715403] protocol 88fb is buggy, dev hsr_slave_1 [ 950.808556] device gre1 entered promiscuous mode 09:07:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x802000004, 0x6) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000140)={0x3fe, 0x3, 0x8, 'queue0\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r2, &(0x7f0000000080)=""/189, 0x25c) getdents(r2, &(0x7f0000000ea9)=""/375, 0x177) 09:07:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000700)=""/159, 0x9f}, {&(0x7f00000007c0)=""/95, 0x5f}, {&(0x7f0000000840)=""/98, 0x62}, {&(0x7f00000008c0)=""/152, 0x98}, {&(0x7f0000000980)=""/160, 0xa0}, {0x0}], 0x7}, 0x401}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) sendmmsg(r5, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x72, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000380)={r7, 0x7}, &(0x7f00000003c0)=0xc) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(0xffffffffffffffff, r8, 0x0, 0x320f) 09:07:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) 09:07:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r3, &(0x7f0000000080)=""/189, 0x25c) write$selinux_context(r1, &(0x7f0000000040)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25) getdents(r3, &(0x7f0000000ea9)=""/375, 0x177) 09:07:50 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x802000004, 0x6) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000140)=0xff, 0x4) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) fcntl$setpipe(r2, 0x407, 0x2) getsockname$unix(r5, &(0x7f0000000000), &(0x7f0000000080)=0x6e) r6 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r6, 0x400, 0x1) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000180)) fcntl$setown(r6, 0x8, 0x0) execveat(r6, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:50 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x8, r0, 0x8}) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() tkill(r4, 0x1000000000013) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000140)={0x5, {{0x2, 0x4e24, @multicast1}}}, 0x88) [ 951.128007] IPVS: ftp: loaded support on port[0] = 21 09:07:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000380)={0x6, 0xfff, 0x85, &(0x7f00000002c0)="4c15db85c4ef39db17e0684e41ba3be55eb5778872106f87637883500ce12055ab704aec35f365f27a121cbd549904401dd3d0242d57651f2eced0e4816866f2c90363cd76b2f6e1c323a8e275086f0c6fb87037b3a37e9169176fb1f0211b8abf1647233948a108c69c55ecfaa558438f2b5c6a0da00640db8a846e7bca5b1d2c93d16598"}) listen(r1, 0x0) r3 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000940), 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000800)={@remote={[], 0x2}, 0xf, 'nr0\x00'}) fcntl$dupfd(r3, 0x406, r0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xd, &(0x7f00000001c0)=0x0) connect$can_bcm(r4, &(0x7f0000000140), 0x10) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0xe1}]) r6 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xd, &(0x7f00000001c0)=0x0) connect$can_bcm(r6, &(0x7f0000000140), 0x10) io_submit(r7, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}]) r8 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xd, &(0x7f00000001c0)=0x0) connect$can_bcm(r8, &(0x7f0000000140), 0x10) io_submit(r9, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0, 0xe1}]) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC=r4, @ANYRESDEC=r0, @ANYRESHEX, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="035a11faaf1449529368fd6c3ec5b9dbd15463ce4de50ebf38e2fd6324952aad84f410436a75490572dd07a28b68054948f7306f80269f37c3b482db08210b2ed848c39f4cdecd235223ee916921a94270ce92cc3b798950f6"], @ANYRESHEX, @ANYRES32, @ANYRES32=0x0, @ANYRESHEX=r9]], 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r10 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) 09:07:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8001, 0x1436203c7e04b275) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x2c, 0x16, 0x0, 0xb, 0x4, 0xffffff80, 0x4, 0x105, 0xfffffffffffffffd}}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r2 = dup2(r1, r1) r3 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x1, 0xc45a1fa2673e838, 0x9, 0x7, r3}) name_to_handle_at(r2, &(0x7f0000000040)='\x00', &(0x7f0000000080)={0x8}, 0x0, 0x1000) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000240)={'bcsf0\x00', {0x2, 0x4e21, @broadcast}}) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x100, 0x0) getdents64(r4, &(0x7f0000001040)=""/4096, 0x1000) r5 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x5, 0x420900) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e22, @local}, {0x306}, 0x4, {0x2, 0x4e20, @loopback}, 'veth0_to_hsr\x00'}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:50 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000200)='\x97\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\xbeE\x95F\xa55\v\t\x10c\xcf\xc6\x9f\xd1\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x1) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:07:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=@deltfilter={0x850, 0x2d, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0x1, 0x7}, {0x6, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x100000}, @TCA_CHAIN={0x8, 0xb, 0xec0}, @filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x7fc, 0x2, [@TCA_CGROUP_EMATCHES={0x50, 0x3, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x34b5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, @TCF_EM_CMP={0x1c, 0x2, {0x8, 0x1, 0x8001, 0x0, {0x70c195e0, 0x4, 0x7fff, 0x3, 0xa, 0x81398d1d2e9d1af7, 0x1c015e8b6d0fca5e}}}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, @TCF_EM_CANID={0x18, 0x0, {0x0, 0x7, 0xfffe, 0x0, {0x5, 0x5}}}}]}, @TCA_CGROUP_POLICE={0xc, 0x2, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8de1}}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0x7, 0x7, 0x2, {0x7, 0x1, 0x1, 0x0, 0x3, 0x8}, {0x3, 0x3, 0x7, 0xf3a, 0x5, 0x800}, 0x71, 0x6, 0x7}}}, @TCA_CGROUP_POLICE={0x408, 0x2, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4f, 0xfff, 0x6, 0x80000000, 0x1f, 0x6, 0x8001, 0xfffffffd, 0x7, 0x200, 0x6, 0x1000000, 0x1f, 0x4, 0x7ff, 0x7f, 0x66, 0x1c2000, 0xf6, 0x3, 0x3f, 0x9, 0xfffffff7, 0xa50d, 0xffffffff, 0xff, 0x6, 0x8000000, 0x3, 0x2, 0x7fff, 0x9, 0xd6f, 0x1f, 0x7, 0x80000000, 0x1, 0x6, 0x6, 0x7, 0xf2, 0xffff, 0x41, 0x4a97, 0x8, 0x9, 0x6, 0x1000, 0x800, 0x10000, 0x9, 0x7ff, 0x9, 0x9, 0x0, 0x7fffffff, 0x2019, 0x9, 0x401, 0x81, 0x9, 0xc8, 0x2, 0x7ff, 0xffffce25, 0x7, 0xfff, 0x97, 0x1, 0x8ab, 0xc64, 0x1ff, 0x2, 0x0, 0x200, 0x3, 0x7, 0x6, 0x7ff, 0x2, 0x1ff, 0xfffff800, 0x3, 0x3, 0x3, 0x9, 0x9, 0x2, 0xcc0, 0x2, 0x8, 0x9, 0x0, 0x3, 0x3f, 0x3, 0x4, 0x9, 0x3, 0x0, 0x5, 0x2, 0xffffffff, 0x3, 0xab, 0xffffab41, 0xa3d8, 0x0, 0x7fff, 0x382, 0x80000000, 0x800, 0x4, 0xeae, 0x2, 0x1, 0x9, 0x1f, 0x9, 0x2, 0x9, 0x10001, 0x2, 0x3, 0x1, 0x8, 0xbf, 0x8, 0x0, 0x7703d5a6, 0xd80, 0x200, 0x8, 0x1da, 0x8001, 0x0, 0xd5f6, 0x4, 0xff, 0xffff, 0x4, 0x1, 0x4, 0x0, 0x101, 0x9, 0x7, 0x7, 0x1e2d, 0x40, 0x2, 0x1, 0x8, 0x2, 0x0, 0x0, 0x3f, 0xb49, 0x1b69, 0x7, 0xfffffffc, 0xfff, 0x3, 0x1, 0x81, 0x39a, 0xffff, 0x1, 0x0, 0x2, 0x20000, 0x1, 0x2f60, 0x7, 0xc8a, 0x3, 0x401, 0x6, 0x6, 0xfffffffe, 0x4, 0x2, 0x21, 0x4, 0x80, 0x2, 0x7, 0x80, 0x7, 0x7f, 0x3, 0x2, 0x24218000, 0x240, 0xe27, 0x5d, 0x1000, 0x80000001, 0x6, 0x7f, 0x80000000, 0x6, 0x1, 0x7, 0x1, 0x1, 0x80, 0x101, 0x0, 0x36, 0xfffffff7, 0x7ff, 0x0, 0x8, 0x1, 0x0, 0x400, 0x7b57, 0x4, 0xcaa2, 0x0, 0x401, 0x2, 0xffffffff, 0x3, 0x400, 0xb06, 0x10000, 0x1, 0x3, 0x1ff, 0x364, 0x5, 0x1, 0xb83, 0x7fffffff, 0x7f, 0x81, 0x8, 0xaf, 0x5, 0x7f, 0x4, 0x7fffffff, 0x4, 0x7, 0x2e4d, 0x7fffffff, 0x1, 0x60000000, 0x80, 0x4, 0xa2c, 0x2, 0x8001]}}, @TCA_CGROUP_EMATCHES={0xcc, 0x3, [@TCA_EMATCH_TREE_LIST={0xc8, 0x2, @TCF_EM_CONTAINER={0xc4, 0x9f, {0x7, 0x0, 0x3f, 0x0, "6e171904ae8e7d94b7e01bb71e3baba3451e05566a124c0c803bf4d03baafd85306dc776601599453d2861bb0e7afe227b7040d2365d2766b62e0a255350720428cc1595cf55a2da0a6e45ebdc6f6d7e5f3b51dfee7535aacfdd73cc45f09e96b0b29b6210b1872747f1f603cd3f7dae419df94c4a51d1283082fe365c8685c0f8ce9bb55df54bb925fe1d9b6b695f6aa33316c610f1be39b9137672ac98673b331f47ac1f5fc1a8401a7a090749b556ef"}}}]}, @TCA_CGROUP_ACT={0x288, 0x1, @m_simple={0x284, 0x20, {{0xc, 0x1, 'simple\x00'}, {0x194, 0x2, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xa0e, 0x7, 0x3fc5, 0x8000}}, @TCA_DEF_DATA={0x13c, 0x3, '\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'}, @TCA_DEF_DATA={0x24, 0x3, ')selinuxtrusteduser-(-keyring\'/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0xffff, 0x2, 0xffff}}]}, {0xdc, 0x6, "1a693e601bbe156178da5ff5902981e37f6aa9a804a98a9d44e9710a0eae8daeaa42a733fccc8db22915edd8949002d74216d61ca9efc0c5b59a634cae96e7fcf5ca3ebfeea95db7464f961bdec319979cc7f246f6cb301b937e43eddf09733352d8543a0d5f7b5463f8ff9d87cf41c17e293694242aa239aed5196cd938caca8ffde3064e0db3d6188e9df7bf78d4d862707205995f614b40ce78310d0d92c1cd888bab82e2b40fcce53f07ed825651790e099d0d8f4f844f5f04dd58a9dca6f8037edf38a9c5a757c0df32404f99a9193e05ba8088"}}}}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x8, 0x5, {0xf0, 0x2}}]}, 0x850}, 0x1, 0x0, 0x0, 0x30000000}, 0x20000000) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:50 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x4) bind$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff}, 0x42001, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r2, 0x9, 0x6) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r3, 0x9, 0x6) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r4, 0x9, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x802000004, 0x6) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x97, 0x7f, 0xff, 0x9, 0x0, 0x3f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x81, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x8084, 0x81, 0x2, 0x0, 0x4, 0x4, 0x6}, r4, 0xa, r6, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x802000004, 0x6) kcmp(r2, r3, 0xebcdf9939294467f, r7, r1) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r9 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r9, 0x400, 0x1) fcntl$setown(r9, 0x8, 0x0) execveat(r9, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:07:50 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000000)=0x6, 0x4) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:51 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x33) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/stat\x00') ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000540)={0x17}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x1a1) r2 = accept4$unix(r1, &(0x7f0000000180)=@abs, 0x0, 0x181400) r3 = socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000300)='\x00', 0x1, 0x3) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000100001080200"/20, @ANYRES32=0x0, @ANYBLOB="000004000000000000000007ff000001"], 0x28}}, 0x0) mount(&(0x7f0000000580)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='v7\x00', 0x8000, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x331, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) dup2(r4, r2) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x402000}, 0xc) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) 09:07:51 executing program 3: r0 = socket(0x2d, 0x805, 0x8) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r1, 0x9, 0x6) r2 = syz_open_procfs(r1, &(0x7f0000000380)='net/rpc\x00') getdents64(r2, &(0x7f0000000080)=""/189, 0x25c) getdents(r2, &(0x7f0000000ea9)=""/375, 0x177) 09:07:51 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/user\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000001c0)=0x40) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) prctl$PR_SET_FPEXC(0xc, 0x3) mknod(0x0, 0x0, 0x6) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = gettid() tkill(r5, 0x1000000000013) [ 952.315315] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 952.441052] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 09:07:51 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x7, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x1}, 0x10) ptrace$cont(0x9, r1, 0x9, 0x6) ptrace$cont(0x1f, r1, 0x20, 0x9) r3 = syz_open_procfs(r0, &(0x7f0000000140)='net/ip6_mr_cache\x00') getdents64(r3, &(0x7f0000000080)=""/189, 0x25c) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180)={0xfff8, 0x2, 0x3, 0xff}, 0x6) getdents(r3, &(0x7f0000000ea9)=""/375, 0x177) 09:07:51 executing program 1: setrlimit(0x40000000000008, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, r5) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000080)={0x0, 0x7, 0x2, &(0x7f0000000000)=0xfff}) mlockall(0x1) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) ioprio_set$uid(0x6, r7, 0x5) 09:07:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000001440)='./file0\x00', 0x400000, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x20, &(0x7f0000001480)=""/142, &(0x7f0000001540)=0x8e) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x3, 0x3, 0x10, &(0x7f0000ffc000/0x1000)=nil, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000003040), 0x3fffffffffffff1, 0x0) [ 954.070170] net_ratelimit: 8 callbacks suppressed [ 954.070176] protocol 88fb is buggy, dev hsr_slave_0 [ 954.080213] protocol 88fb is buggy, dev hsr_slave_1 [ 954.087639] protocol 88fb is buggy, dev hsr_slave_0 [ 954.092760] protocol 88fb is buggy, dev hsr_slave_1 [ 954.390143] protocol 88fb is buggy, dev hsr_slave_0 [ 954.395283] protocol 88fb is buggy, dev hsr_slave_1 09:07:53 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xf10b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) pread64(r3, &(0x7f0000000040)=""/24, 0x18, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x3}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() tkill(r4, 0x1000000000013) 09:07:53 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:53 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x590141, 0x0) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000080)) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() [ 954.933213] protocol 88fb is buggy, dev hsr_slave_0 [ 954.938348] protocol 88fb is buggy, dev hsr_slave_1 09:07:54 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000500)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x175qp\x97\x92w\x8e\xa5\x00\xad\"\xbd\x88\x02\x06\xe5\xfb\xdcP\xf4Spk\xf0\xd2\x10\xec\x99\xd0\xb6\x885\'\x9d\xad#\xbb\xa1') getdents64(r1, &(0x7f0000000080)=""/189, 0x25c) getdents(r1, &(0x7f0000000ea9)=""/375, 0x177) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x20, r5, 0x5, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x4}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xb8, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fff, @remote, 0x4}}}}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) 09:07:54 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) lsetxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') bind$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10) open(&(0x7f0000000100)='./control\x00', 0xc4000, 0x82) symlink(&(0x7f0000000080)='./control\x00', &(0x7f00000000c0)='./file0\x00') 09:07:54 executing program 3: r0 = getpid() r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r1, 0x9, 0x6) sched_setattr(r1, &(0x7f0000000000)={0x30, 0x2, 0x0, 0x80000000, 0x5, 0x0, 0x5}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r2, 0x9, 0x6) ptrace$cont(0x9, r2, 0x3, 0x6) r3 = syz_open_procfs(r0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r3, &(0x7f0000000080)=""/189, 0x25c) getdents(r3, &(0x7f0000000ea9)=""/375, 0x177) 09:07:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x1000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r1, r0, 0x0, 0x40801001) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) pipe(0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000ec0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x72, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={r5, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001440)={r5, 0x1000, "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"}, &(0x7f0000000040)=0x1008) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r6, 0xffff, 0x1, 0x5, 0x8, 0xffff371e}, 0x14) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x0) pipe(0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fstat(0xffffffffffffffff, &(0x7f00000002c0)) 09:07:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fgetxattr(r1, &(0x7f0000000140)=@random={'system.', '\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'}, &(0x7f0000000280)=""/158, 0x9e) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/de\x87/vbi#\x00', 0x0, 0x2) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000780)='/dev/mISDNtimer\x00', 0x420000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000007c0)={0xfffffff8, 0xff, 0x3, 0x0, 0x2, 0x80}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000340)={0x3, 'ip6gretap0\x00', 0x4}, 0x18) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x97}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x8000810) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x1ff, @remote, 0x17}, @in6={0xa, 0x4e22, 0x3, @empty, 0x5}, @in6={0xa, 0x4e21, 0xff, @dev={0xfe, 0x80, [], 0x1d}, 0xa26}, @in6={0xa, 0x4e23, 0x3, @ipv4={[], [], @loopback}, 0x4}, @in={0x2, 0x4e21, @rand_addr=0x8}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x20, @local, 0x81}], 0xcc) 09:07:54 executing program 3: getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000140)=""/150, &(0x7f0000000000)=0x96) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:07:54 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/182, 0xb6) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:07:55 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r4, 0x0) ftruncate(r3, 0x48280) r5 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r6, 0x10, 0x8003, 0x8020001) write$P9_RATTACH(r5, &(0x7f0000000080)={0x14}, 0xfffffff4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x802000004, 0x6) ioctl$SIOCX25GDTEFACILITIES(r8, 0x89ea, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x101000, 0x1) [ 956.150129] protocol 88fb is buggy, dev hsr_slave_0 [ 956.155323] protocol 88fb is buggy, dev hsr_slave_1 09:07:55 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa2000, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\t\x00\x00\r', @ANYRES32=0x0], &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x72, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={r5, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x0, 0xfff, 0x204, 0xff, 0x8, 0x7, 0x1f, 0x6, r5}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000200)={r6, 0x5}, 0x8) fcntl$setlease(r1, 0x400, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x802000004, 0x6) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10000, 0x0) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000000)=0x0) getpgid(r9) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r10 = gettid() tkill(r10, 0x1000000000013) 09:07:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) readv(r0, &(0x7f0000000280)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x2) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)={&(0x7f0000000240)='./file0/file0\x00', r3}, 0x10) splice(r2, 0x0, r4, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x802000004, 0x6) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000300)=0x5, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x802000004, 0x6) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb, 0x77, 0x2, 0xfffffff7}, 0xb) syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x806) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x802000004, 0x6) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f00000002c0)={0x8, 0x0, 0x2000}, 0x4) 09:07:55 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x5120dabd9aa4f5e4, 0xfffffffffffffffc, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000280), 0x1, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000640)={0x0, 0xfb, 0x1015, 0x4, 0x3, "f0e09b4ae86ab9542a798ef74402a8e1", "c7a838cfd19c4c4ae3b5c2731ed21def928f8774dcebd445eaa1413ee6bfd1e358358e012bea26987e903198db4fecc4b51204bfac798d95cc643d8449e437f9ff86e6ca39866790a895de2d08756b3b9374e0270f841a2feebf76c766d6bc5bac6965de10109a13251ef7e0d1eb5d7684aac9122285775358c5edcbbb302f20e43982b0203d8939b953d0a2e735ec68e3c17b614a001ae7a32582dec0ba7d211250b93cfb6da5e55b736641262e7209bc2a86031399e65f40f1b3094eeb3d01ca40c4bd6eddd664ca07fb87d60e6bfd99fe4cafef35987ca9a6aacc3854ec9c0f4d3261ec8490dde82948cc9cd56aa8938c1459b0893f87c3336556f9471db4dcd758981a7b105148bef9d13a45aaa85fe0f8f288e7cab80aa8c74da661fb87a75736db61907e903350f3110fcf2c8b22ba2cfdb82bb572cc410000da2f52cf9f6ebba4ac94ea8ebc054d0dd0dfbefbc2882f536c201fc84551a30c873613f8614e2e6c2655e1436e91ad18888a36b6be5b3e44684fbc36022091f110d6af20cf11078c01171ee3e9d2d3bd282001680156f059f75560cc02ef3ddb8e00ee742848ba90e00de68f835ae4138422b2c8ab3d865d38b5d7b3faa3c649a06f432ad67810d529fad2fca0b6be8c8d39deea62668cdb708d4db98c64b3b0fa3787573d19fd28006f1e7bcaff3d96a287def6cc5dcebcc644a39667542ca83fae5840778a0fda6d15558c766221ce9ea25fe959387111e708fd5e328d28e6048211cd5e9be88927b70515dcb4ed2feb20132826147b552286040cc3a351fa239a68d96ff8bc58be7bed93ae0bf817eacb10ee1a87d975f9d70e79860108f5efbb0e86a3fb5800f0b86b027d08c4c2dfa526a588e9c20a58fb9bcbe5afd094d85a6d8eec4c5d6a2e8ee73ac734b86d41fc9b6533d4d0b4058facea4727571da2601900efe82029df5ee60862e01c4551fa3b82e8096fc914fa3cd44efa214aea407e5f31111b976ed3c9fcd1f2849735fee6c7d5a08b325aa14e2ac18e827abcbd5ac324e417ac18fac7060d5c069be5e7a06b18b97b47291a56c2a04cdefe5020a9f0468599ca2a6b2afe0acd9653d7b2b8156bfe8e23735375957e296c70badba3292a1df5e0eebd6cc7662e15fef47080aacbab4bd8bfc033aebc87812684d7bd2276587668dab363ed360c6feed08e43fc6683516ce1fd03b0c71462f15e087fecc57220f4f0092857377fd3423b9a646d669bede0e8bb7176aa45566a23da2ccdfdbfc4239bd68cce1bd8c1df6304e5904918491596e401b47cc835939d93cc3ad4ef787d48f01d68f0943527fd615bdc881f3b8c4afe262b5905eda47c65f29dd01776961ff63dab66fc13a9d520f63cba705583e62b0acb1d63e3946ee51fb5d9dd2d8d49788438fd944baa9abd265b19153e0e0279c6c9f64a38959cd45bc9b4d2495b550faada1c8560622003e8542dcde3d27f011e25a2d11736c21bdd8f8e7bd3b71d464f154c3db6f9a999c60690b6f9666d3c77f92b1adf0f367cc7bec4c9d34b47dd3bfeaefa1d23ae62cd898044153cac7d49cb4263b5af9c29cfba86765ebe81378a7913e9e30094bef2d925378407fded685be45f65d7c54c67c2094e251498edd14d2a9874418b360352e17814e7a9a0e34f716cd3e47accde5589067108918377b0c074e01f5fad82e6c1ad6471545669a369f88a24e30be7ffd7e01f2b45b501a4341ec8cc49a20b7b869322ce91bac1235a3690eb0443afe28917da8412ce65d1ffd6d024910a4a5289aa91321cf663cc6054b2ee0bb3be16443a3e1e6de88229a912908a8fd75744d2239c5e5692e4f9d43dcf4ba29f631a66496451a649fef01727694c35a9e2b23019ae2d596c7011a3ceb773b7045ceaeba86312603443845632b5c5f6d6e8e0773f11fd669e9fdc4b8cf86e435853140f1a0f3fa8d77c5498d8b68c62553e3ab81499d212f7cc09a37f599edb37e71cf61b1773c569b5ce89f95d5a4746f7326d5527e4d5cc9c8dd5abbff918485979ab57e0ee9a0d8e195be15aa473bdc844d9da72520694333ec522663f28de994759e1a2557b7dada1223c3bc5be48794d9ac4c108e7b62cabe98a88eca7756f083a4bb7bea41d89ddfc1b15f4f0ead4f9fbd32d70681483e29a356a6db85d441e410227da23395f5461957caf4f678f47357fc7881d9414dc2f97b70def8275285b48b9bc54943d4af5e8e7a56b99db1e8abbcd4b7cb0151c53fbbcd831545ebc905da6f8a6dda46da6ef795131dd6076ff29b7658b27fe39ce8ec8519952a09cb2c09b670c1079bb61acef19722cad81e2f2ed8e41c6fc1e25af0f79a73fe5cdb68bccb618610c194659790237a23d78d3f08185af3c62e1e9680994d60f04bbfc41a16ec110cb4a88f2cf6d5ce6d1dabec1948d6ce4d9d07c1191f7cd42784fba3899f48a900e4627a823fafd1ab7be7fdde99f42e3d8920087140012250a839cc0d95af6b80456445ecc1322abc851814f32615e876dfa4acf0090c0cf3f5dff6cdbbff3e0c543577a55c91a3a4406cca6747c318ddcc94cebb95fba3666672854ab0d3e1e3848faf76301affafdfcbb7d164a7616b7988086d3ebe81b7c65366540df1ae28215f323204de27ca6e8662290c2ee0aaa04c258dd8505eff3a4b13e48244e0d51a74c5f195829f09672bf4f1ff1f9f1094ef830f791b8d54713ca464493d840b713468ffc44228af215e664b925238972b0e8fecd3007948d28203602e2baf3c0b8139e2d006bbfef7bfb0d3f070d61ec16d7806113c5affbe0f4cd013c64e83871a8339df34d0c7c3164540aabeb569ab1c68046ff32e537aed99750ae09f8b2628b5ee25c47095878d8c3a4ae269245da020357e45b7c2574a8623ecc6feca1c8dca474744e8913193871bfe153271e8a66bdb97da8b3829de76efbeffade2eff0687b178a73483012bea5d92c36aca21d382e30b771f033847733bbb6800f3b3b4967ac4d5bc14773864d5a8f39dc51d4a5d91d8ab269be8eb8dfcb4fb4d5e0b9a3e072cec9537282478c765b862e9803e046c08da9f19f2ba790b7385363bff36dfd6632b94f4d1cf9791c144ed5d0a0f02672e98814682738c5c6003c8f618a06250fe0d670b8d52d79c8d0ab82c8f47dbefc7520b5ba13c96744c18871c4ec3c69ad33f7330ddd3e15c420360075e21b7ac453232d932bd310a230df870e00b3f837ea1705d0a9e5b1c00eb6cd99bcb95f2b86b4bc455ba793266bff1dccdcdd171b3cb2d56e3363defaab148bc1eda6d9c41b6c6d9ce51d2664972626e46338ab8b6986072017ad10d3ed3d3712e871a88c39eb2b71fc10444534bc8c10e7f9f9606b7407085877ad49a42d5fa3d83b4263b93151a13e41423c988b8e11c979f27ab13ef2c678e5f0a2d41d816aaf6539ec26352fc5f7dcf850684f0abe477a2051c03d89bd46fd1c482893ccfbb850acbbe7ea7f92a370f77aba3c702502e2f504aaa3f6aaca5034f4b6badccb8707ee756ee010cbccb9afcea9b5b6079ef603319b8e87d1bf15b886e3d21d5157fba5852a88786fb2317753483ba744dee1dfbcfcf2548bf9776572eac80a958dfd86f8b122e997e40a13ed7f3ac25ec3af9955d775bc7c063f98140c7ab08b44e2ee53762c60e4bb137795492e9b965517760e94e33f83d225b7d52a00c1334c77a89eb9bcf0e4c98cb8016368635fc8d6977cfccf72b90e265b26be591a2c412d684f282dcb519e7c5464487e49ed7e2f72874c5a72e5285a4f677f0a74348da511ccf5f958c14d68a4f040c6fd71d32a8cc45f6e653274ada6249704e127e665aae7c3b0711e348ab8c2c827df0835200cea17b921f318f0cb86b4968e44caebf07fb704628553aa1b74a98c9b966f678abd4eb2529303492ffb44c85db9f7d5b690eb8d1da3894fccf0ea578200cf5551d83e79d585592b5d8b921e0c58350554c945116a8bb4cf3d75bf6a2984abb2fd67df31dbbeb56dc2e4990203b6cc82ac0e768d3fc0456d74599c7e3f9cb7ae90124aa93a3e12c0d7a7cb49a48db1dfebd931c2766b56f2d7e8b4a11ed1e734af82a5bf9daada8b5cb6b820f2200927f21e21a914ce50a14cb715dc25e6f96838a4f20d9bfeb56d770f78c440278447e39df3b9e767f24ebee68d95fee76d29208b52fd19707e6e3c822d77d9e5e37ba6b6af8ae06152c8e2ead11325d911dfd6165bcab8c985d1c46cf017dba7337783b61b795a60346b2d640242a847cebd66a1beb9dadb7b444cff923af74b0ba943a0e26e885a700ba9884a5f769534182776de753a64a09587e594b7434a616c0149c2ae0c790650a617c812430f3b2a19ff6d3bbc24dbf9b3e4209c35b09c8a285c57effda878652c6caa5f0992acdfc4378d0e5efee5fdf4683bb9df87986d33baaab308ec7f9a242fd3629e737f819cd8db864e7fd2cc65c2b0bf46accf7e2d60b59f5771b4ee78dbf18a7fc5cf927dd993de251afde8b55931d6676ad9d7bbbed152e247123cf2b03e146a953efa568871234dc99dba23e8f75ed93b5f05b7ea3853e1e30d266fafea90c7a2cc7ae893861233fe97adffa133eb4f67068a2f0e34272c4745ea460cdb39f549c6a60ed0009e5e82ca83c2ac7e867725ece08a5cab078b283410348dc69fbcca65886da31f57a10cf82630409d2b875d0aef0ffb374f837eef6958401d63bf786a6e4628f2f4912579d1d75abe46670dfb3ba9c103cfb10fdef76e6d70cc22a5282747671eba8300f198607134f818f1686370afb4aaa1e84ea2fedebfbdca9edcea45623470486217dd25b64defcac388d44ad1fa3602033f1032152cda43e25fcce60c92914e0cef77d301ddf5314c486ba0f456d3ae6a88724251c761732f1969fa06580b910517e9d4ce09d2a21c652ad3985af79ea4bc65a2e88a0630c0600e986da9d5fecc6e59ed27d0ecb0d0cabe991a4caae0949fd465158d59d238cf4f3f110bd025d1a4ccf9bed11b517991ba340299f7f650d1896a40426d6de45f1d6bed59b477f99670926205907590461c3f1d3dffb8f3c5eb011153c304993cd0f56bc5e0191940a3c65867e91ae2fffe1461925d54d5809735e99d569e25cb51ed588aeeab3c541be7009878072e4e7bc829d59705031c9b20aad0ab8d4d199fea4f24ff0f527dc698839603082bfaee24081030f95eb2bde4edd880fef5fd92c3b81da66addfcf30462a1529ae06c88293dec8039b6720be47d50d787ee2c0ca33df2b5c294688cda7e0b96f90b8c4d24a4c960f800af3c09b820985611ae0203af1ea967616112385397c0a2f03e9d6f5dfcf157a3bad735dea250a2807348983cf871b5de8d553da6fbe4c4bc108afe0073fe27380ea77d27d33bb09073e842b535e7b1841b056251af1b98ccfa0707a4314b97752ff6208d02dd43421b3eafc53f71fe40a1b59c350ca33a0b235bdf3982e2376f0386b091825d32e1990ede250fe0e02f694343b460148c8b0645be88600616ef4c88a9bd9045427ca6bc2ed77186940d294cdbcdd65808882c298b118ea86deebbd616b5f7457b728a4107270cb16663208a0893343f8eea21a763d787dea639d55b50852ed407c307a3ff37e87f912b5ed28d196569d8f0519cbc67d8a49e0137576b9a3bc635d5f5d1bf591511d30fddc4f24797eb6bdee5f8d3fdd520aca681a337553deba302cd14a9f1ef4b0e372b8de903c3e3acfaec143cff00a6dc4e50cfa6f5086f03de261a81561c04f33f11e36586fa855825bb47809dacc48c6df"}, 0x1015, 0x1) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000140)="99edeec094a527cdb09a8b3ec2bfd4591bce3c6c49bdd01782cf64", 0x1b) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) gettid() r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x800000, 0x0) statfs(&(0x7f0000000200)='./file0\x00', 0xfffffffffffffffe) accept4$unix(r3, 0x0, &(0x7f00000001c0), 0x800) 09:07:55 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() [ 956.380159] audit: type=1804 audit(1571994475.256:293): pid=9785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir106235519/syzkaller.6E2Lb8/871/bus" dev="sda1" ino=18092 res=1 [ 956.473356] audit: type=1804 audit(1571994475.266:294): pid=9785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir106235519/syzkaller.6E2Lb8/871/bus" dev="sda1" ino=18092 res=1 [ 956.541307] audit: type=1804 audit(1571994475.266:295): pid=9785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir106235519/syzkaller.6E2Lb8/871/bus" dev="sda1" ino=18092 res=1 [ 956.664010] audit: type=1804 audit(1571994475.546:296): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir106235519/syzkaller.6E2Lb8/871/bus" dev="sda1" ino=18092 res=1 09:07:55 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000040)={{0x1, 0x0, @identifier="63ae06192c1d3b2dd04ebc0621c44115"}}) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() [ 956.820672] audit: type=1804 audit(1571994475.706:297): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir106235519/syzkaller.6E2Lb8/871/bus" dev="sda1" ino=18092 res=1 09:07:56 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000140)=0x80, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000001c0)) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x115, {0x5, 0x0, 0x0, 0xff, 0x6, 0x1}, 0x466, 0x1}, 0xe) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r3, &(0x7f0000000080)=""/189, 0x25c) getdents(r3, &(0x7f0000000ea9)=""/375, 0x177) [ 957.196971] audit: type=1804 audit(1571994476.076:298): pid=9785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir106235519/syzkaller.6E2Lb8/871/bus" dev="sda1" ino=18092 res=1 09:07:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x800) getdents64(r1, &(0x7f0000000140)=""/189, 0x3085) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$RTC_UIE_OFF(r0, 0x7004) [ 959.676258] bond2 (unregistering): Released all slaves [ 959.686830] bond1 (unregistering): Released all slaves [ 959.733621] device hsr_slave_1 left promiscuous mode [ 959.785047] device hsr_slave_0 left promiscuous mode [ 959.881186] bond0 (unregistering): Released all slaves [ 960.310109] net_ratelimit: 14 callbacks suppressed [ 960.310116] protocol 88fb is buggy, dev hsr_slave_0 [ 960.320202] protocol 88fb is buggy, dev hsr_slave_1 [ 960.325703] protocol 88fb is buggy, dev hsr_slave_0 [ 960.330801] protocol 88fb is buggy, dev hsr_slave_1 [ 960.630146] protocol 88fb is buggy, dev hsr_slave_0 [ 960.635295] protocol 88fb is buggy, dev hsr_slave_1 [ 961.120185] protocol 88fb is buggy, dev hsr_slave_0 [ 961.125313] protocol 88fb is buggy, dev hsr_slave_1 [ 961.731731] IPVS: ftp: loaded support on port[0] = 21 [ 962.390183] protocol 88fb is buggy, dev hsr_slave_0 [ 962.395271] protocol 88fb is buggy, dev hsr_slave_1 [ 962.631884] chnl_net:caif_netlink_parms(): no params data found [ 962.665162] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.671674] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.678532] device bridge_slave_0 entered promiscuous mode [ 962.685614] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.693172] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.703498] device bridge_slave_1 entered promiscuous mode [ 962.719288] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 962.728665] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 962.747811] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 962.755270] team0: Port device team_slave_0 added [ 962.761043] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 962.768083] team0: Port device team_slave_1 added [ 962.773564] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 962.780776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 962.835555] device hsr_slave_0 entered promiscuous mode [ 962.880317] device hsr_slave_1 entered promiscuous mode [ 962.920548] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 962.927548] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 962.940184] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.946547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.953260] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.959599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.988318] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 962.994648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.002676] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 963.011341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 963.018278] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.035910] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.045767] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 963.052101] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.060719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 963.068359] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.074829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.090951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 963.098535] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.104907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.113733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 963.123209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 963.130462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 963.140464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 963.150988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 963.161837] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 963.167937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 963.175581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 963.189450] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 963.199436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.620904] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 09:08:04 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x6, {{0xa, 0x4e21, 0x400, @mcast2, 0xa0}}}, 0x88) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) poll(0x0, 0x0, 0x8000000000000200) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffd, 0x3, &(0x7f0000000280)=[{&(0x7f00000000c0)="9c2002e50879", 0x6}, {&(0x7f0000000200)="13b313e3fcb296a4430ec1e23b9b73034402a3672dad1547d5e5b29053d90e5314266bd88e31880d2144b94b6a51c2f9f9f1e4befe6ed18d79d267221acc5c26f4d25953079238af6cf08e25a6352a6e20dc38dab003f38a56ed9c0871c180dbb255a1", 0x63, 0x2}, {&(0x7f0000000440)="379f0a00f6bde024d8dce1be5001d04a487b640f0189fe7d2d42346a28efdea2d115500e264f32d275691ed9e38403aa1b4d89e49a90a80501adc4258826e1e6c5fbed583e43205b8597dfe004ce48b460ab74c69c83c3f35c914b2beadda17c13a3fa14a562aa317fe2eaeb773f85fc6a66524c217a2f8467083387ecaa4231bc4727ba9046affe6909ad0ec339df16797f7957190d2fa4907370cd6b497ada", 0xa0, 0x2}], 0x8000, &(0x7f0000000640)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf') tkill(r2, 0x1000000000013) 09:08:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x802000004, 0x6) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0x7e48e7cb454f91cb, 0x2, 0x1, 0x0, 0xd803}) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:08:04 executing program 1: r0 = socket(0x4000000000010, 0x6, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e00080008000c00060000001940a30700000000000000001338d52f4400009bfb83de448daa7227c43ac9220000010cec4fab91d400000000", 0x55}], 0x1a2}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000940)='ip6_vti0\x00') ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000180)={0x7fff, 0x8, 0x4, 0x3ff}) r2 = geteuid() setreuid(r2, 0x0) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x802000004, 0x6) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000700)=0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x802000004, 0x6) ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f0000000840)=0x5) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000880)={r5}) getpeername$packet(r11, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000900)=0x14) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000000980)=""/71) syz_mount_image$gfs2(&(0x7f0000000240)='gfs2\x00', &(0x7f0000000280)='./file0\x00', 0x1ff, 0x1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="773e21957be91f2b15d9af344ab632950ef23a9fc74b66df00c71dd75d413faf82a46f232a223ab79010405b54cb7ac63bca7114746b8a905e0a7f2bd55147c5b8433e650d806a648cc807cf90d9232d0c01da9fb657ef1807a98ebb64f51b0d841a6ee2a439bacc3ce5b3ca70071ac70ee696530eed7de50f1784852682a53665f342e38750950c25dfcc6d0cba2ea8fa95eeb86390f6e725f18abac6e19cc16f2c215bf12c0d6681f05c89945955b8e80fb5c1e1ff7d61afe2e211a2c675e96d41013ef84873170c168ebc4efafeb2fd35390b", 0xd4, 0x9}], 0x108800, &(0x7f0000000740)=ANY=[@ANYBLOB="71756f74613d6f66662c71756f74613d6163636f756e742c6c6f636b7461626c653d29776c616e307070703144657468302c7569acd4", @ANYRESDEC=r2, @ANYBLOB=',context=user_u,euiD=', @ANYRESDEC=r3, @ANYBLOB="2c666f776e86f295", @ANYRESDEC=r7, @ANYBLOB=',fscontext=user_u,fscontext=root,subj_type=/dev/dsp#\x00,euid>', @ANYRESDEC=r8, @ANYBLOB=',\x00']) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r12 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r12, 0xc0286404, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x400, 0x4, 0x10, &(0x7f0000ffe000/0x2000)=nil, 0x1}) r13 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x20, 0x400) ioctl$SG_SET_DEBUG(r13, 0x227e, &(0x7f0000000100)) ioctl$SCSI_IOCTL_GET_PCI(r13, 0x5387, &(0x7f0000000a00)) 09:08:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) 09:08:04 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) getpeername(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000002c0)=0xfffffffffffffda4) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000000c0)=0x10, 0x4) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:08:04 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x1000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r1, r0, 0x0, 0x40801001) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) pipe(0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000ec0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x72, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={r5, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001440)={r5, 0x1000, "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"}, &(0x7f0000000040)=0x1008) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r6, 0xffff, 0x1, 0x5, 0x8, 0xffff371e}, 0x14) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x0) pipe(0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fstat(0xffffffffffffffff, &(0x7f00000002c0)) 09:08:04 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/packet\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, r2) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f00000002c0)=""/391, 0x187) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r4, &(0x7f0000000140), 0x1) splice(r3, 0x0, r5, 0x0, 0x802000004, 0x6) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000001c0)=0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x802000004, 0x6) r8 = fcntl$getown(r0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000480)={{0xa, 0x0, 0xffffffff, 0xccb9, '\x00', 0x8}, 0x1, 0x200, 0xffffffff, r8, 0x2, 0x1, 'syz0\x00', &(0x7f0000000000)=['net/packet\x00', '}selfuser]-,user\x00'], 0x1c, [], [0x9, 0x100, 0x3ff, 0x6]}) 09:08:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/178, 0xb2) getdents(r0, &(0x7f0000000680)=""/372, 0x174) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xffff, @remote, 0x5}, 0x1c) [ 965.670272] net_ratelimit: 22 callbacks suppressed [ 965.670277] protocol 88fb is buggy, dev hsr_slave_0 [ 965.680546] protocol 88fb is buggy, dev hsr_slave_1 09:08:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/fe6/\x8c]t\xcb-mo\x00\x00\x00\x00l\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:04 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\t\x00\x00\x00\x00\x00\x00\x00m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xe0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfbY\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\xff\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r1, &(0x7f0000000080)=""/189, 0x25c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x10) getdents(r1, &(0x7f0000000ea9)=""/375, 0x177) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) signalfd4(r4, &(0x7f0000000040)={0x5}, 0x8, 0x40400) 09:08:04 executing program 3: gettid() r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r0, 0x9, 0x6) r1 = syz_open_procfs(r0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r1, &(0x7f0000000080)=""/189, 0x25c) getdents(r1, &(0x7f0000000ea9)=""/375, 0x177) 09:08:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) getdents(r2, &(0x7f0000000ea9)=""/374, 0x176) 09:08:04 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x2}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1002a}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) clone(0x2a58700e11bb249d, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) getsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() tkill(r4, 0x1000000000013) 09:08:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/xfrm_stat\x00') getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/relabel\x00', 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:08:05 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x5, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x3) fcntl$setlease(r1, 0x400, 0x1) r2 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x2, 0x40) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000180)={0x25, 0x3, 0x0, {0x1, 0x4, 0x0, 'eth1'}}, 0x25) fcntl$setown(r1, 0x8, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom}, [@default, @netrom, @null, @null, @default, @rose, @netrom, @default]}, &(0x7f0000000280)=0x48, 0x180800) getpeername$netrom(r3, &(0x7f00000002c0)={{0x3, @default}, [@netrom, @bcast, @rose, @netrom, @bcast, @remote, @null, @rose]}, &(0x7f0000000340)=0x48) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x802000004, 0x6) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0xffffffffffffff81, 0x8000, 0xfffffffffffffffb, 0x2dfe99ea, 0x7fff, 0xfffffffffffffc01, 0x1, 0x5, 0x91e, 0x9, 0x4d05, 0x5125222b, 0x1, 0x4, 0x4, 0x5], 0x0, 0x4000}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r8) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000940)={0x0, 0x3, 0x3ff, 0x7fff}) syz_mount_image$iso9660(&(0x7f00000001c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x3, 0x4, &(0x7f0000000800)=[{&(0x7f00000003c0)="f1f550008d1e6eccd7da680a8681315d304df20b22ba01c77dcec9e0cac91a3c52909c849136d1b3d892bb3d9318157020dde2c18ea5bcf6b45afd9fc6a01a34dd7a11d3988f3e929c7347e001b11235690b4a48a60875be1ccf089f6d56438353ce0cce4ccf6e881cbeeed3e4b32c8594efe5003fda765ee2129da2aab369db5af187f67cdeb510a5045f600fcf6a5f66821b9bf7119506dcabc2f4c27b6f03f78576b4ee379d455b81a7e43305dc63692c0010d4040c94dc860716787a0d92aa687882f314a710479fde51080bc88a9300f058fdaae97b668e69cf5251ae8d35da0df06ca0b1", 0xe7, 0x3}, {&(0x7f0000000640)="caaab2da9d3c2485dc90ea84af55a373cfe26a350880b6e607b19fa96940b15cfe4aea7915830a765fd25e9af5c192d5635043c1c823627f770f51c235663462ecf99ef07b47ef7dba0b7801c5fa051f0e3f4d4166339395aa2682ac414ee0b9606e7823d559b205a827031f28e84f7338503785829d0179f5d46323aa44d4a0b684effb5b70968535a6650354b4087deaa5cc10dcb5ff825731603257aed9749cea966f144a1bdc87cf98edfb7862fe0b812c279cf6257e6853aaf1462bdf30d06e630a732b41a67deaa447ed4404963b9c5763b996f482ef3d185926fe2b5bb799e4372fbe", 0xe6}, {&(0x7f0000000740)="5a411c0d0d53a5c450927d2bb009d3d227e453dc30529e3867dcbe73f3c09662b1e895f9da5f723d7ef8fb66d93d94337d5d9780ca4a7214af71ca0c4ec22d928e4def2a54e06b21339e464443e56fa88ac66b29fecc1c2ad0abc71c40164dfefa77cb178293aa76325aaa109460b20678c4f089131558e4922accbaf28d5c5b569be7a15264c924637720d180016b29ae6981d1699e2990a458034173a32d04740deedd08158c", 0xa7, 0x1}, {&(0x7f00000004c0)="2040e7cc1eed0a83aed26b5bbb780c8b5ed21e4ff4a97a65a843acda596f2443dfcdfc297433758c777043ff9a3d8422b291b38122b4243d", 0x38, 0x8}], 0x100000, &(0x7f0000000a40)=ANY=[@ANYBLOB='map=acorn,dmode=0x0000000000000001,session=0x0000000000000027,map=acorn,map=off,map=acorn,gid=', @ANYRESHEX=r8, @ANYBLOB="2c65636c6162656c2c61707072616973655f747970659cd86d617369672c666f776e65723e12707ee38d72cc", @ANYRESDEC=r9, @ANYBLOB=',func=BPRM_CHECK,\x00']) 09:08:05 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:08:05 executing program 2: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x802000004, 0x6) sendto$ax25(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4, &(0x7f00000002c0)={{0x3, @null, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) connect$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000001c0)="9e5e9ccde7865823f008408e5140aa4bd65fd03fa19bc2182aa1aea9a4eb7ac9f6338dea80bb5dcdd06c83ab0422362c299db723857164e3a7a63ab8e59e2701b1581ff05644859c3a387dee2c95c24c969043cc7b21150626316fcd2bcaffdca11fed7ac003002e", 0x68) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000080)={0x8de3, "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"}) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r4, r5) 09:08:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) getdents64(r2, &(0x7f0000000600)=""/213, 0xd5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000700)={{0x0, 0x4, 0x0, 0x1f, 'syz1\x00', 0x31}, 0x0, [0x4, 0x3, 0x2, 0x6, 0xde, 0x4f9, 0xec, 0xc, 0x8, 0x2, 0x7, 0xc6a, 0x4000, 0x9, 0x4, 0x8001, 0x87f, 0xfffffffffffffffa, 0x5, 0x8, 0xc0bc, 0x5, 0x2, 0x7f, 0xe3, 0x5, 0x7fffffff, 0x8, 0x20, 0x88, 0x2, 0x7, 0x8, 0x3, 0x8001, 0x80, 0x2e2f, 0x9, 0x3, 0x45, 0x200, 0xffffffffffffff7f, 0x4, 0x20, 0x1, 0x100, 0x1, 0x5, 0x4, 0x10001, 0x7fffffff, 0x8001, 0x0, 0x3, 0xaa1, 0x3, 0x500000000000, 0x8, 0x8, 0x7, 0x80, 0x45c0, 0x1, 0x8, 0x5, 0x5, 0x7, 0x9, 0x2, 0x7, 0x0, 0x1f, 0x7, 0x8000, 0x1, 0xe1, 0x4, 0xb493, 0x9, 0xfffffffffffffff7, 0x8001, 0x9, 0x4, 0x7fffffff, 0xd3, 0x8, 0x9, 0x8, 0xff, 0x6, 0x1f, 0x5, 0x6, 0x3, 0x27, 0x3, 0x4, 0x4, 0x9, 0xbd3, 0x80000001, 0xffffffffffffa384, 0xaef, 0xdfb, 0x2, 0x1, 0xffffffffffff0001, 0xfffffffffffffff8, 0x2f1, 0x10000, 0xfffffffffffffffa, 0x11d8, 0x6, 0x0, 0x2, 0x3f, 0x2, 0x1f, 0x39c, 0xcb0, 0x1, 0x6, 0x2, 0xffffffffffffff80, 0x5, 0xff, 0x619, 0x9], {r5, r6+10000000}}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:05 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x50050b72ff854015, 0x0) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000013) 09:08:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='coredump_filter\x00') getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 966.454091] usb usb2: usbfs: process 9973 (syz-executor.1) did not claim interface 0 before use 09:08:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='.\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000000000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x802000004, 0x6) bind$rose(r1, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r2 = syz_open_pts(0xffffffffffffffff, 0x8040) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000180)) 09:08:05 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x140, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x140, 0x0) fcntl$setlease(r3, 0x400, 0xb01c55cd500efdc5) io_submit(0x0, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000140)={0x20, 0x0, 0x1, {0x8, 0x0, 0x0, 0x81}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x18}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='(^\x00', 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x2, 0x2}, 0x10) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000280)={{0x3, 0x1}, 0xff, 0x5, 0xbf, 0x10001, &(0x7f00000001c0)="9c6782c771e171efff8d4cd1823769f3eb00dee3318109e579106c9e4b45a7e3264159cf7d15a0b4850bacb3b6b2448f0660655afb1817c63cd83225d2fb1870b417b226a4c05ca241c8b35a831c1f1e8768d16ec5879484417c04ead906bf194711b7d4250860ad6bde449a0f040c7a846b46daf51e62a2d158b0ad29ba2176a88361d7e73fd20b6e1a7bce7f06e5a5b2c8e985dfcb5df1c5729dcae3954d54958d4fca7ae267ed5c113080fefa7ec6a694d5ce1a6a21091db5d2d167cfda"}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x0, 0x8}, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x3) io_setup(0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000540)={{0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xd}, {}, {0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4001}, {}, 0xfffffffffffffffa, 0x0, 0x2, 0x0, 0x200}) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000000080)) socket$inet(0x2, 0x0, 0x0) socket$inet(0x10, 0x2, 0x0) socket(0x1, 0x803, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f00000003c0)={0x13e}) [ 966.550111] protocol 88fb is buggy, dev hsr_slave_0 [ 966.555572] protocol 88fb is buggy, dev hsr_slave_1 [ 966.560710] protocol 88fb is buggy, dev hsr_slave_0 [ 966.565803] protocol 88fb is buggy, dev hsr_slave_1 09:08:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) [ 966.674725] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 966.696739] audit: type=1804 audit(1571994485.576:299): pid=9995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir047390502/syzkaller.FSkbqn/3/file0" dev="sda1" ino=17470 res=1 09:08:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\xa7\x00\x00\x00\x00\xc7\b\x00') getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000240)="8e3eb7c14a50ad587fa52360b96537b7a834f0edacdf2362bfb139a4e7d57f44ec18c288914a82c488e7456394e82a1752498da2350ba164996cc2c931076e8be0425cf5bcbf815ecb349208e3ec849aa170b533f6e73b79749476a99b2d769fadf31b80cdd2ef544e906a8fb1b81148f38d4c18b75d4e5f3e3b8798fcf38b1dcb43040f693ec31ef4ab9a06067f2be8446fcba7ed5971ad356739c80e974c49869c29ae0bfb420b7a20cf2105c2be2dcc1b2d6b6e5ad35a4b8cbfca44d05fba9db04a4dbcc4ecab98996ea53ca77bc10100000000000000e89b3a3dad53f5e64400") getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 966.751460] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 09:08:05 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) gettid() ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0xfffffffffffffffc) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffff4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)=""/226, 0xaf, 0xe2}, 0x20) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 966.870105] protocol 88fb is buggy, dev hsr_slave_0 [ 966.875309] protocol 88fb is buggy, dev hsr_slave_1 09:08:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x5008}]}, 0x10) sendfile(r1, r3, 0x0, 0x8000fffffffe) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000000)=0x4, 0x4) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x8040ae9f, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\n']) [ 966.947205] audit: type=1804 audit(1571994485.826:300): pid=10008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir047390502/syzkaller.FSkbqn/3/file0" dev="sda1" ino=17470 res=1 09:08:06 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000001c0)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000140)="cd2075e115e851c4734d0b6cf9dc8cd83e659e8d5bf1503f4057bf272d35bae77a58b2a1639f1a6cced3acc8d3577fadc90dbe01cb3a037f9f47c02eaa89aec5950a4d48793030a839300e82c2f7c813c665ff1f35356526cb33d11e7b4f22cc62") ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = gettid() tkill(r6, 0x1000000000013) 09:08:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x802000004, 0x6) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000280)=[0xbd6, 0x1]) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) r5 = dup2(r3, 0xffffffffffffffff) setsockopt$inet_tcp_int(r5, 0x6, 0x0, &(0x7f00000000c0)=0x6, 0x120) sendmmsg(r2, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x26c, &(0x7f00000003c0), 0x338, &(0x7f0000000880)}}, {{&(0x7f0000000040)=@sco, 0x67c, &(0x7f0000000a80), 0x2ef, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0xfffffffffffffffe) shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x6ffd) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000240)={0x6, 0x13dc, 0x7, 0x5, 0x4800}, 0x14) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f0000000400)="f5ad67c729e229f2dcede9c2c83d90a4e1d1d13ca2bcc6688fb03eeceb9c8a47b63ced76d49642119a07c8a83acca338acd7b74db5ceb9b82104a93fa5f717c7c8431dc1b93893127f7ce8abc22132923547dc9f4a51ae12df2608031b550ded44", &(0x7f0000000580)=""/142) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x2, 0x0) ioctl$SG_EMULATED_HOST(r7, 0x2203, &(0x7f0000000640)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$audion(0x0, 0x1000, 0x2000) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f00000001c0)) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r9) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d63000000800270f7f8000000000000000000", 0x16}], 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 09:08:06 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) write$binfmt_script(r1, &(0x7f0000000640)={'#! ', './file0', [{0x20, '\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf'}, {0x20, '\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf'}, {0x20, 'eth0%)*trusted{'}, {}, {0x20, 'vboxnet0@em0/@:cpuset'}, {0x20, '\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf'}, {0x20, '\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf'}], 0xa, "25a0951079204d8ae27a39621457ebefafba30b8cde18225cadc550e0078cb6e175ae12d578115ea6a8634af8b352d65ad77b40602ba74897772b61f637692d4ef8565481b3397b22a1df8deb854398a69085db4232d647e9d2de356ac60a3e581e3bc5b2292034b4af7aa60ce5be454e76be1b1facc5fcb85243d7b9dee92be9c3761193c4aec2de5e676665280af9191eae32ef5318c26116ed22364fe29bdaa4c0105843ce8774c86f51415141fd8"}, 0x4ca) r2 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x2761, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000380)={'team0\x00'}) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f00000001c0)) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r9 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x4000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x14, r8, 0x1, 0x30bd2d, 0x25dfdbfb}, 0x14}}, 0x24044885) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x2761, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000380)={'team0\x00'}) ioctl$PPPIOCGCHAN(r10, 0x80047437, &(0x7f00000001c0)) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="08002abd7000fcdbdf25010000000c00060001000000000000001c0007000800010015701a0e3cab3d062653bece03a12201749827bb09b5841eca41ed0bfcef16f823592f130eec11cebc569791bede0000000000", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60090000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r8, 0x610, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12c}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4080) 09:08:06 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000001b40)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x802000004, 0x6) r9 = socket$isdn_base(0x22, 0x3, 0x0) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x20002, 0x0) r11 = socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r12, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r13, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r14, 0x0, r15, 0x0, 0x802000004, 0x6) r16 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x8e82, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r17, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) r18 = memfd_create(&(0x7f0000001900)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x1) r19 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001a00)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmsg$unix(r3, &(0x7f0000001b00)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000000080)="03a43b33968718850299056430af61787c9072001827d533c8faa09cd497eeef68476976afaaabe0e669b3e31072ccc1a5d1af43b86f51733ec74dba5512c1bbfadaa81320fb85d3e04be15dab35dc6c44d3543342dd83878e41433ee3574c4df67c7ca955", 0xfffffffffffffd4c}, {&(0x7f0000000100)="e709eb2575d3bfcf5aa35e370b78fe2d0254a85671b377675a1cec57111ae82a484991ac6b8dafee4f7890a9a9ea3af655f531ae2bb08567eb49ab1d8af026366eceec856a5af9d5617b4ebe03661ce681d9dde5e70e87980e09030e8c541277b2", 0x61}, {&(0x7f0000000180)="99f910870c08b57b13a87e5d05092dfbc1ca034837fde0e7440f0003d7246aa8d90aedfdb1f19bac9de1d1e8ebc6bee8d177f8c815f91b7506f5a05a1232a8c899333078125a90101fb1d976740b8a3f5e80c37e9057e4cbe386aadefc6f", 0x5e}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000200)="7d970bd0a1010faf42753fdbdf04acd27ca6f07d271fb17bf37a7ee19c89c1005a7343dd9b14328c2990bc", 0x2b}, {&(0x7f0000000240)="9867dc83923e241f9999dd23cd115635d927b552bfebab83952ae02e8f6e344c7aa69c66c86f3129a8d1f525ff59fb5c5488113504348b2215b78f051698a0cb9ffa274e6ce6d3cee8220eead9f64f46b7a41418b7c69333470513", 0x5b}, {&(0x7f00000002c0)="df3154140110bc11185f300493f3dca8d76c8e333e5b7a1468aaef134785b37413469c3c0c8263f398e0b7af53f5db84957a68a2e02542f3caf58aeaf5342f48ff72233d6e704b07883a0d0ecf2c46a373c02a9337fe7d7b473a863e71f1ae8184c312794ca5f010cd5d233df628facc6fedeb276b0d3e3d69ff4f3e66cdd248189addcb7e6a9b221ba64aac663b233e4e19238b737f4e1381e15d78ce061f370d46b21f0934fc1c3386", 0xaa}, {&(0x7f0000001640)="2d6a29dcb8a0968abda3f9c5c658c7101978548e11146b6394b77138fcf4ddf7e27920d34984ed8624ec93c34f155eba982a8555b44b2a6af13dfe8e218a0efee0742685d982ff4384ed45b08eb42755f1e398284f4daa9e7392600691856c06b651c0c7dbd4c0b166ded1c72f72fd873324f30543fd08f3974765f028eef986423d7f99cd02e6e7f34aacc25dfcafd65024e0c281db72385e8c38a5e5deee6570e8dd94f0dd4c38875f04cf8c9ca3cb6b4519e345df75211061d868f3fc588baee8d425191e5083ad4f26a245e18949880b7be61867d305ff9fea22", 0xdc}, {&(0x7f0000000440)="bf79a1eb39db0dae9b13f0731aface02d7309eb5de8a1bcbe45530caa0fe4877533f95f72dea3f80ba453a956f99873f2d7bba81de198b17ed75d2f07326715bb8cfc4a47bf43d91036e64597248ab365237bd58257f1b019476a213b275ca09d9397ac60e16b5a59eaecfd912c0adb39eba60ff821e415e83d5c211654927914b23033acd01", 0x86}, {&(0x7f0000001740)="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", 0xfd}], 0xa, &(0x7f0000001a40)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r18, @ANYBLOB="0000000018000000000002000100000001000000", @ANYRES32=r19, @ANYRES32=r0], 0x88, 0x8000}, 0x0) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() [ 967.351482] protocol 88fb is buggy, dev hsr_slave_0 [ 967.359746] protocol 88fb is buggy, dev hsr_slave_1 09:08:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x299}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180)}, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:08:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) r3 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000140)={r3, 0x0, 0x7, 0xffffffff, 0x7fffffff}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:06 executing program 1: setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="70000000c2fae242ab25f211c97b44de08f4bd6a7d0a5ffa133a27c00b57b14b7beadc667a20c2b76cfe59d8e94ccfd1c5aecc5b910a28b0eca1b3faf2f97be0a3e7", @ANYRES16=0x0, @ANYBLOB="00000000000000000000070000002400020008000300000000000800070000000000080004000000000008000700000000001800010014000300880e9dae4b4c966aed653e2fbb55f0c2"], 0x50}}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) ioctl$TCSETA(r0, 0x5406, &(0x7f00000002c0)={0x400, 0x5, 0xfa84, 0xff, 0x18, 0x3, 0x5, 0x81, 0x9, 0x7}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:08:06 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x802000004, 0x6) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) setsockopt(r4, 0x2, 0x6, &(0x7f00000001c0)="0b1b70491ec172c610174ff23d1c8f985583bcbd619075eae3c8737d", 0x1c) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000300)=""/222) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x802000004, 0x6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', r9}) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x4, 0x1800, 0x0) poll(0x0, 0x0, 0x8000000000000200) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440)='d\x00\x00\x00\x03(FS\x00', 0x0, 0x0) ioctl$TCSETXW(r10, 0x5435, &(0x7f0000000240)={0xae33, 0x5, [0x100, 0x100, 0xbc6, 0x0, 0x8], 0x8001}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000280)={{0xff, 0xf}, {0xf9, 0xfd}, 0x3, 0x1, 0x40}) r11 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x9) fcntl$setlease(r11, 0x400, 0x1) fcntl$setown(r11, 0x8, 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000", @ANYRES16=r12, @ANYBLOB="0002286ba9e365227f9bb91f73733dbd6500fcdbdf0000000000040002005ef7f176fe5cbb0bd683f6c0b8fac75659b9eb9f111ac02caf9feff626f6049de3214ce7671f9e95c1e5e49eea3b5e4d7b6345a75c481f543b3885c3cb335e46a800b9f66c482cb6464ba3d26cc4f17be75c92dfa1829bb4f7e4a3d732741076318579e3a9960fe47cacbc9b02edcdd163c3d49b5376941ab92d73947a5ab9"], 0x18}, 0x1, 0x0, 0x0, 0x200e0890}, 0x20000011) execveat(r11, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:08:06 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0xf7b6909fef8776ca) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xd}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x80004) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xf1f4) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)={[{@utf8='utf8=1'}]}) [ 967.703185] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10077 comm=syz-executor.1 [ 967.746450] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10077 comm=syz-executor.1 09:08:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00') getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x72, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={r4, 0x7}, &(0x7f0000000240)=0x8) setsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f0000000340)="387ea6589c1b54ca65fd989f0105df9ee87c7734e48efb652526a312188f7d36d5bc0e5f1f6bd557964476201afc2c1b1d2e5245510b6bee0a6e5146b6bc53812163100602784632e4ef01809ffbec51c3c0be283231d27e40e3e47200ea5d1174f6284248b53f75a8c2aaff916b8fc43cb294f766190e99bd", 0x79) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r4, 0x5}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r5, 0x9}, &(0x7f0000000300)=0x8) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r6, 0x9, 0x6) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000003c0)={0x3, r6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x802000004, 0x6) ioctl$TIOCGPKT(r9, 0x80045438, &(0x7f0000000000)) sendmsg$sock(r8, &(0x7f0000000240)={&(0x7f0000000140)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000040)=[{0xffffffffffffffff}], 0x1, &(0x7f00000001c0)}, 0x4800) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)={0x3, {{0x2, 0x4e24, @loopback}}, 0x0, 0x7, [{{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e24, @empty}}]}, 0x410) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 967.791627] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10077 comm=syz-executor.1 [ 967.835354] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10077 comm=syz-executor.1 [ 967.854761] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10077 comm=syz-executor.1 09:08:06 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfc0004) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x1b8c6a3e}], 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3001002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r4, 0x10, 0x70bd2d, 0x1, {{}, 0x0, 0x4108, 0x0, {0x1c, 0x18, {0xc688, @bearer=@l2={'ib', 0x3a, 'veth1_to_bond\x00'}}}}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0xa081}, 0x20000000) [ 967.879133] FAT-fs (loop2): bogus number of reserved sectors [ 967.888159] FAT-fs (loop2): Can't find a valid FAT filesystem [ 967.889613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10077 comm=syz-executor.1 [ 967.912038] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10077 comm=syz-executor.1 [ 967.928206] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10077 comm=syz-executor.1 [ 967.961613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10077 comm=syz-executor.1 [ 967.984784] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10077 comm=syz-executor.1 09:08:07 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0xc000, 0xfffffffffffffffc, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) connect$rds(r5, &(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x802000004, 0x6) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) mknod(0x0, 0x0, 0x6) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = gettid() tkill(r7, 0x1000000000013) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, &(0x7f0000000040)=0x4000000, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x802000004, 0x6) ioctl$EVIOCGABS20(r10, 0x80184560, &(0x7f0000000140)=""/100) 09:08:07 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000000)=0x1) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "f2193ce17fff51de", "c10408bb0ed392a1362250e4804b5a14b61177ab2b0bbea357df1a1e90a9512c", "b3882780", "ca93338ff1a59f84"}, 0x38) 09:08:07 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x1d2, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:08:07 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xc374, 0x20000) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000000c0)={0x0, 0x4, 0x1, 0x80, &(0x7f0000ffb000/0x4000)=nil, 0x7}) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000140)={0x3, &(0x7f0000000100)="69aa036b9cc3e6e65d"}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00') exit(0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) sendfile(r5, r3, 0x0, 0x1c0) 09:08:07 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x27) pipe(0x0) socket$alg(0x26, 0x5, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0xfffffffffffffffb) perf_event_open(&(0x7f000001d000)={0x1, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) pipe(&(0x7f0000001340)) pipe(&(0x7f00000002c0)) 09:08:07 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x80000000, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x72, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={r4, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={r4, 0x6}, &(0x7f00000001c0)=0x8) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r5 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r5, 0x400, 0x1) fcntl$setown(r5, 0x8, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) execveat(r5, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:08:07 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/keycreate\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x20, 0x100) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) r6 = getpgrp(0x0) waitid(0x0, r6, &(0x7f00000002c0), 0x2, 0x0) ptrace$getregs(0xe, r6, 0x9, &(0x7f00000001c0)=""/68) r7 = getpgid(r6) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000000)=0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r12 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = inotify_init1(0x0) r14 = gettid() fcntl$setown(r13, 0x8, r14) r15 = getpid() r16 = socket(0xa, 0x3, 0x8) r17 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r16, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r17, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r19 = gettid() waitid(0x83b895581628fca4, r19, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r16, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r18, @ANYRESDEC=r19]], 0xfffffffffffffe56}}, 0x20004850) r20 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r21 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r22 = dup2(r21, r20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r22, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r22, 0xc08c5334, &(0x7f0000000200)) r23 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r23) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r23}, 0x0) kcmp(r23, r23, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r23, 0x0, 0x0) r24 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r23, r24, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r19, r22, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r25}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r25}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r25}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r25}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r25}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r14, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r12, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r11, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r9, r8, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r7, r5, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r4, 0x0, 0x10, &(0x7f00000000c0)='}}Heth0vboxnet0\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf9, &(0x7f0000000000)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', r25}, 0x30) prctl$PR_SET_PTRACER(0x59616d61, r26) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:08:07 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000040)={{0x1, 0x27, 0x9, 0x8, 0xff, 0x74}, 0xb}) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x800, 0x20080) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8280, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x4, 0x8, 0x8, "12558b7ea69dad677a54a28b1a9ac6aa85481b2b5623f5f381b6e570804675a61db213fde32adfea5c0fff244f14c926327d473e7eecb783a69a71d534e42ddb", "e3bbad4a78bc54e15fa54902c1a5003cacba477c12b56d2cc9d7f234274d84473ac7ca11ffeac8fddc771e7142ebc088a53df18cb04ae6d352f370fd63846c59", "d944c1e8c0af147ec0b2de4234d88f6e6dfea2df7fdca84575adca87a3bc397c", [0x81, 0x200]}) epoll_pwait(r1, &(0x7f0000000180)=[{}, {}], 0x2, 0x8781, &(0x7f0000000140)={0xffffffffffffffff}, 0x8) 09:08:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x802000004, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000540)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x72, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000180)={r6, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r6, @in6={{0xa, 0x4e20, 0x3, @ipv4={[], [], @loopback}}}, 0x20, 0x7}, &(0x7f0000000500)=0x90) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r3, &(0x7f0000001040)="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", &(0x7f0000000000)=""/90, 0x4}, 0x20) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000280)={0x8, 0x45feed7dd0353ce, &(0x7f0000000180)="66c029dd0911b9e5ec4d60631641ed2e2fa76a1678bc64352f8703f0c993b26ac1c32928944dbbe9ec09d695d0", &(0x7f00000001c0)="bb094c9f976455838dc65c0aee1c713e3ecce575ae76753784537ee6d67c6bfad0f5713a3061145d26e82e4b9d6e9c9a1ea3d4988d0a3beeffac204918eaebc946af7895aa5c0e3cb635e62fc26c83fedaca3a6a143000e70cdab2191dee7bb34ece9d32110596a5684d9b7c4da8d019322f80d0bd6a0028d5d7484b8b082353fbb5bfc58cf0f70ab530d7d5afb1cc98e3", 0x2d, 0x91}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:07 executing program 2: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000270700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) write$binfmt_elf64(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xbe, 0x2, 0x4c, 0xa7, 0x5, 0x3, 0x8304d9c51a25ed7f, 0x2, 0xf, 0x40, 0x2fd, 0x5, 0x200, 0x38, 0x1, 0x5, 0x7, 0x9d20}, [{0x5, 0x4, 0x401, 0x1f, 0x0, 0x101, 0x20, 0x3ea}, {0x7, 0x8000, 0x9, 0xffffffffffffffff, 0xb237, 0x5e, 0xbd2c, 0x2}], "0a410e8f7c906a6310e068793f65037f2a7fd682655416d9ecb47571cfda73bcb8d92b117ebfd6e38e84e6ed48fab82219f2a15d1f2af461ee16f9f4664f2d10ba0d57eaaedc98c3376b005f4cfa1f0a8df5c6199a847768178618d0a0ee105494861f86ad2029e697ae17d5d5bf56effae2d50a16919dbb6c32f166f8c88294", [[], [], [], [], []]}, 0x630) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000180)="6c4a01070295ae860ea2767d77879f2a43d93774c58084623ed8744da2c33bea6c119121a357605e02054c2f69a10b4a4d7c0137919760d1b9778f9646cf1e428ed05687346ded141e9222c2dd52dbe533148c6aefeb937229c81a52531338e0a3b571675e192a54377fc2", 0x0}, 0x20) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) fcntl$setpipe(r3, 0x407, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_yield() 09:08:07 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x27) pipe(0x0) socket$alg(0x26, 0x5, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0xfffffffffffffffb) perf_event_open(&(0x7f000001d000)={0x1, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) pipe(&(0x7f0000001340)) pipe(&(0x7f00000002c0)) 09:08:08 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x21040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) ioctl$UI_DEV_CREATE(r1, 0x5501) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x200000) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040)=0x1000, 0x4) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x2) tkill(r4, 0x1000000000013) 09:08:08 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(r1, 0x80c, 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000000780), 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) splice(r2, &(0x7f00000002c0), r3, &(0x7f0000000300), 0x401, 0xb) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000005c0)={0x90, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, 0x90) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x90) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x907, 0x82800) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x9, 0x4000) pipe2(&(0x7f0000000180), 0x5000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f55653d30303030303030303030303030303030303034303030302c757365725f69643d37feaef856ee96c3220969bef01248c6ded422e934715b025e6dc9b969fe1d0b92ac384420d4532410b98e3ef4946e687793d2279e", @ANYRESDEC=0x0, @ANYRESDEC=0x0]) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_ENTRY(r4, &(0x7f00000005c0)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r4, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x90) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="8c2fb074d782b99a4ebb28bd49ca9d8f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f680fcd8bd0da6e13b662424ccd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8f45aa7708f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce37375165fc7b892d92b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd235877eaf2c6b", 0x9a}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 09:08:08 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:08:08 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x52d, 0x0, 0xb, 0x0, 0x80000004, 0x7}) 09:08:08 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) socket(0x1000000010, 0x0, 0xc) write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000240)="1f0000000104ff00fd4354c007110000f305010008000100020423dcffdf", 0x1e) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x6c000011) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000080)=0x44) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0xfffffffd}) syz_open_pts(r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX], 0x3}}, 0x40) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1000000, 0x4, @perf_config_ext={0x7, 0x7}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) unshare(0x20600) getsockopt$inet_mreqn(r4, 0x0, 0x20, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7fffffff}) syz_open_pts(r6, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TIOCSCTTY(r7, 0x540e, 0x6) r8 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) ftruncate(r8, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xd04, 0x0) 09:08:08 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x100, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000040)={0xf9b, 0x2, 0x10000}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x100, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4480}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x9040}, 0x4004010) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4044) getresgid(0x0, &(0x7f0000002880), 0x0) gettid() writev(r3, &(0x7f0000002780)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000280)="d0c3efe061c759456dd723d50ff6935972ac07ef0a794a99f3df2b74a135530af6bc25dacd87d96f0cbf2b2fd6ffd9b6297ea4bdfaa9daab480bbaab1b739e1b4418b5c4e764", 0x46}, {&(0x7f00000001c0)="03d391095d09a85237bf5d1d806a1bd0a4efe5fe3e3b8210c8898fe367a9c59a937ed7e8fd5e788585a2a5edd2462d6c1c105e6cc5f2a859a2aab810dfa636d0", 0x40}, {&(0x7f0000001640)="01600efe5216eb872056b6aa2e02d03dd63cb02976b379e8479140f0177934f12269602125bcf903c6518543253c13b5ffda80d756b4ec65cbb65b1b673f9211e8a8f4257feb70ccf0d8b65aeac4c77f698cc067b095f28e54bbf94cc5b7f72ace8a3ba87888c25af2348b7ff515622c4a4d7b852d694b099e49dbc34214e24a4ebd94140c131bbd989b2bb818d6004cfbaf3f8df2ab5841c8d5602840420c6aae76f82d8eaa5899bf8f6a24833c1a279c2a1b5935fec4509ecce15eb284ecfadb307d14570c76195879863bed23e16b968fd3f83b9c973fa0defc219573df58", 0xe0}, {&(0x7f0000000300)="c6ee232900ef188e71c304e0edd1f44986e3a57d023a98a9eadaa7fcdcb01aefcb4806ade0d5424ef6875c37c56b138a1c50d3e00f75fe58b62381ecf2fdb6969479b0436b41891d33bd513a7e1639026b08bfad05f4bbfda5a9516ee0506a0c025d48768824eeca2d24508c1189d3348a3699f012a8231371f61673aebb1bf94ec29775ac669514b297", 0x8a}, {&(0x7f0000000440)="77dbd2d90ad8f9fdd55fc34287e268fd47f3ed2f7a2d984530bca0b1e41615dbd13e5c3296c0e600e8bb19ade12fa429640fd650d5e1cc85c03f3e96a78f476bf843bb946384fade8e73a12001f804c3", 0x50}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f00000004c0)}, {&(0x7f0000002740)="7bc4fe05d6da80823fffd259faf7de2f1ce0e67b1fb85b6e1db5c73bb3fb0e", 0x1f}], 0x9) 09:08:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x8001, 0xfff7}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:08 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/keycreate\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x20, 0x100) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) r6 = getpgrp(0x0) waitid(0x0, r6, &(0x7f00000002c0), 0x2, 0x0) ptrace$getregs(0xe, r6, 0x9, &(0x7f00000001c0)=""/68) r7 = getpgid(r6) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000000)=0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r12 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = inotify_init1(0x0) r14 = gettid() fcntl$setown(r13, 0x8, r14) r15 = getpid() r16 = socket(0xa, 0x3, 0x8) r17 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r16, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r17, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r19 = gettid() waitid(0x83b895581628fca4, r19, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r16, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r18, @ANYRESDEC=r19]], 0xfffffffffffffe56}}, 0x20004850) r20 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r21 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r22 = dup2(r21, r20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r22, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r22, 0xc08c5334, &(0x7f0000000200)) r23 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r23) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r23}, 0x0) kcmp(r23, r23, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r23, 0x0, 0x0) r24 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r23, r24, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r19, r22, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r25}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r25}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r25}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r25}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r25}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r14, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r12, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r11, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r9, r8, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r7, r5, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r4, 0x0, 0x10, &(0x7f00000000c0)='}}Heth0vboxnet0\x00', r25}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf9, &(0x7f0000000000)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', r25}, 0x30) prctl$PR_SET_PTRACER(0x59616d61, r26) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:08:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x802000004, 0x6) dup3(r3, r0, 0x100000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x802000004, 0x6) ioctl$IMGETDEVINFO(r6, 0x80044944, &(0x7f0000000280)={0x4}) syz_init_net_socket$ax25(0x3, 0x2, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x802000002, 0x4) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r0, 0x0, 0x7, r0}) r8 = syz_open_dev$adsp(&(0x7f0000000180)='k\x06\xbfj\x0f\x85\xc2\xc9\xf9q1', 0x9514, 0x1) renameat(r8, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') r9 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x40000) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0x1a000) 09:08:08 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) connect$packet(r3, &(0x7f0000000000)={0x11, 0x30, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:08:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x802000004, 0x6) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr="c2da72a8f7f114bd010955a9fad40486", 0x3, 0x1, 0x1, 0x9, 0x7ff, 0x5}, 0x20) pipe(0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000002780)=0xf7d) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f0000001380)={[{@decompose='decompose'}, {@umask={'umask'}}]}) 09:08:08 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) accept$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={[], [], @multicast1}, @rand_addr="6c385aa3390e1159f34cc4da3cd3ec4e", @dev={0xfe, 0x80, [], 0x18}, 0x5, 0x6, 0x8, 0x100, 0x100, 0x10, r3}) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r5 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r5, 0x400, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x802000004, 0x6) ioctl$KVM_GET_SUPPORTED_CPUID(r7, 0xc008ae05, &(0x7f0000000ac0)=""/253) mknod(0x0, 0x0, 0x6) fcntl$setown(r5, 0x8, 0x0) execveat(r5, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) accept4$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000280)=0x1c, 0x800) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x802000004, 0x6) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r10 = gettid() r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0xa12a271f41bc0791, 0x0) write$uinput_user_dev(r11, &(0x7f0000000640)={'syz0\x00', {0x8, 0xfd, 0x0, 0x3677}, 0x53, [0x7fffffff, 0x3, 0x9, 0x6, 0x7, 0x7, 0x9fc4, 0x40004, 0xec7, 0x9, 0x101, 0x0, 0x9, 0x3f, 0xfffffffd, 0x1, 0x4, 0x3f, 0x10001, 0x1, 0x1, 0x200, 0x7, 0x80, 0x1, 0x10001, 0x0, 0x5802, 0x1000, 0x1ff, 0xfff, 0x8, 0x5, 0xc15, 0x40, 0x7, 0x2, 0x2, 0x1000, 0x101, 0x513b, 0x2, 0x8, 0x5, 0x6, 0xf1c, 0x9, 0x9, 0x1, 0x9, 0x4, 0x7ff, 0x1, 0xf0, 0xadf6, 0x40, 0x0, 0x9, 0xffff, 0xffffff5d, 0x60000000, 0xfd4e, 0x1, 0x9], [0x4, 0x20, 0x1, 0x81, 0x3f, 0x9, 0x4, 0x20, 0x8, 0xfffff800, 0x34, 0x1000, 0x1, 0x3, 0x10001, 0x1000, 0x3, 0x1, 0x0, 0x3, 0x7, 0x10001, 0x8, 0xfffc, 0xfff, 0x3, 0xbd84, 0x2, 0x7fffffff, 0x0, 0x0, 0x9, 0x10009, 0x20, 0x6, 0x2, 0x0, 0x1, 0x7fff, 0x5, 0xa, 0x7f, 0x2, 0x5, 0x2, 0x7, 0x4, 0xffffffff, 0x7, 0xed863b5, 0xffff, 0x35, 0x8, 0x7, 0x7, 0x10000, 0x7, 0xffff777f, 0x80000000, 0x759f731d, 0xfffffffb, 0x21f9, 0x0, 0x1], [0xf2a, 0x1, 0x6, 0x10000, 0x9, 0x8, 0x7, 0x7f, 0x5, 0x80000000, 0x9, 0x3f, 0x1, 0x7, 0x8, 0xfffff215, 0x1ff, 0x10001, 0xfff, 0x5, 0x6, 0xe2128520, 0x20, 0x7, 0x8, 0x7, 0x34, 0x6, 0x101, 0x8, 0xffff, 0xd559, 0x1000, 0xffffffff, 0x7f, 0x5, 0x5b45, 0x1, 0x25d, 0x80000001, 0x8000, 0x8, 0x1, 0x9, 0xbf, 0x1f, 0xfffffffe, 0x2, 0x8000, 0x6, 0x1, 0x83f, 0x8, 0x9, 0x6, 0xb2f9, 0x3, 0x5, 0x5, 0x8, 0x7ff, 0x5, 0x2, 0x8000], [0xfda2, 0xffff, 0xfffffffe, 0x5, 0x7, 0x2, 0x5, 0x8001, 0x3, 0x3, 0x9ca5, 0x100, 0x401, 0x20004, 0x3, 0x100, 0xca8dc2a2, 0x8, 0xffffffff, 0x7ff0000, 0x6, 0x3, 0xff, 0x5, 0xca8, 0x5, 0x9, 0x7, 0xbce7, 0x100, 0x1, 0xa7, 0x7fffffff, 0x9, 0x6, 0x80000001, 0x50000, 0x3, 0x4f57, 0x2, 0x6, 0x7f, 0x9, 0xfffffff8, 0x3f, 0x9, 0x0, 0x4, 0x40, 0x3, 0x2, 0x2cca4e5e, 0x2, 0x5, 0x7, 0xc582, 0x200, 0x0, 0x4, 0x1, 0x4, 0x5300, 0xfffffffe, 0x20]}, 0x45c) tkill(r10, 0x1000000000013) 09:08:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000140)=""/184, 0xffffffffffffffc6) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:09 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) poll(0x0, 0x0, 0x8000000000000200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)=""/192) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x8000) r5 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r5, 0x400, 0x1) fcntl$setown(r5, 0x8, 0x0) execveat(r5, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:08:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000140)=""/189, 0x3af) getdents(r0, &(0x7f0000000ea9)=""/345, 0xffffffffffffff2b) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000000)={0x81, 0x1, 0x48000000, 0x1, 0x4, 0x6}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x210000, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000080)=""/96) [ 970.299883] bridge0: port 3(gretap0) entered blocking state [ 970.326860] bridge0: port 3(gretap0) entered disabled state [ 970.349207] device gretap0 entered promiscuous mode [ 970.373117] hfsplus: unable to find HFS+ superblock [ 970.380400] bridge0: port 3(gretap0) entered blocking state [ 970.387318] bridge0: port 3(gretap0) entered forwarding state 09:08:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r3, r2}, &(0x7f0000000400)=""/262, 0x106, &(0x7f0000000040)={&(0x7f0000000000)={'crc32-generic\x00'}}) keyctl$assume_authority(0x10, r2) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x802000004, 0x6) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr="c2da72a8f7f114bd010955a9fad40486", 0x3, 0x1, 0x1, 0x9, 0x7ff, 0x5}, 0x20) pipe(0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000002780)=0xf7d) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f0000001380)={[{@decompose='decompose'}, {@umask={'umask'}}]}) 09:08:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) getdents(r0, &(0x7f0000000140)=""/380, 0x1f) [ 970.619488] hfsplus: unable to find HFS+ superblock 09:08:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/375, 0xfffffffffffffed9) [ 970.710377] net_ratelimit: 12 callbacks suppressed [ 970.710387] protocol 88fb is buggy, dev hsr_slave_0 [ 970.720532] protocol 88fb is buggy, dev hsr_slave_1 [ 970.725642] protocol 88fb is buggy, dev hsr_slave_0 [ 970.730776] protocol 88fb is buggy, dev hsr_slave_1 09:08:09 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000380)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0xffffff7f00000000, 0x0, &(0x7f00008feff0)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x50}}, 0x0) write$vhci(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) renameat(r0, &(0x7f00000000c0)='./file2\x00', 0xffffffffffffff9c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./werdir=.:file0,workdir=./file1']) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000700)) syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x2000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6, @in6=@initdev}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) mount$9p_rdma(&(0x7f00000001c0)='127.0.0.1\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x100002, &(0x7f0000000980)=ANY=[@ANYBLOB="74724d6e733d72646d612c706f72743d3078303030303030303030303030346532322c73713d3078303030303030303030303030303030302c72713d307830303030303030303030303030303047919c524bd26de63078303030303030303030303030305030372c61ffff7b3d3078303030303030303030303030303030322c6673636f6e746578743d73797374656d5f752c66756e633d4d4d41505f434845434b2c6f626a5f726f6c653d6e65742f756470002c00"]) dup(r2) r3 = socket$inet6(0xa, 0x80003, 0x9) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000680), &(0x7f00000006c0)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x523) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x4800) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') 09:08:09 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer\x00', 0x210040, 0x0) r0 = syz_open_dev$media(&(0x7f0000000500)='/dev/media#\x00', 0x9, 0x220000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@ipv4={[], [], @loopback}, @in6=@initdev}}, {{@in6=@local}}}, &(0x7f0000000480)=0x7d573604) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@sha1={0x1, "4415c7849c8de6ec785c7bf29e0ca4ddeb027feb"}, 0x15, 0x1) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080), 0xc) signalfd(r1, &(0x7f0000000100)={0x6}, 0x8) poll(0x0, 0x0, 0xffffffff) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x40140, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000340)=[0x4], 0x1, 0x9, 0x0, 0x81, 0x8, 0x800, {0x5, 0x8001, 0x3, 0x100, 0x8, 0x2, 0xfff, 0x5, 0x7fff, 0x7, 0x81, 0x8c1, 0x10000, 0x4, "1a55724fab9f48d562d0f9bfcaaf7324b74a4d6f74e73f04ef536691ad7917c0"}}) perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc05000000b3d94c22") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000400)='nr0\x00', 0x10) 09:08:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x802000004, 0x6) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) r2 = getpid() r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x2002, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000180)) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r2, 0x9, 0x6) r4 = syz_open_procfs(r2, &(0x7f0000000680)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13m\xc5\xf1v\xa0\xa7\xa5$Y^\xe6\x842\x8a:*\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/344) getdents64(r4, &(0x7f0000000080)=""/189, 0x25c) getdents(r4, &(0x7f0000000ea9)=""/375, 0x177) ioctl$KIOCSOUND(r4, 0x4b2f, 0x5) 09:08:09 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) socket$can_raw(0x1d, 0x3, 0x1) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sysinfo(&(0x7f0000000140)=""/175) r2 = gettid() tkill(r2, 0x1000000000013) 09:08:09 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_tid_address(&(0x7f0000000000)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000640)) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:08:09 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r0, 0x9, 0x6) r1 = syz_open_procfs(r0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r1, &(0x7f0000000080)=""/189, 0x25c) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000140)) getdents(r1, &(0x7f0000000ea9)=""/375, 0x177) [ 971.030618] protocol 88fb is buggy, dev hsr_slave_0 [ 971.036472] protocol 88fb is buggy, dev hsr_slave_1 09:08:10 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:08:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) getdents64(r0, &(0x7f0000000000)=""/97, 0x61) [ 971.325311] overlayfs: missing 'lowerdir' 09:08:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x802000004, 0x6) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000500)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r3, &(0x7f0000000080)=""/189, 0x25c) getdents(r3, &(0x7f0000000ea9)=""/375, 0x177) 09:08:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000140)=""/176, 0x21) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x0, 0x8, 0xffffff78, [], &(0x7f0000000040)={0x10064, 0x8001, [], @p_u16=&(0x7f0000000000)=0x6}}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:10 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000087000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000000)={0x3, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) ioctl$KDDISABIO(r5, 0x4b37) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x802000004, 0x6) r8 = fcntl$dupfd(r1, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) [ 971.510136] protocol 88fb is buggy, dev hsr_slave_0 [ 971.515359] protocol 88fb is buggy, dev hsr_slave_1 09:08:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) getdents(r0, &(0x7f0000000ea9)=""/374, 0x176) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x98f320f6ed5ead94, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f00000002c0)={{0x2, 0x0, @identifier="0a03760d08513f6bfb510d6ff7f3402a"}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @mss={0x2, 0x9d66}, @window={0x3, 0x3, 0x9}], 0x3) 09:08:10 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:08:10 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x81, 0x0, 0x7f, 0x1818c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000240)='a\xff\xff{', 0x4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0xffffff7f00000000, 0x0, 0x0}, 0x0) write$vhci(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) renameat(r0, 0x0, 0xffffffffffffff9c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='map_files\x00') syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x2000) socket$inet6(0xa, 0x80003, 0x9) fsetxattr$security_selinux(r3, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:auth_cache_t:s0\x00', 0x22, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RREADDIR(r4, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') 09:08:10 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgrcv(r1, &(0x7f00000003c0)={0x0, ""/238}, 0xbe, 0x1, 0x0) msgsnd(r1, &(0x7f0000000080)={0x1}, 0x8, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000100)=""/199) socket(0x0, 0x0, 0x0) [ 971.864904] SELinux: failed to load policy 09:08:10 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000140)=0x7f) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x20, 0x2, 0x0, 0x7, 0x60400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x0, 0x1, {0x0, 0x35, 0x14, 0x8, 0x9, 0xe7c, 0x5, 0xe6}}) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x23}, 0xfffffd96}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = gettid() tkill(r6, 0x1000000000013) 09:08:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) accept4(r2, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, &(0x7f00000001c0)=0x80, 0x800) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:10 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = geteuid() setreuid(r2, 0x0) r3 = geteuid() setreuid(r3, 0x0) r4 = geteuid() setreuid(r4, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x802000004, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000640)=0xc) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r12) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r15) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r16) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {0x1, 0x2}, [{0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x1, r1}, {0x2, 0x4, r2}, {0x2, 0x1, r3}, {0x2, 0x0, r4}, {0x2, 0x4, r5}, {0x2, 0x4, r8}, {0x2, 0x5, r9}, {0x2, 0x8, r10}], {0x4, 0x4}, [{0x8, 0x3, r11}, {0x8, 0x2, r12}, {0x8, 0x2, r13}, {0x8, 0x4, r14}, {0x8, 0x2, 0xee01}, {0x8, 0x1, r15}, {0x8, 0x8, r16}], {0x10, 0x4}, {0x20, 0x2}}, 0xa4, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r17 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r19, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) ioctl$sock_inet_SIOCSIFFLAGS(r19, 0x8914, &(0x7f0000000140)={'vcan0\x00', 0x200}) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r18}) fcntl$setlease(r17, 0x400, 0x1) fcntl$setown(r17, 0x8, 0x0) execveat(r17, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() [ 971.910157] protocol 88fb is buggy, dev hsr_slave_0 [ 971.915344] protocol 88fb is buggy, dev hsr_slave_1 [ 971.938064] SELinux: failed to load policy 09:08:10 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgrcv(r1, &(0x7f00000003c0)={0x0, ""/238}, 0xbe, 0x1, 0x0) msgsnd(r1, &(0x7f0000000080)={0x1}, 0x8, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000100)=""/199) socket(0x0, 0x0, 0x0) 09:08:11 executing program 1: syz_read_part_table(0x0, 0xaaaab82, &(0x7f0000000040)=[{&(0x7f0000000000)="02015400000000090000ff0700000000000000000000000000000000000000ffffff81000004800000000a0000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x802000004, 0x6) r2 = syz_open_pts(r1, 0x40000) ioctl$VT_RELDISP(r2, 0x5605) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getegid() r4 = dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r6 = getuid() syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="0491a9d2499a1f95d2ce6c12309f6727aa19835be37e8e966ee0e25e82423cd53edcff6b88d385dc53f6d80066cf7bbf68295aa700ec3fd1bf72c7b87a54a39273f64d8a83c4e92fa2f0fb4f9fcfd2f52a54357c4cb737d7adfb19fbe1946f246a3be3b692ea5a5a6681c54ae558404b0a0122182acba3400b5649a3679e449a5593173ef4c4c969fc817624635354294d38169f8408bd33e99d0bcbf9bb2e2e876c3d11554b716997983820bca5094ef6", 0xb1, 0x2bf}, {&(0x7f0000000280)="bb900b76d7e74afef40453c025f6cdf7d8b999bc4f7dd017189e21ad44339763650a36f1be83fd879e933a8ce0052a35dc739fa97b956e1342b8458682c467f589cb99e6b89979823ae16499bea6ea95d1e6f757e97e8c4a3fb864ea41128e681de745b2c1966a19200054724cc82e1fc8c4007a55b942fbec361839b9cbfd3cfd04f87e57f101a693fc54ae375bee0be5eae39e67ee78b6bb11a8c3741655f8220f9ad37ff2ff4693628b35cdaf0b3c4f3c71ee80e7f107a1af7a840f4b8cd1c4aacfd044b682bcc63d87a1877cac5c", 0xd0, 0x81}, {&(0x7f0000000380)="09c62b267092ab1251640d1b5985b8522fd44c929e8380fe00cdfaead934a1586b7dcc77e01247bfe690b77bf8e1a019", 0x30, 0xfffffffffffffffc}], 0x200000, &(0x7f0000000440)={[{@unhide='unhide'}, {@dmode={'dmode', 0x3d, 0x8}}, {@map_normal='map=normal'}, {@hide='hide'}, {@unhide='unhide'}, {@mode={'mode', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@map_acorn='map=acorn'}], [{@uid_eq={'uid', 0x3d, r6}}, {@seclabel='seclabel'}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x802000004, 0x6) bind$can_raw(r7, &(0x7f0000000080), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000500)={0x3c, 0x6, 0x4, 0x1f, 0xb, 0x9, 0x4, 0xb2, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x802000004, 0x6) write$P9_RREADDIR(r10, &(0x7f0000000600)={0x49, 0x29, 0x1, {0x5, [{{0x20, 0x4, 0x3}, 0x101, 0x1f, 0x7, './file0'}, {{0x20, 0x3, 0x4}, 0x1, 0x9, 0x7, './file0'}]}}, 0x49) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r11, 0x0, 0x802000004, 0x6) r12 = syz_open_dev$cec(0xfffffffffffffffd, 0x1, 0x2) ioctl$EVIOCGPROP(r12, 0x80404509, &(0x7f0000000540)=""/88) ioctl$TIOCSIG(r11, 0x40045436, 0x20) [ 972.108551] overlayfs: filesystem on './file0' not supported as upperdir [ 972.127605] SELinux: failed to load policy 09:08:11 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgrcv(r1, &(0x7f00000003c0)={0x0, ""/238}, 0xbe, 0x1, 0x0) msgsnd(r1, &(0x7f0000000080)={0x1}, 0x8, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000100)=""/199) socket(0x0, 0x0, 0x0) [ 972.316364] SELinux: failed to load policy 09:08:11 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgrcv(r1, &(0x7f00000003c0)={0x0, ""/238}, 0xbe, 0x1, 0x0) msgsnd(r1, &(0x7f0000000080)={0x1}, 0x8, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000100)=""/199) socket(0x0, 0x0, 0x0) 09:08:11 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r2, 0x9, 0x6) tkill(r2, 0x30) [ 972.436185] SELinux: failed to load policy 09:08:11 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgrcv(r1, &(0x7f00000003c0)={0x0, ""/238}, 0xbe, 0x1, 0x0) msgsnd(r1, &(0x7f0000000080)={0x1}, 0x8, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000100)=""/199) [ 972.505932] loop1: p1[DM] p3 [ 972.518752] loop1: partition table partially beyond EOD, truncated 09:08:11 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:08:11 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgrcv(r1, &(0x7f00000003c0)={0x0, ""/238}, 0xbe, 0x1, 0x0) msgsnd(r1, &(0x7f0000000080)={0x1}, 0x8, 0x0) [ 972.552187] loop1: p1 start 2304 is beyond EOD, truncated [ 972.560405] loop1: p3 start 128 is beyond EOD, truncated [ 972.589762] SELinux: failed to load policy 09:08:11 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000380)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"/387], 0x1c}}, 0x0) fsetxattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000240)='a\xff\xff{', 0x4, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0xffffff7f00000000, 0x0, 0x0}, 0x0) write$vhci(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c006f7765726469723d2e3a66696c65302c776f726b6469723d2e2f66696c65aa"]) syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x2000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001f40)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x5}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="58000000000000001401000007000000000000000000005138e06c6ccc70221c9964da9b8d0008000000000000000000000000000000000000000000000700000000000000059e234618bb6ddbef988c48ae0000000000000000004fffef00000000000000000000000000000000000000000000881b885626977d07a0dfc838d003da9e247d2adf8b9c411fa6a8767d5d1dcac7a184e5f27369dd2936f83e94"], 0x58}, 0x0) dup(0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x83) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000680), &(0x7f00000006c0)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x523) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x4800) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') lsetxattr$security_smack_transmute(&(0x7f0000000280)='./file0/f.le.\x00', &(0x7f00000003c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000400)='TRUE', 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) [ 972.732928] SELinux: failed to load policy [ 972.803790] overlayfs: missing 'lowerdir' 09:08:11 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() tkill(r3, 0x1000000000013) 09:08:11 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgrcv(r1, &(0x7f00000003c0)={0x0, ""/238}, 0xbe, 0x1, 0x0) 09:08:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000000)={{0x1, 0x0, @descriptor="53308638d5f3eb1b"}}) 09:08:11 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000140)={{{@in=@dev, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) sendmsg(r6, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="fcba30f8e7b46393fadcbbff2546aca59153c34a84523f372e280a9d5fd073249d899244e264667457737ae0d3dadb483ae730d030c2bf98d1f007077178445763057151e7cffbf5ef3f3916b96e9f6f968ab9eececdbd7cb4578d861e0d43c2c7df87cd72f0ad7d7aab1d1e27a343aef6999562c0866d", 0x77}, {&(0x7f0000000240)="0259ef8dd3df4ac8ce3290f9db52616bd7ac8488b73bac408d5a593670182a1b2f6516a1bbf8a58adc6f0a9383608df3de81fe95c8193ca3405f48b892851b2268560119d86ab99bfa0d072ff606d46bf8e4a4dead1b39d4f58638ed66344ada4ec04217c20f2eef162ae09c04802ad85cce41186f47974a80cb1622e93189de8de21795a2896d", 0x87}, {&(0x7f0000000300)="107b413ce156aa95c5f2668602ec9b258d498229fe3f952a38868b50c3cce1327902c38a90f04577a5655c727cf85bdc882282ba3591738291a9e2055cfda23c096f633009ee0b18b8ebad846949eff9ab013152d2108cbeb2fc829d800da9a43d8be28b7c49ef9ed290a7c0167b170b4fdc9328c79fa28e67d7a006b0816c984f06a56d6bdc97b10316f06d2c350c93f5129a32ab121528058a8aa9342f52f7eb7ad520ce99284b0853bd8bb89ff819ca9ba42a5bc7ed5c6103193f9a6d7803f72ce3cb32c4b1e9f0cf2cadd0d39490d88107e41936fe93e0add8ff22cfe6a552dfcc8020adf6926f027670c65a703372ea9eeccb7305", 0xf7}, {&(0x7f0000000400)="1032ffe99b045aaa34ce70ea72295d1f0e319369a83ac9fc5f13d05e7751dd789ee7a66c975393fecf17ca82d44542c6393d41e6493485d5cddf7f5c6fa01285f18afccc2ea2d429d756dcab287ba55ddcb139d84dc3a0b98381fd954bbf57f263a93e9a42d6ae0e942c2f8d10b2045fa214f143582df77dc211b486e74e6f45b54449a9c0fa70b650ea9b417f7568431fdaede0519d5a0f9e775e73e3092a476e53739d87f462f0078972e528cf97a4f92133ed1e21c5a8f78a775b2047594c15846a406d6b0978191ed578e51500a4b10fd830d0388a65d51453351da177c4ae77769e06258ab3d46950f1e3821b98e98440af2a3f", 0xf6}], 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1468}, 0x4010000) fcntl$setown(r4, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x3, 0x0, &(0x7f0000000100)) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0xffffffffffff0001) gettid() [ 973.009798] SELinux: failed to load policy 09:08:11 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 09:08:12 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) r5 = accept$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x802000004, 0x6) r8 = fcntl$getown(r6, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r10) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={r8, r9, r10}, 0xc) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() [ 973.069634] overlayfs: missing 'lowerdir' 09:08:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) read$alg(r4, &(0x7f0000000000), 0x0) tkill(r1, 0x9) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000140), 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r6, 0x0, 0xedc0) 09:08:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x20000) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:12 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) msgget$private(0x0, 0x0) [ 973.242026] SELinux: failed to load policy 09:08:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) vmsplice(r1, &(0x7f0000000800)=[{&(0x7f0000000140)="bfc3b9233a2df4d5d399cb3fdecdb92b2464fc1e67a1b36b0ce50f83c2b59099d3bb6e1ab00ab3beaca907e0ef37a76b28bdad50642021c7df1d43d539ac88a9505024e0552d86adc4370064cd7063f23958270fee87f8d291ab83e57d38f9ca3ed16e29e5039b1f43c87c488b08e5ccb7ca8de1e7ad28c24d70e16a1af25e7e64c136570dbe28ac68bebd159513cfb938463f10ce84a86401df4b1457fda9dbddeac362fd95c4b56c9200a7923ce4bc438daf98258943c0738a8713b86ae6a46d469fb2b508479d75522273170e4d04986d9ccbccc5bd420ec72ba5df28d7055b7ec396d11dcf", 0xe7}, {&(0x7f0000000240)="cd60b4b3870478036d48000c92b9e3fcbe13547e742dacaf11a66e336111ff196552ef774b1e31baea0fc9f9ff5400da724129e31866021c2b949748bcdf0d112f4ad5e028291e4dca797b864ada68bd9a7eec7919ba71dc9d8f7f25e92686fa202410e656cfc6fab95ba8beb246e6b98cd744b03e53e67d896b2c53d0dbcf88e3d5a55c3643cccbdb472be1e6ba28ec21bd11ef796519d920f9349588d801f3af8e0bdd017d573e4d70d7507609da53f9cb059cbf282486547d3ec1f94e84314b5dbb7ba15bcab8ca56f652e514371bf4222e761f40d6b5386f0e9af3f9c7", 0xdf}, {&(0x7f0000000500)="fe98e286ea97bb23cf9bd6db42d06754b77f1a1d8a4f68ffb1f3ee8adbde05ac38bca7bf86a2c3ea71b87712a5e12cd2b6c7a8362ff74bae826fda918dc0bec714a843b0fd8f5ba4cf3807a4f6a0e1550d64467479097d28cf62570da13de0cda75d55bb7a1bdce25d6c255e1157fa96f5273d2bf42c2d96249d1b3a11c5822ffa15b6c748883969", 0x88}, {&(0x7f00000005c0)="49466c799d5ef9ce1593801df3899c9485e0b1f86aa4fedc63b8e29cf00de0beddc1df0ca68b36f509fe3be68c51df9f926330cd11f5b85aa122c62a841a555c67f644c9e93a938751ce7b1fa29d5efd3b41dab8c63c698ef8804b96420437948bf90716c995b445e02d38e1af59917228ddb363802b1443d70a6396201d375d4169a8a6527b5d17474820eec9e1f8473e99ffe6fc6787385264c96037845958ef6a27f25daae19884a94905c07f356ee4a5a588be0f9a84ebc4de907038c6304e1c14d47732fa4db1f79c4111ad17d67cf61914f9", 0xd5}, {&(0x7f0000000000)="dfe215d549ee8da465d5cde3bff57e63b13a3eb2adff2d16be3edfb8ae4a7c2cb52e61742da2b756fe37d0d9d6ad6f4262775a2fa89c3c31d462abbf6914aa1700d07d90e6ed89f0956053f2224ebc64de7fe4773438c9bfcceef029e186b45f1357c8b462129cb908", 0x69}, {&(0x7f00000006c0)="b98b0e73cb7ec056a9aa047be3611769dad091634e4b87d7c7614fa5e3f5cdb2fc777abd747509b7c395d4126314dcddbc25cbf712ac087f0d91404c9b15fe717470a47a5db12a5dcab5a5105f341937b1307dda6e869591c6195801229292cbeb9826af5dd9b8469ff97da8dc21b584aed84c3c623d74a0fb13654aa5ff9ac7b7352fdb5aa1fc4d9f0b2bbff789549dd31014813748b2bf11ac83f2184d5e6ecc787e79f32f4b14863ddc187f44da", 0xaf}, {&(0x7f0000000780)="9d3ee953fd2823667640bba06ab26e76f2b25bac7a10f79d7d49e4bff597ed7ef11f40f2d2fefee0a4e027754401cdce5b1f900a4da65f48449692d340209a7fa478dffa5bc6d5a05e28d123e8871f09c4df5340845fd9ff2dd6cbced22da9cf41d6bb54b72930c97f4ec250dbb4c8d39ea6f6ce697b6164f5d58695", 0x7c}], 0x7, 0x6) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:12 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@bcast, @bcast, 0x0, [@null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0xfffffffffffffffc, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4000, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000040)) gettid() [ 973.367735] SELinux: failed to load policy 09:08:12 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) 09:08:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x660003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79) 09:08:12 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) 09:08:12 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@initdev, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xfd2a183bd938fa94) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x802000004, 0x6) pwrite64(r3, &(0x7f0000000140)="7b3d962d41878c5546c004477bab4338d74f5b0cd2d39ba366cdaa01e73d983b11946b2ba77dd3430acfd9df89bcd3129fe296522ad6b188772b3fd26b3d06819bef04d9a4c253d840372a198f6633c85690c23549b93f46c8230a4ccda52fd3be0713346f767e2abc286c9dc445eda53a7c40f47042e4c3f11804cedf82723688dcaecffd63a6f6f7c0787d7eb827a5476c63a2e86b379df69bd8ef6aa0b432aa6f3840a98bae9d5263e3ab2bbd471bc0b063e9d0093b584eb61bc926c64fc77e99005971a17f99d4debdebe3d7287869e718b99e", 0xd5, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f00000004c0)={0x0, 0x6a}) r4 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x802000004, 0x6) connect$unix(r6, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000000c0)={0x0, r5, 0x41c, 0xffff, 0x4, 0x3}) fcntl$setlease(r2, 0x400, 0x1) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r8, 0x9, 0x6) fcntl$setown(r2, 0x8, r8) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:08:12 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000040)={r4}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = gettid() tkill(r5, 0x1000000000013) 09:08:12 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) 09:08:12 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x28b, 0xfe, 0x8, 0x0, 0x0, 0x0, 0x41c1, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffffffffffff, 0x6f57}, 0x0, 0x2020000000000021, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x6) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x3, 'veth0_to_bridge\x00', 0x4}, 0x18) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:08:12 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) msgget$private(0x0, 0x0) 09:08:12 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x802000004, 0x6) fstat(r7, &(0x7f0000000280)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x2, 0xbe9ecbe7241520ef, 0x6, 0x321, 0x4}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0)="4092f16d81c9fab61fbe8c621b4828db6d8eea", 0x13, r3}, 0x68) timer_create(0x0, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x802000004, 0x6) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000300)={@mcast2}, &(0x7f0000000340)=0x14) ioctl$VIDIOC_DBG_S_REGISTER(r9, 0x4038564f, &(0x7f0000000080)={{0x1, @addr=0x5}, 0x8, 0x3, 0x5}) accept$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @local}, &(0x7f00000003c0)=0x1c) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000140)={{0x2, 0x4e20, @local}, {0x306}, 0x40, {0x2, 0x4e20, @empty}, 'bcsf0\x00'}) gettid() 09:08:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x2, 0x2], 0x2) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x495e73c091c1755b, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x802000004, 0x6) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in=@broadcast, 0xfff, 0xeefd, 0x4e24, 0x6, 0xa, 0x0, 0xa0, 0x0, r6, r7}, {0x4, 0x6, 0xfff, 0x81, 0x2f, 0x8, 0xffff, 0x615}, {0x100000001, 0x8ed4, 0xff, 0x7}, 0x9, 0x6e6bb8, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d4, 0x5a}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3507, 0x4, 0x1, 0x1, 0x101, 0x6}}, 0xe8) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r8, 0x9, 0x6) r9 = syz_open_procfs(r8, &(0x7f0000000140)='net/xfrm_stat\x00') ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000500)={0x0, 0x4d90, 0x7, &(0x7f0000000200)=0x18}) fcntl$setpipe(r4, 0x407, 0x101) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0x30) ioctl$sock_SIOCGIFCONF(r10, 0x8912, &(0x7f0000000100)=@buf={0x19, &(0x7f0000000080)="923d87a45606e34997425716f9992d67712b66c52569a112b5"}) 09:08:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x2, 0xffffffff}) 09:08:13 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) msgget$private(0x0, 0x0) 09:08:13 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000004c0)="f21d83", 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2}, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x40140921, &(0x7f0000001200)={0x0, 0x9, 0x0, 0x0}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) syz_open_dev$sg(&(0x7f0000000500)='/dev/sg#\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:08:13 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) msgget$private(0x0, 0x0) 09:08:13 executing program 1: 09:08:13 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) msgget$private(0x0, 0x0) 09:08:13 executing program 4: r0 = socket$inet6(0xa, 0x801, 0xfa) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) connect$llc(r2, &(0x7f0000000040)={0x1a, 0x7, 0xff, 0x9, 0x14, 0x8, @broadcast}, 0x10) r3 = gettid() tkill(r3, 0x1000000000013) 09:08:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) recvfrom$rxrpc(r0, &(0x7f0000001040)=""/4096, 0x1000, 0xeb25bfb7bf6ae570, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x80, @loopback, 0x20}}, 0x24) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:13 executing program 1: r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x104, 0x2}, 0x80, &(0x7f0000000000), 0x2b8, &(0x7f00000002c0), 0x1a0, 0x1a0}, 0x0) 09:08:13 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) msgget$private(0x0, 0x0) 09:08:13 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:08:13 executing program 5: process_vm_writev(0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/111, 0x6f}, {&(0x7f0000000080)=""/57, 0x39}, {&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000001c0)=""/21, 0x15}], 0x5, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/7, 0x7}, {&(0x7f0000000440)=""/166, 0xa6}, {&(0x7f0000000380)=""/26, 0x1a}], 0x4, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:08:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0xffffffffffffffc9) 09:08:13 executing program 1: perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c040002ff0f03000004000002000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) 09:08:13 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) msgget$private(0x0, 0x0) 09:08:13 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) accept$ax25(r0, 0x0, &(0x7f0000000040)) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/189, 0x25c) getdents(0xffffffffffffffff, &(0x7f0000000ea9)=""/375, 0x177) 09:08:13 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) msgget$private(0x0, 0x0) 09:08:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc5400) getpid() getuid() setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) mremap(&(0x7f0000014000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000300)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)) 09:08:14 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) msgget$private(0x0, 0x0) 09:08:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0xfff, @local, 0xfff}}, 0x0, 0xe1, 0x0, "da9790ffb6ea3cb497e07fdfdeb8edc494d803763b04e2bc792f62fdfd947bcf7ae21ca42d2383a3908e12756a4eede58a45373a700b3e16042ef134e6265406749e6a54174f2c12df21f0751c0ada34"}, 0xd8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x2) getdents64(r0, &(0x7f0000000080)=""/176, 0xb0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000240)) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(0x0, r2, 0x0, r1, 0xa6f54f15e4426112) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000200)) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'bridge_slave_1\x00', @random="000000000001"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) gettid() r5 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4200, 0xa6be2e1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r6, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xfdef) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0xffffffff}, 0xc) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r7, 0x6609, 0x0) 09:08:14 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r1, 0x9) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x80}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={r6, 0x0, 0x7, [0x4, 0xc7a, 0x3, 0x1, 0x0, 0x6, 0x1]}, &(0x7f0000000100)=0x16) poll(0x0, 0x0, 0x8000000000000200) r7 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r7, 0x400, 0x1) fcntl$setown(r7, 0x8, 0x0) execveat(r7, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x802000004, 0x6) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000000140)) 09:08:14 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@remote, @rand_addr="3c42ae129a6dcf29651d8dc2feb4af9b", @ipv4={[], [], @rand_addr=0x8}, 0x8, 0xe67, 0x0, 0x700, 0x1, 0x400000, r8}) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:08:14 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@sha1={0x1, "bd3eb821817967d75f0e931da522b1be3b870ba8"}, 0x15, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r2, 0x9, 0x6) timer_create(0x0, &(0x7f0000000140)={0x0, 0x32, 0x6, @tid=r2}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() tkill(r3, 0x1000000000013) 09:08:14 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) msgget$private(0x0, 0x0) [ 976.070549] net_ratelimit: 18 callbacks suppressed [ 976.070563] protocol 88fb is buggy, dev hsr_slave_0 [ 976.081117] protocol 88fb is buggy, dev hsr_slave_1 09:08:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000600)={"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"}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)=""/204, 0xcc}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x802000004, 0xe) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000240)=""/77, 0x4d, 0x3946e416393c7e79, 0x0, 0x0) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x1, @local, 0x4}], 0x1c) connect$inet6(r6, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x72, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000180)={r7, 0x7}, &(0x7f0000000240)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000a00)="8efe80087df8223fccfd523278f9b8e1a90e7f6cd3fbf5ba4ea836810dffa37e8865097fb40af50019d58ce60fef65c2115eba2da36489df365af7c440e1ba40413b09a2c5bbbe81335a9232e6b24d63d66d762ef0e1ad47b97a86881092a7a5dd23eb7db95e349dfc1caff7a37583308c60c3d552156a9bdd188564e9d5ec0014e84147e20266078344282e90ad769cd8517357d152eeb1b2c4fe7bd75110645130f79b8a410d3a86281eca80bd436832f40e3508b4f17f55c4fd9c4f5885c96852f0a0a9b48db1f90b21dadb8709bb53e837a58035bb81a6d3dd14edf2f0f01c19e5460c", 0xfffffffffffffe0f) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r9, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000080", @ANYRES32=0x0], &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x72, &(0x7f0000000000)={r10, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000180)={r10, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000500)=ANY=[@ANYRES32=r10, @ANYBLOB="8e000000fc4e4995b3ea6db4881a63c501ea27174d009941d3bad254ce5a273ae10adcb3ff57209807912ab4a5ffeb6d814ad2ea2d46e00a50b44b92b3b08aa013bce7a98d821e41b0819e414be8d2cbc9805504c2c0038c2815af319c4347cb58840f0501c833bed0434c2f0f0b9b8263dc08a37fd3ccc5918afc274ac82b4af40d27a700000062accacae73d5003090b79"], &(0x7f0000000340)=0x96) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 09:08:15 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) msgget$private(0x0, 0x0) 09:08:15 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) msgget$private(0x0, 0x0) 09:08:15 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) msgget$private(0x0, 0x0) 09:08:15 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) msgget$private(0x0, 0x0) 09:08:15 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) msgget$private(0x0, 0x0) 09:08:15 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f0002000000000000006768"}, 0x3a) msgget$private(0x0, 0x0) 09:08:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:08:15 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000040)) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:08:15 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r1, 0x0, 0x6c, &(0x7f0000000040)={@loopback, @multicast1}, &(0x7f0000000080)=0x8) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f00000000c0)={'vxcan1\x00'}) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() [ 976.950172] protocol 88fb is buggy, dev hsr_slave_0 [ 976.957951] protocol 88fb is buggy, dev hsr_slave_1 [ 976.963107] protocol 88fb is buggy, dev hsr_slave_0 [ 976.968223] protocol 88fb is buggy, dev hsr_slave_1 [ 977.270148] protocol 88fb is buggy, dev hsr_slave_0 [ 977.275672] protocol 88fb is buggy, dev hsr_slave_1 [ 977.750413] protocol 88fb is buggy, dev hsr_slave_0 [ 977.755589] protocol 88fb is buggy, dev hsr_slave_1 09:08:17 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) write$P9_RSTAT(r0, &(0x7f0000000640)={0x233, 0x7d, 0x1, {0x0, 0x22c, 0x4000, 0x1, {0x4, 0x4, 0x7}, 0x40000, 0x1ff, 0x8, 0xfffffffffffffff7, 0xf9, '\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0xf9, '\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x1, '-', 0x6, 'wlan1>'}}, 0x233) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f0000000040), &(0x7f0000000000), 0x0) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xfffffffffffffffa, 0x4840) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000140)={0x6, 0x401, 0x4, 0x0, 0x5, 0x89ec}) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() tkill(r3, 0x1000000000013) 09:08:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) write$capi20_data(0xffffffffffffffff, &(0x7f0000000500)={{0x10, 0x877d, 0x44, 0x82, 0x8000}, 0xef, "7e0ba3511460cb7564bca299ddd57afdc26442d764b9d43ac33b11731c2a013e547897dceac6d89ebfa5c6045adecfc4194dfa452ff562d8ff85a8819eb419e50ea3d7b25a55a21d222fbfc8eb393fa4f85af7314c88e9c98a4fab8563a8255815d22fd594c713512cde56bd1c161f25ac697555679838d9bb7950061318829ea77243af77656849ae13596aa26f7856f142ad32e52ef726095ec5784c4fe1c1d0621c0b4ed84de257fe0fd338a0a2d6ecfda0bcb9b67ba2093b494eec60a032a1ee8de58ea95405eee39654227474ebe61be63d592d534d3d563dff9113b791964159f30e39f44d767b332aa7d613"}, 0x101) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x57, 0xfd7}) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000040)=0x60) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000001c0)=""/99, &(0x7f0000000240)=0x63) 09:08:17 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) msgget$private(0x0, 0x0) 09:08:17 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) gettid() 09:08:17 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff84, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:08:17 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000000)={0x42, 0x3, 0x4, 0x4}) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() [ 979.037494] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) 09:08:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000140)=""/189, 0xbd) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 979.087937] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 979.112160] CPU: 1 PID: 10850 Comm: syz-executor.2 Not tainted 4.14.150 #0 [ 979.119228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 979.128598] Call Trace: [ 979.131211] dump_stack+0x138/0x197 [ 979.134854] warn_alloc.cold+0x96/0x1af [ 979.138839] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 979.143699] ? lock_downgrade+0x740/0x740 [ 979.147881] ? avc_has_perm+0x2df/0x4b0 [ 979.151873] __vmalloc_node_range+0x3c3/0x6a0 [ 979.156383] ? trace_hardirqs_on+0x10/0x10 [ 979.160758] vmalloc+0x46/0x50 [ 979.163966] ? sel_write_load+0x1a0/0x1050 [ 979.168212] sel_write_load+0x1a0/0x1050 [ 979.172280] ? save_trace+0x290/0x290 [ 979.176092] ? sel_read_bool+0x240/0x240 [ 979.180159] ? trace_hardirqs_on+0x10/0x10 [ 979.184408] ? save_trace+0x290/0x290 [ 979.188229] __vfs_write+0x105/0x6b0 [ 979.192033] ? __lock_is_held+0xb6/0x140 [ 979.196274] ? sel_read_bool+0x240/0x240 [ 979.200340] ? kernel_read+0x120/0x120 [ 979.204233] ? __lock_is_held+0xb6/0x140 [ 979.208302] ? check_preemption_disabled+0x3c/0x250 [ 979.213592] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 979.219056] ? rcu_read_lock_sched_held+0x110/0x130 [ 979.224090] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 979.228857] ? __sb_start_write+0x153/0x2f0 [ 979.233185] vfs_write+0x198/0x500 09:08:18 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r2, &(0x7f0000000300)="7f68b571b21515f308a7359d8cf4c1c7d5bb9363ddc731829f82ed75fc541e5d374fef27dc1f2d79ba5cdb6052e47f617161d513cd0644c15b735a1d04f9702dc738a03a90e5ce70a60016f59f710313747d6a924eb604ee58e27318134ae4c7785f4a73fc65a442f5cfcf85c67df7f6c93abe0c2346269e9e6088d6232a238a9a3e1f7959b9300c5288fc5e1e104150928eb57ed94db37ddf7140ce59765234386bea24d06842c5e05c2771b1c16a767e4be3ae10c5fa33208f9fa335ec2955", &(0x7f00000003c0)=""/181}, 0x20) ptrace$cont(0x9, r0, 0x9, 0x6) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r3, 0x9, 0x6) getpgrp(0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8002, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000140)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r5 = getpid() openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/validatetrans\x00', 0x1, 0x0) sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000180)={0x0, 0x0, 'client0\x00', 0xffffffff80000000, "b9977827e4ff4efa", "5f9560eccb3f4306694773c589294d03fbe47fd5bd9f28fbc3a49427fc21f1e7", 0x2, 0x80000001}) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000240)=0x7) ptrace$cont(0x9, r5, 0x9, 0x6) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0xfffffffffffffe5f, 0x2, 0x0, 0x0, 0x400005}, 0x0) ptrace$cont(0x9, r6, 0x9, 0x6) r7 = syz_open_procfs(r6, &(0x7f0000000b80)='c\x01us\x01\x00\x00\x00\x00\x00\x00\x00@n\xdc\f\xd2\x92;\x1bD\xf1\x83\xabz8\xdb\xdf\xc0\xf4\xd4\x87\xb3\xb8\x11\\\x1fo\xdajJo\xfd\x0e\xfe}\xa2\x8eX\vS\xb7\x01\x1cb\xae\xb2f\x14v\x93\xf0\xdb\xd3\f2vz\x1c\xd9C\xd4zSf\x00\x00\x00\x00\x00\x00\x00\x01kJ\xed\xbb\xfe\x84F\xb8#\xb2\xb6\x87\x8cPC\xd6\x96\xb06\x96\xaf\xff~8\xa7\x91q\xa5\xa0L\xd6\xc8\x15,\xc0\xfarW\xc1\xa7\b$\xca}\xda\xb3I\tz\xf6\x92\x04+p\xfc\xb7\x900m\x87\bo\xf5\xe4\x10(\xadN\x91\xcc\x1e\x95\xa6 3\xe2\x92\xc9k\x85\x96\xd3\xb4u\xc8\xe6\xe1G],\x06H\xc25\x01\xaflm\x11\x8a\x97\xab\xff7\xe7\x90\x04\xafZuG\x06\x00\x96\xdf\x1c;\xb5\xd0\x8a\xfa\xe4w\xe1UT\x8e<\n\vG\x12F=\x898B\'[\xcb\xe29\b\xb1z\x10!\xe7\xd0w\x12\x854W\xca\x96;\x18\xbd\x12_\xf5H+\xac\x85V\xe3\xeb\xaaHm\xf6\x86\xde\x85\x00\r\x0f\v\xbb\xa6\xb27\xcfY \x9e\xc0\x04\x00\x00\x00\x00\x00\x00\x00\xdc\t\x8c\xc4\xa8P\"\xeaEy\xef\xf6\xba\x81\x10=?\xe13\x87Q\xd0\xbe\x11=\x02\x00\x00\x00\xe2Jhd\xedH6\xde8\xeaS\xe4\xb5\xb1\xbe\x06\xa9U\xe2\x95~\xd6\xf7\xda\x13\xca\x90^\x9a\x8d\b\xfd&\xbbS\xdb&\xd0\xdf\xe8_|H:\xd9\xcd\x00=\xe45sOg&\xd7\xcd\x90c\xff\xc7\x19\xf4\xe6\xb0/`Em\x9b\x12Z\x8f]`\x18\x8a\xe3\x1e\xba\xb8K\f\x11\xd6\xbd\xe2\x00\xc8\xf1NON{^\xda\xd0n\xf0\xbf\xa0\xf5v.\xd9\xa8L\x00\xeeu\xac|\xf3\xf4\xd6Y\x00\x00\x00\x00\x00\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x20000, 0x100) getdents64(r7, &(0x7f0000000080)=""/189, 0x25c) getdents(r7, &(0x7f0000000ea9)=""/375, 0x177) [ 979.236733] SyS_write+0xfd/0x230 [ 979.239230] QAT: Invalid ioctl [ 979.240280] ? SyS_read+0x230/0x230 [ 979.240340] ? do_syscall_64+0x53/0x640 [ 979.240351] ? SyS_read+0x230/0x230 [ 979.240363] do_syscall_64+0x1e8/0x640 [ 979.240373] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 979.240390] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 979.240400] RIP: 0033:0x459ef9 [ 979.240405] RSP: 002b:00007fbf7f569c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 979.240416] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 979.240422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 979.240430] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 979.244334] QAT: Invalid ioctl [ 979.247228] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf7f56a6d4 [ 979.247235] R13: 00000000004ca5f9 R14: 00000000004e2528 R15: 00000000ffffffff [ 979.266375] QAT: Invalid ioctl [ 979.331559] Mem-Info: 09:08:18 executing program 3: gettid() r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r0, 0x9, 0x6) r1 = syz_open_procfs(r0, &(0x7f0000000180)='children\x00') getdents64(r1, &(0x7f0000000080)=""/189, 0x25c) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x8, 0xff, 0x3}) getdents(r1, &(0x7f0000000ea9)=""/375, 0x177) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x7ff) [ 979.334160] active_anon:854064 inactive_anon:8215 isolated_anon:0 [ 979.334160] active_file:13231 inactive_file:7348 isolated_file:0 [ 979.334160] unevictable:512 dirty:246 writeback:0 unstable:0 [ 979.334160] slab_reclaimable:18672 slab_unreclaimable:123314 [ 979.334160] mapped:60700 shmem:4152 pagetables:36985 bounce:0 [ 979.334160] free:449592 free_pcp:501 free_cma:0 [ 979.377377] Node 0 active_anon:1519924kB inactive_anon:21384kB active_file:308kB inactive_file:1952kB unevictable:2048kB isolated(anon):0kB isolated(file):0kB mapped:209120kB dirty:196kB writeback:0kB shmem:3076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 804864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 979.429315] Node 1 active_anon:1896632kB inactive_anon:11476kB active_file:52616kB inactive_file:27440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:33680kB dirty:788kB writeback:0kB shmem:13532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 09:08:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000140)=""/375, 0x177) 09:08:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1, 0x0, 0xd01}, 0x3f00) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) [ 979.479430] Node 0 DMA free:13292kB min:216kB low:268kB high:320kB active_anon:2288kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 09:08:18 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x80000001, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r2, 0x9, 0x6) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/rt_acct\x00') ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000040)) [ 979.555029] lowmem_reserve[]: 0 2580 2580 2580 [ 979.560762] Node 0 DMA32 free:199276kB min:36468kB low:45584kB high:54700kB active_anon:1517736kB inactive_anon:21384kB active_file:308kB inactive_file:1952kB unevictable:2048kB writepending:196kB present:3129332kB managed:2644884kB mlocked:2048kB kernel_stack:19456kB pagetables:53492kB bounce:0kB free_pcp:1028kB local_pcp:652kB free_cma:0kB [ 979.624714] lowmem_reserve[]: 0 0 0 0 [ 979.639709] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 979.681158] lowmem_reserve[]: 0 0 0 0 [ 979.685183] Node 1 Normal free:1583732kB min:53420kB low:66772kB high:80124kB active_anon:1896632kB inactive_anon:11476kB active_file:52616kB inactive_file:27440kB unevictable:0kB writepending:788kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:32672kB pagetables:94268kB bounce:0kB free_pcp:1312kB local_pcp:672kB free_cma:0kB [ 979.744803] lowmem_reserve[]: 0 0 0 0 [ 979.748850] Node 0 DMA: 19*4kB (UME) 18*8kB (UME) 21*16kB (UM) 16*32kB (UM) 11*64kB (UME) 8*128kB (UME) 3*256kB (UE) 1*512kB (E) 3*1024kB (UME) 3*2048kB (UEH) 0*4096kB = 13292kB [ 979.804320] Node 0 DMA32: 252*4kB (UMEH) 845*8kB (UMEH) 4835*16kB (UMEH) 1791*32kB (UMEH) 479*64kB (UMH) 82*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (H) = 187688kB [ 979.825230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 979.836921] Node 1 Normal: 21301*4kB (UME) 17527*8kB (UME) 11359*16kB (UME) 6784*32kB (UME) 2849*64kB (UME) 904*128kB (UME) 215*256kB (UME) 61*512kB (UME) 24*1024kB (UME) 4*2048kB (ME) 131*4096kB (M) = 1577916kB [ 979.860689] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 979.869581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 979.883071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 979.893945] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 979.905619] 24726 total pagecache pages [ 979.909621] 0 pages in swap cache [ 979.916005] Swap cache stats: add 0, delete 0, find 0/0 [ 979.924446] Free swap = 0kB [ 979.927481] Total swap = 0kB [ 979.932067] 1965979 pages RAM [ 979.935322] 0 pages HighMem/MovableOnly [ 979.939917] 333229 pages reserved [ 979.946458] 0 pages cma reserved [ 981.110148] net_ratelimit: 12 callbacks suppressed [ 981.110156] protocol 88fb is buggy, dev hsr_slave_0 [ 981.120255] protocol 88fb is buggy, dev hsr_slave_1 [ 981.126267] protocol 88fb is buggy, dev hsr_slave_0 [ 981.131386] protocol 88fb is buggy, dev hsr_slave_1 [ 981.440146] protocol 88fb is buggy, dev hsr_slave_0 [ 981.445351] protocol 88fb is buggy, dev hsr_slave_1 [ 981.910202] protocol 88fb is buggy, dev hsr_slave_0 [ 981.915427] protocol 88fb is buggy, dev hsr_slave_1 09:08:21 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x100, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz1\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004804}, 0x84008) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:08:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x802000004, 0x6) fcntl$setsig(r4, 0xa, 0x2) splice(r1, 0x0, r3, 0x0, 0x802000004, 0x6) getdents(r3, &(0x7f0000000140)=""/372, 0xfffffffffffffd1e) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x1, 0x4) 09:08:21 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) msgget$private(0x0, 0x0) 09:08:21 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13194308efa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:08:21 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@lsrr={0x83, 0x7, 0x48, [@remote]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000013) 09:08:21 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7a, 0xa, 0xff00}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x6, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) [ 982.182035] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 982.261906] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 982.292207] CPU: 0 PID: 10931 Comm: syz-executor.2 Not tainted 4.14.150 #0 [ 982.299281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.308644] Call Trace: [ 982.311249] dump_stack+0x138/0x197 [ 982.314896] warn_alloc.cold+0x96/0x1af [ 982.318876] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 982.323716] ? lock_downgrade+0x740/0x740 [ 982.327859] ? avc_has_perm+0x2df/0x4b0 [ 982.331827] __vmalloc_node_range+0x3c3/0x6a0 [ 982.336314] ? trace_hardirqs_on+0x10/0x10 [ 982.340627] vmalloc+0x46/0x50 [ 982.343815] ? sel_write_load+0x1a0/0x1050 [ 982.348036] sel_write_load+0x1a0/0x1050 [ 982.352082] ? save_trace+0x290/0x290 [ 982.355870] ? sel_read_bool+0x240/0x240 [ 982.359914] ? trace_hardirqs_on+0x10/0x10 [ 982.364130] ? save_trace+0x290/0x290 [ 982.367936] __vfs_write+0x105/0x6b0 [ 982.371719] ? __lock_is_held+0xb6/0x140 [ 982.375764] ? sel_read_bool+0x240/0x240 [ 982.379810] ? kernel_read+0x120/0x120 [ 982.383681] ? __lock_is_held+0xb6/0x140 [ 982.387817] ? check_preemption_disabled+0x3c/0x250 [ 982.392839] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 982.398283] ? rcu_read_lock_sched_held+0x110/0x130 [ 982.403283] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 982.408020] ? __sb_start_write+0x153/0x2f0 [ 982.412336] vfs_write+0x198/0x500 [ 982.415879] SyS_write+0xfd/0x230 [ 982.419318] ? SyS_read+0x230/0x230 [ 982.422952] ? do_syscall_64+0x53/0x640 [ 982.426932] ? SyS_read+0x230/0x230 [ 982.430563] do_syscall_64+0x1e8/0x640 [ 982.434442] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 982.439275] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 982.444464] RIP: 0033:0x459ef9 [ 982.447742] RSP: 002b:00007fbf7f569c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 982.455537] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 09:08:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x802000004, 0x6) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000540)={0x3, "248fb1fa473a155d3944e57b1d51fc074d4a9a36b1092ac13c6831c801a1be41", 0x2}) ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f0000000140)=""/248) splice(r1, 0x0, r3, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x802000004, 0x6) openat$cgroup_ro(r8, &(0x7f0000000500)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r10, 0x4040ae9e, &(0x7f0000000040)={0x6100000000000000, 0x1000, 0x5, 0xd2b0348d4ac6f303, 0xf}) splice(r7, 0x0, r8, 0x0, 0x802000004, 0x6) ioctl$LOOP_SET_FD(r3, 0x4c00, r7) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r11, 0x0, 0x802000004, 0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) r12 = open(&(0x7f0000000240)='./file0\x00', 0x20000, 0xa0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r13, 0x0, r14, 0x0, 0x802000004, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r14, 0x84, 0x74, &(0x7f00000002c0)=""/59, &(0x7f0000000340)=0x3b) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000300)={0x7, 0x1, 0xfd}) setsockopt$inet6_opts(r12, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="8a1740d2410aeef3"], 0x8) getdents(r5, &(0x7f0000000ea9)=""/375, 0x224) [ 982.462800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 982.470057] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 982.477313] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf7f56a6d4 [ 982.486317] R13: 00000000004ca5f9 R14: 00000000004e2528 R15: 00000000ffffffff [ 982.500208] protocol 88fb is buggy, dev hsr_slave_0 [ 982.504442] Mem-Info: [ 982.505346] protocol 88fb is buggy, dev hsr_slave_1 09:08:21 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, r0, 0x0) 09:08:21 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000)=0x2, 0x4) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() [ 982.507819] active_anon:855169 inactive_anon:8217 isolated_anon:0 [ 982.507819] active_file:13232 inactive_file:7357 isolated_file:0 [ 982.507819] unevictable:512 dirty:261 writeback:0 unstable:0 [ 982.507819] slab_reclaimable:18089 slab_unreclaimable:134431 [ 982.507819] mapped:60700 shmem:4152 pagetables:37000 bounce:0 [ 982.507819] free:437930 free_pcp:521 free_cma:0 09:08:21 executing program 3: getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/189, 0x25c) getdents(0xffffffffffffffff, &(0x7f0000000ea9)=""/375, 0x177) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000), 0x4) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x81, 0x4000) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x1, 0x200000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x802000004, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) [ 982.666617] Node 0 active_anon:1525244kB inactive_anon:21392kB active_file:312kB inactive_file:1988kB unevictable:2048kB isolated(anon):0kB isolated(file):0kB mapped:209120kB dirty:236kB writeback:0kB shmem:3076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 804864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 982.740099] Node 1 active_anon:1896632kB inactive_anon:11476kB active_file:52616kB inactive_file:27440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:33780kB dirty:808kB writeback:0kB shmem:13532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 09:08:21 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x7e, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000040)=""/126}, &(0x7f00000000c0)=0x78) set_thread_area(&(0x7f00000001c0)={0x200, 0x1000, 0x4000, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1}) flistxattr(r0, &(0x7f0000000200)=""/86, 0x56) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() semget$private(0x0, 0x3, 0x30) [ 982.810324] Node 0 DMA free:12788kB min:216kB low:268kB high:320kB active_anon:2288kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 09:08:21 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffff7ffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = gettid() tkill(r4, 0x1000000000013) 09:08:21 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffffffffffffffc7, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="05000000000000000300002008000100753332002000020008000300000000e1140005000000001f00000000000800c9e6000000"], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r5, &(0x7f0000000080)=""/189, 0x25c) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x4) mknodat(r6, &(0x7f0000000040)='./file0\x00', 0x2, 0x2) getdents(r5, &(0x7f0000000140)=""/375, 0x177) [ 982.870390] lowmem_reserve[]: 0 2580 2580 2580 [ 982.875050] Node 0 DMA32 free:207880kB min:36468kB low:45584kB high:54700kB active_anon:1523256kB inactive_anon:21392kB active_file:312kB inactive_file:1988kB unevictable:2048kB writepending:236kB present:3129332kB managed:2644884kB mlocked:2048kB kernel_stack:19392kB pagetables:54144kB bounce:0kB free_pcp:636kB local_pcp:424kB free_cma:0kB 09:08:21 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) tee(0xffffffffffffffff, r0, 0x0, 0x0) [ 982.993910] lowmem_reserve[]: 0 0 0 0 [ 982.997872] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 983.025727] lowmem_reserve[]: 0 0 0 0 [ 983.029720] Node 1 Normal free:1527872kB min:53420kB low:66772kB high:80124kB active_anon:1896632kB inactive_anon:11476kB active_file:52616kB inactive_file:27440kB unevictable:0kB writepending:808kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:32672kB pagetables:94268kB bounce:0kB free_pcp:1400kB local_pcp:692kB free_cma:0kB [ 983.107672] lowmem_reserve[]: 0 0 0 0 [ 983.118681] Node 0 DMA: 19*4kB (UME) 17*8kB (UME) 20*16kB (UM) 17*32kB (UM) 11*64kB (UME) 8*128kB (UME) 1*256kB (E) 1*512kB (E) 3*1024kB (UME) 3*2048kB (UEH) 0*4096kB = 12788kB [ 983.177705] Node 0 DMA32: 868*4kB (UMEH) 2406*8kB (UMEH) 4989*16kB (UMEH) 1797*32kB (UMEH) 481*64kB (UMH) 83*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (H) = 205552kB [ 983.202937] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 983.229184] Node 1 Normal: 21322*4kB (UME) 17512*8kB (UME) 11363*16kB (UME) 6790*32kB (UME) 2860*64kB (UME) 906*128kB (UME) 217*256kB (UME) 52*512kB (UME) 22*1024kB (UME) 4*2048kB (ME) 120*4096kB (M) = 1527896kB [ 983.256375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.266336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 983.283617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.296680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 983.313808] 24743 total pagecache pages [ 983.318405] 0 pages in swap cache [ 983.325893] Swap cache stats: add 0, delete 0, find 0/0 09:08:22 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) msgget$private(0x0, 0x0) 09:08:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) write$P9_RFSYNC(r0, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) r3 = socket$alg(0x26, 0x5, 0x0) r4 = semget(0x3, 0x0, 0x66c) semctl$IPC_INFO(r4, 0x26a2d9f157fb8dd2, 0x3, &(0x7f0000001040)=""/4096) ioctl$sock_proto_private(r3, 0x89e6, &(0x7f0000000040)="a74234865a012c6b1947b50daf63d753eafd8443a558026d78bb013bc2d43502738f287a229d58ea") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x802000004, 0x6) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x9, [0x1, 0x401, 0x7, 0x7, 0x8, 0x8, 0x5, 0x1, 0x6]}, &(0x7f00000001c0)=0x16) r7 = accept4$alg(r6, 0x0, 0x0, 0x800) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000140)=0x3f, 0x63) getdents(r2, &(0x7f0000000ea9)=""/375, 0x177) 09:08:22 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0xffffffffffffffbe, 0x0, 0x692, 0x0, 0xfffffffffffffc79}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) [ 983.335991] Free swap = 0kB [ 983.339332] Total swap = 0kB [ 983.346410] 1965979 pages RAM [ 983.349842] 0 pages HighMem/MovableOnly [ 983.357840] 333229 pages reserved [ 983.364694] 0 pages cma reserved 09:08:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34N[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:22 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = open(&(0x7f0000000040)='./file0\x00', 0x75c01, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f0000000000)) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() [ 983.517741] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 983.545330] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 983.599917] CPU: 0 PID: 11003 Comm: syz-executor.2 Not tainted 4.14.150 #0 [ 983.607000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.616377] Call Trace: [ 983.618983] dump_stack+0x138/0x197 [ 983.623417] warn_alloc.cold+0x96/0x1af [ 983.627405] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 983.632279] ? lock_downgrade+0x740/0x740 [ 983.636468] ? avc_has_perm+0x2df/0x4b0 [ 983.640471] __vmalloc_node_range+0x3c3/0x6a0 [ 983.645258] ? trace_hardirqs_on+0x10/0x10 09:08:22 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x37) ptrace$cont(0x18, r1, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x116}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 983.649519] vmalloc+0x46/0x50 [ 983.652726] ? sel_write_load+0x1a0/0x1050 [ 983.656974] sel_write_load+0x1a0/0x1050 [ 983.661041] ? save_trace+0x290/0x290 [ 983.664857] ? sel_read_bool+0x240/0x240 [ 983.668932] ? trace_hardirqs_on+0x10/0x10 [ 983.673183] ? save_trace+0x290/0x290 [ 983.677003] __vfs_write+0x105/0x6b0 [ 983.680726] ? __lock_is_held+0xb6/0x140 [ 983.684794] ? sel_read_bool+0x240/0x240 [ 983.689034] ? kernel_read+0x120/0x120 [ 983.692927] ? __lock_is_held+0xb6/0x140 [ 983.696993] ? check_preemption_disabled+0x3c/0x250 [ 983.702010] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 983.702027] ? rcu_read_lock_sched_held+0x110/0x130 [ 983.712460] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 983.712472] ? __sb_start_write+0x153/0x2f0 [ 983.712485] vfs_write+0x198/0x500 [ 983.712499] SyS_write+0xfd/0x230 [ 983.712512] ? SyS_read+0x230/0x230 [ 983.732846] ? do_syscall_64+0x53/0x640 [ 983.736839] ? SyS_read+0x230/0x230 [ 983.740480] do_syscall_64+0x1e8/0x640 [ 983.744371] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 983.749243] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 983.755226] RIP: 0033:0x459ef9 [ 983.758416] RSP: 002b:00007fbf7f569c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 983.766312] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 983.773843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 983.781393] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 983.788668] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf7f56a6d4 09:08:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)=0x1) [ 983.795966] R13: 00000000004ca5f9 R14: 00000000004e2528 R15: 00000000ffffffff 09:08:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000140)) 09:08:22 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:08:22 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 983.954254] Mem-Info: 09:08:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x802000004, 0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x5, 0x4}) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="280012000000010076657468000000001800f35b0343f567c9c8aebb6f5378284e02001400012000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000001c0)={@empty, @dev={0xfe, 0x80, [], 0x1f}, @local, 0x2, 0x4, 0x6, 0x100, 0xffffffff, 0x40000000, r7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r8 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r8, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r8, 0x8, 0x0) execveat(r8, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r9, 0x9, 0x6) timer_create(0x6, &(0x7f0000000040)={0x0, 0x3d, 0x0, @tid=r9}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r10, 0x0, &(0x7f0000000300)={{0x77359400}, {r11, r12+10000000}}, 0x0) r13 = gettid() tkill(r13, 0x1000000000013) [ 983.982565] active_anon:856557 inactive_anon:8217 isolated_anon:0 [ 983.982565] active_file:13232 inactive_file:7367 isolated_file:0 [ 983.982565] unevictable:512 dirty:278 writeback:0 unstable:0 [ 983.982565] slab_reclaimable:18078 slab_unreclaimable:135322 [ 983.982565] mapped:60725 shmem:4152 pagetables:37151 bounce:0 [ 983.982565] free:435401 free_pcp:680 free_cma:0 [ 984.070742] input: syz1 as /devices/virtual/input/input15 [ 984.095317] Node 0 active_anon:1530428kB inactive_anon:21392kB active_file:328kB inactive_file:2056kB unevictable:2048kB isolated(anon):0kB isolated(file):0kB mapped:209120kB dirty:320kB writeback:0kB shmem:3080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 804864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 984.126150] Node 1 active_anon:1896632kB inactive_anon:11476kB active_file:52616kB inactive_file:27440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:33764kB dirty:840kB writeback:0kB shmem:13532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 984.129372] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 984.158078] Node 0 DMA free:12788kB min:216kB low:268kB high:320kB active_anon:2288kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 984.193653] lowmem_reserve[]: 0 2580 2580 2580 09:08:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x101200, 0x0) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 984.207498] Node 0 DMA32 free:199404kB min:36468kB low:45584kB high:54700kB active_anon:1528940kB inactive_anon:21392kB active_file:328kB inactive_file:2056kB unevictable:2048kB writepending:320kB present:3129332kB managed:2644884kB mlocked:2048kB kernel_stack:19936kB pagetables:54612kB bounce:0kB free_pcp:820kB local_pcp:348kB free_cma:0kB [ 984.253509] lowmem_reserve[]: 0 0 0 0 [ 984.259184] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 984.306595] lowmem_reserve[]: 0 0 0 0 [ 984.314075] Node 1 Normal free:1527896kB min:53420kB low:66772kB high:80124kB active_anon:1896632kB inactive_anon:11476kB active_file:52616kB inactive_file:27440kB unevictable:0kB writepending:840kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:32672kB pagetables:94268kB bounce:0kB free_pcp:1400kB local_pcp:708kB free_cma:0kB [ 984.357640] lowmem_reserve[]: 0 0 0 0 [ 984.362052] Node 0 DMA: 19*4kB (UME) 17*8kB (UME) 20*16kB (UM) 17*32kB (UM) 11*64kB (UME) 8*128kB (UME) 1*256kB (E) 1*512kB (E) 3*1024kB (UME) 3*2048kB (UEH) 0*4096kB = 12788kB [ 984.380537] Node 0 DMA32: 684*4kB (UMEH) 1879*8kB (UEH) 4797*16kB (UMEH) 1799*32kB (UMEH) 481*64kB (UMH) 85*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (H) = 197848kB [ 984.397423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 984.416508] Node 1 Normal: 21322*4kB (UME) 17512*8kB (UME) 11363*16kB (UME) 6790*32kB (UME) 2860*64kB (UME) 906*128kB (UME) 217*256kB (UME) 52*512kB (UME) 22*1024kB (UME) 4*2048kB (ME) 120*4096kB (M) = 1527896kB [ 984.436928] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 984.470708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 984.479390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 984.489704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 984.498352] 24757 total pagecache pages [ 984.502751] 0 pages in swap cache [ 984.506229] Swap cache stats: add 0, delete 0, find 0/0 [ 984.511911] Free swap = 0kB [ 984.516680] Total swap = 0kB 09:08:23 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux'}, 0x10) msgget$private(0x0, 0x0) 09:08:23 executing program 1: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) semop(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) pipe(0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:08:23 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x20000000003, 0x20000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000040)='/devG\xf9{\x99\x1b\x87\xe8\xd3', 0xc) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/189, 0x25c) r3 = geteuid() setreuid(r3, 0x0) r4 = geteuid() setreuid(r4, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, r4, r5) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x100) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0xffff}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}, 0x2}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x6, @mcast1, 0xffff}], 0x94) getdents(0xffffffffffffffff, &(0x7f0000000ea9)=""/375, 0x177) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 09:08:23 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100)) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000040)={0x0, @reserved}) [ 984.519685] 1965979 pages RAM [ 984.523188] 0 pages HighMem/MovableOnly [ 984.527196] 333229 pages reserved [ 984.530981] 0 pages cma reserved 09:08:23 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r0, 0x9, 0x6) r1 = syz_open_procfs(r0, &(0x7f0000000500)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r1, &(0x7f0000000080)=""/189, 0x25c) getdents(r1, &(0x7f0000000ea9)=""/375, 0x177) [ 984.613025] audit: type=1400 audit(1571994503.496:301): avc: denied { map } for pid=11074 comm="syz-executor.1" path="/dev/usbmon0" dev="devtmpfs" ino=15427 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usbmon_device_t:s0 tclass=chr_file permissive=1 [ 984.613284] [ 984.640384] ====================================================== [ 984.646694] WARNING: possible circular locking dependency detected [ 984.653008] 4.14.150 #0 Not tainted [ 984.656642] ------------------------------------------------------ [ 984.663134] syz-executor.1/11078 is trying to acquire lock: [ 984.668831] (&rp->fetch_lock){+.+.}, at: [] mon_bin_vma_fault+0x6f/0x280 [ 984.677377] [ 984.677377] but task is already holding lock: [ 984.683427] (&mm->mmap_sem){++++}, at: [] __mm_populate+0x1e5/0x2c0 [ 984.691491] [ 984.691491] which lock already depends on the new lock. [ 984.691491] [ 984.693406] kobject: 'loop3' (ffff8880a4a249e0): kobject_uevent_env [ 984.699792] 09:08:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) getdents(r2, &(0x7f0000000000)=""/72, 0x48) [ 984.699792] the existing dependency chain (in reverse order) is: [ 984.699796] [ 984.699796] -> #1 (&mm->mmap_sem){++++}: [ 984.699821] lock_acquire+0x16f/0x430 [ 984.699830] __might_fault+0x143/0x1d0 [ 984.699843] _copy_to_user+0x2c/0xd0 [ 984.718188] kobject: 'loop3' (ffff8880a4a249e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 984.719447] mon_bin_get_event+0x10a/0x430 [ 984.719457] mon_bin_ioctl+0x9b4/0xb50 [ 984.750946] do_vfs_ioctl+0x7ae/0x1060 [ 984.755353] SyS_ioctl+0x8f/0xc0 [ 984.759246] do_syscall_64+0x1e8/0x640 09:08:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00', &(0x7f0000000140)=""/42, 0x2a) 09:08:23 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10000, 0x0) execveat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1500) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() [ 984.763656] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 984.769357] [ 984.769357] -> #0 (&rp->fetch_lock){+.+.}: [ 984.773540] kobject: 'loop3' (ffff8880a4a249e0): kobject_uevent_env [ 984.775110] __lock_acquire+0x2cb3/0x4620 [ 984.775118] lock_acquire+0x16f/0x430 [ 984.775131] __mutex_lock+0xe8/0x1470 [ 984.775137] mutex_lock_nested+0x16/0x20 [ 984.775150] mon_bin_vma_fault+0x6f/0x280 [ 984.782200] kobject: 'loop3' (ffff8880a4a249e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 984.786209] __do_fault+0x104/0x390 [ 984.786217] __handle_mm_fault+0xde1/0x3470 [ 984.786223] handle_mm_fault+0x293/0x7c0 [ 984.786231] __get_user_pages+0x465/0x1220 [ 984.786239] populate_vma_page_range+0x18e/0x230 [ 984.786246] __mm_populate+0x198/0x2c0 [ 984.786254] vm_mmap_pgoff+0x1be/0x1d0 [ 984.786262] SyS_mmap_pgoff+0x3ca/0x520 [ 984.786269] SyS_mmap+0x16/0x20 [ 984.786276] do_syscall_64+0x1e8/0x640 09:08:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000040)={0x6, 0x40}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000300)={0x0, 0x60b, 0x20, &(0x7f00000002c0)=0x7}) r4 = socket(0x1465a7b4021f9258, 0x803, 0x40) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINK_NETNSID={0x8}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x4000000) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', r5}) fremovexattr(r0, &(0x7f0000000240)=@random={'os2.', 'vcan0\x00'}) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000500)={0x80, 0x5, 0x4, 0x20180010, {}, {0x5, 0x8, 0x5, 0xff, 0x80, 0x1f, "e348b0a5"}, 0x0, 0x2, @offset=0xfffffffc, 0x4}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 984.786286] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 984.786288] [ 984.786288] other info that might help us debug this: [ 984.786288] [ 984.786291] Possible unsafe locking scenario: [ 984.786291] [ 984.786293] CPU0 CPU1 [ 984.786294] ---- ---- [ 984.786296] lock(&mm->mmap_sem); [ 984.786302] lock(&rp->fetch_lock); [ 984.786307] lock(&mm->mmap_sem); [ 984.786311] lock(&rp->fetch_lock); [ 984.786315] [ 984.786315] *** DEADLOCK *** [ 984.786315] [ 984.786320] 1 lock held by syz-executor.1/11078: [ 984.786322] #0: (&mm->mmap_sem){++++}, at: [] __mm_populate+0x1e5/0x2c0 [ 984.786338] [ 984.786338] stack backtrace: [ 984.819905] kobject: 'loop0' (ffff888091fd17a0): kobject_uevent_env [ 984.822544] CPU: 1 PID: 11078 Comm: syz-executor.1 Not tainted 4.14.150 #0 [ 984.822549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.822551] Call Trace: [ 984.822565] dump_stack+0x138/0x197 [ 984.822575] ? vprintk_func+0x65/0x159 09:08:23 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux'}, 0x10) msgget$private(0x0, 0x0) [ 984.822588] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 984.829378] kobject: 'loop0' (ffff888091fd17a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 984.831987] __lock_acquire+0x2cb3/0x4620 [ 984.831996] ? trace_hardirqs_on_caller+0x400/0x590 [ 984.832006] ? trace_hardirqs_on+0x10/0x10 [ 984.832018] ? kasan_slab_alloc+0xf/0x20 [ 984.832029] ? kmem_cache_alloc+0x12e/0x780 [ 984.832036] ? ptlock_alloc+0x20/0x70 [ 984.832049] lock_acquire+0x16f/0x430 [ 984.832059] ? mon_bin_vma_fault+0x6f/0x280 [ 984.832068] ? mon_bin_vma_fault+0x6f/0x280 [ 984.832079] __mutex_lock+0xe8/0x1470 [ 984.832085] ? mon_bin_vma_fault+0x6f/0x280 [ 984.832094] ? save_trace+0x290/0x290 [ 984.936126] sel_write_load: 9 callbacks suppressed [ 984.936129] SELinux: failed to load policy [ 984.937654] ? mon_bin_vma_fault+0x6f/0x280 [ 984.937668] ? mutex_trylock+0x1c0/0x1c0 [ 984.937678] ? ptlock_alloc+0x20/0x70 [ 984.937688] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 984.937702] ? rcu_read_lock_sched_held+0x110/0x130 [ 984.971477] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env [ 984.978893] ? kmem_cache_alloc+0x611/0x780 [ 984.978905] ? __lockdep_init_map+0x10c/0x570 [ 984.978917] mutex_lock_nested+0x16/0x20 [ 984.978924] ? mutex_lock_nested+0x16/0x20 [ 984.978936] mon_bin_vma_fault+0x6f/0x280 [ 985.014818] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 985.017092] __do_fault+0x104/0x390 [ 985.017103] __handle_mm_fault+0xde1/0x3470 [ 985.058374] SELinux: failed to load policy [ 985.060685] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 985.060696] ? find_held_lock+0x35/0x130 [ 985.060703] ? handle_mm_fault+0x1b6/0x7c0 [ 985.060715] handle_mm_fault+0x293/0x7c0 [ 985.060726] __get_user_pages+0x465/0x1220 [ 985.060737] ? follow_page_mask+0x1560/0x1560 [ 985.060747] ? memset+0x32/0x40 [ 985.060757] populate_vma_page_range+0x18e/0x230 [ 985.060767] __mm_populate+0x198/0x2c0 [ 985.060779] ? populate_vma_page_range+0x230/0x230 [ 985.081323] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env [ 985.084483] vm_mmap_pgoff+0x1be/0x1d0 [ 985.084494] ? vma_is_stack_for_current+0xa0/0xa0 [ 985.089323] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 985.098482] ? __fget+0x237/0x370 [ 985.098494] SyS_mmap_pgoff+0x3ca/0x520 [ 985.098504] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 985.098512] ? do_syscall_64+0x53/0x640 [ 985.098520] ? align_vdso_addr+0x60/0x60 [ 985.098528] SyS_mmap+0x16/0x20 [ 985.201947] do_syscall_64+0x1e8/0x640 [ 985.205823] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 985.210652] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 985.215917] RIP: 0033:0x459ef9 [ 985.219085] RSP: 002b:00007f46f1d67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 985.226774] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459ef9 [ 985.234023] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 985.241276] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 985.248542] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f46f1d686d4 [ 985.255788] R13: 00000000004c6777 R14: 00000000004db9a0 R15: 00000000ffffffff [ 985.293728] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 985.302943] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 985.331760] kobject: 'loop5' (ffff8880a4ab4ae0): kobject_uevent_env [ 985.338382] kobject: 'loop5' (ffff8880a4ab4ae0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 985.578350] kobject: 'loop0' (ffff888091fd17a0): kobject_uevent_env [ 985.585095] kobject: 'loop0' (ffff888091fd17a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 986.630128] net_ratelimit: 18 callbacks suppressed [ 986.630133] protocol 88fb is buggy, dev hsr_slave_0 [ 986.640212] protocol 88fb is buggy, dev hsr_slave_1 09:08:25 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000001c0)={@nfc_llcp={0x27, 0x1, 0x2, 0x5, 0x81, 0x1, "8851f4b33f1bb1e2ffeea905966f7d37ca6193da6aad0c0e54c4bbba0f43c3aa1b282cbaddfe52f8678548dd9b2259e110daa2401aae1935885de37d0f5a17", 0x6}, {&(0x7f0000000140)=""/87, 0x57}, &(0x7f0000000040), 0xc}, 0xa0) fcntl$setlease(r2, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r2, 0x8, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xdbdb, 0x0) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x400) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() tkill(r3, 0x1000000000013) 09:08:25 executing program 1: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) semop(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) pipe(0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:08:25 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400000, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000040)={0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r1, &(0x7f0000000080)=""/189, 0x25c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) write(r2, &(0x7f0000000140)="98dcf318d1d303bcba83c366966eb630d629edb5387751098227f7cc", 0x1c) getdents(r1, &(0x7f0000000ea9)=""/375, 0x177) 09:08:25 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux'}, 0x10) msgget$private(0x0, 0x0) 09:08:25 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0xfffffffffffffffc}, 0x0, 0x5, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:08:25 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) openat$cgroup(r3, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) timer_create(0x0, 0x0, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r5, 0x23f, 0x0, 0x0, {{}, 0x0, 0xb, 0x0, {0x3, 0x14, 'broadcast-link\x02'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r5, 0x10, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7, 0x80000001, 0xffff, 0xff}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2010800}, 0x0) gettid() ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000200)=""/14) 09:08:26 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f030040"}, 0x25) msgget$private(0x0, 0x0) [ 987.077595] kobject: 'loop4' (ffff8880a4a2ea60): kobject_uevent_env [ 987.092451] kobject: 'loop4' (ffff8880a4a2ea60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 987.117452] SELinux: failed to load policy [ 987.141584] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env [ 987.152811] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' 09:08:26 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f030040"}, 0x25) msgget$private(0x0, 0x0) 09:08:26 executing program 1: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) semop(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) pipe(0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 987.193555] SELinux: failed to load policy [ 987.207158] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env [ 987.221049] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' 09:08:26 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() tkill(r3, 0x1000000000013) 09:08:26 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f030040"}, 0x25) msgget$private(0x0, 0x0) [ 987.243243] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 987.266363] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 987.288893] SELinux: failed to load policy [ 987.307269] kobject: 'loop4' (ffff8880a4a2ea60): kobject_uevent_env [ 987.316409] kobject: 'loop4' (ffff8880a4a2ea60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 987.333465] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env 09:08:26 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f00"}, 0x30) msgget$private(0x0, 0x0) [ 987.354168] SELinux: failed to load policy [ 987.360101] protocol 88fb is buggy, dev hsr_slave_0 [ 987.365176] protocol 88fb is buggy, dev hsr_slave_1 [ 987.370298] protocol 88fb is buggy, dev hsr_slave_0 [ 987.375344] protocol 88fb is buggy, dev hsr_slave_1 [ 987.381064] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 987.392201] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env 09:08:26 executing program 1: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) semop(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) pipe(0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:08:26 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f03004000"}, 0x26) msgget$private(0x0, 0x0) [ 987.401966] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 987.405463] SELinux: failed to load policy [ 987.434012] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env [ 987.449849] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 987.461415] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 987.468132] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 987.498921] SELinux: failed to load policy [ 987.564512] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 987.571888] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 987.670132] protocol 88fb is buggy, dev hsr_slave_0 [ 987.675302] protocol 88fb is buggy, dev hsr_slave_1 [ 987.695816] kobject: 'loop0' (ffff888091fd17a0): kobject_uevent_env [ 987.702644] kobject: 'loop0' (ffff888091fd17a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 987.738000] kobject: 'loop5' (ffff8880a4ab4ae0): kobject_uevent_env [ 987.745194] kobject: 'loop5' (ffff8880a4ab4ae0): fill_kobj_path: path = '/devices/virtual/block/loop5' 09:08:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/176, 0xffffffffffffffa6) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x422441) getdents(r1, &(0x7f0000000140)=""/353, 0xf4) 09:08:26 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f03004000"}, 0x26) msgget$private(0x0, 0x0) 09:08:26 executing program 1: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) semop(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) pipe(0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:08:26 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x4e21, @remote}}) 09:08:26 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0xadd3cbc676cc9b23) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e03, 0x0, @empty}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ppoll(&(0x7f0000000800)=[{}], 0x1, 0x0, 0x0, 0x0) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x10, 0x0, 0x6}}, 0x14) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000041c1, 0x20000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0xfffffffe}, 0x0, 0x7, 0xffffffffffffffff, 0x2) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) write(r6, &(0x7f0000000640)="5b4c232854b9b95c74e07a676380a6bc50db053970507911c986742211a16e90a84efe194ebdddae9b3959f044e6913c2ce7fed555943b24ff5ba4e1508a5a390b3a96262a3f5473c1341a65c284a808f67221aeea3209115289dd2cf0f8bceedd6a543180eaffc141fe0ab001576cb19e1b890df1433d7c45114935fa280b9818a7f18fb970c7411e120a0276cbde263166a8911f155740785aae304bd5ab11b230a8ce354f88c4cea41bee33b1e6010e1b9576b1caab140b0e4930403e20c1d2e9e2090086eeb3ed6160a9444cf13d9de8ebd3db0561f05802cdf456e97bfaefbbc93d0692122190341a9efe6cbedfbafa66ddccf6be5de19546fc5a1db96ab021e82ec2ccde9aabb66d07a0b1a3bb5af7e6066dfa22c82fdf2ced79bbf21caf113f4f655c0041b0d8fb6ef196d83ab714f0c58103d8c0292b37e0ca0827dc6cd0e6e289bb14803b75e6595453a711f4c25fd8eac05a5c0acb8ec486a59689dea284184ad3c36a987a67b8efbee8ef9e21ff4ef687346a2fc6103b3c3809cafc9ada4054f89d9e134715f1ce7db2e9724fcccc657511015b13abd85b6af9d087ccc1cea938a0e3039ab766b265ad21b7f5197bbca611a9085e67e83873395968bd202e6022b4ad3a510645fe2efaf77e67ea26fe41006bae922eb5e4564c574a1ff042ddb828a2d723be886c981eccfc20b210eaaa092ade762127c6c9961d6597f210bc51d288b028b14293b1c31b4ba449434306de77bb65d836764188192419f10960d9cb0876c2b9fbb3b8146ff83c08059e0e82fa6dedac7acbc6e6ba9e4ece0c42330980d17697e89a04ef87001dd82f8c967ba9f1e3ce910f4315035e18ebb392a31dce3d8532f2442d61e665e3dbf468c3e48df10c9d785a5d4f913e9c3a4d0bd435d0a488b75521ce7535b2fa6f2fd48f1c9dfab729667b28b7bd240875f70bbae8d33576786e5d0472f043a97aac01b249f26ce0c6a85e6f538a8c0b269a66bb6752a8120e6940a524d774f2ca11729d9ff9be8486006e09c7139e70f7a396c6831e7eb994a580c27d7dbdf3b0105735f9a1fc85540a5e17aad1fca4eee85f726fd8cef96455d9accba538fa0da4db6766de97fa59f181b37296052dad49c931b9cbd81c0f1d83677e26020fedcc0fc2c9230a44b70fe42fb3042bc17a0e97b02f132f888caae789a5a0b4052b9b020091ea161772f206536fa0a9e94b9afc6b3027605eea6e42b3ff6ffa441e59aeb46c4dae6973acad374911f8a432415169059465ec7a8f0f339707a52e62bb50e4955efcdb69815d48aae10698dcf8eae90f5813e0117db9233aac8083e15fb86616f39ec43aff14f38d5092c7c1c57fc51de26dd499b667475ef2ab8b5a1d229a269619b84d4ba24a6f21724f321f0a103bb241d475557e20f33a626a3c5d18a8c7df312a91f00f7a9304497fc15948f818fd3bb4eb066f0b3961c61620ab8e711c773636e29cc91206346259296dc68f14a02f9d4057207babf1fdf054ac8bc99d675d07d2f374cfbec945f352cb853765a047c9cc23a802fbaf24ddd264b9a0db0e8950b052747da70a37a716e7ecd5894213c75905a3ca6fbb45f22c8fa0dae2ec8d399560b0cbcd2389ec4e7f327abce30f67642765c2a6414d01a9d14fd364738212664556f5ed3656733ba4ef596566d493c403864cd0abfedec8698f6693003be17121c1ce2699c46b377403d6345379d1b67f2c75daf2346ebb2a8964520eee0b4cf313b6d89c8ee5d966f1576bca1fd00e6e191780211be17f07ae27ad356a6a3af17e35de1742d7624817017cfd55aa98eef4826bd6adc42cc30c92eb85dd025c4a76c395c66decb18667f6c4c48a459f2341eeea7b262d6b9b0b6589d325b69eae61e78e4961f593eb730fe71c20f2ac53b5f14c7cbcf503aa007fd861269bd32a3b52d3f85413c632d62879a908eda689ff3f23e005454bf24f52b3213d6cb9dbb9166075e9f33cf5c159a5bb089c5619c82ff1cf3376b85d41fc9ec727c676485618c7d103c80f41827fe693fc0ebc4dcffc95a13c810e3ea581447b7d4785ca56f6ec7a944a79c4d4bf8df35f2650b4d4c03d21dee3c4e6286f23e3bded7d64b67686d39767b00d948ef8b8fa699b5b26abbe7dcbf0a12a4a86b667a589526bb7c4f886baf8da6af0be7fc1167be8f314b9e15e9b24371aae2ef51ac190a9ace282d3fe9d6f89ab882974595976b8c391d5b54152c809d3218d8ddd7dd890416db10f5cca584c75ac4718cba79b0b1ccf5422f1b49d52ac943aee1946b2e3bbce48f596fb7e4f4ca2197c141612a2433574b49a0f74bf54a3f3a0afe0eb8a6f9b057386392eb3128264f2e2bf7dc4d95664075e653d9fc8bf5fc003c2da8fcbe887f836c285423e95a79de690f3ea1e4b52c7ecafd52cc9e25d8d6fe4ac6031cb7606cd485269fa132fc35743d64c2894c6b1326cc0da199eb7ac1b2cf587007fa1e3c70d2c62f660e553334b2214e2275db8d4d44138ffe0f9027aca61aff15113e114f107959084afec8bfa6a8dd9b8886ff765826269d083bfbba3889ca9c13b52a5c9d3983af1e3816eeb7810d622bd75076c599a120fda386364a56acc7a6a7243262b2efb2b8c57adae8b46aa59edd22b3d4960fb9d597d8336e18c8952ad6c64c816e669ad103844c3dfa0d83d391fa35a27415cde8d9e5a17725c1906cb3a2287c1fb264b67b72af4800ecb5e858199b3a5cabe780c3718985d2c25c1e5ad6853f82912d7a67be1f66e2e45bc3503b42cc62f43bd6e08c382641e25711f4b1b00760703f25b07965d8a356070ee570c139444b84cc75000c3fcb2053ff53b9a25a9b69b734472b5b7830e4f2f7071163ec68aa4f2fead7afac16a6bfbee2fbb9ce482bb7fc78cfe8887ae7eede7b51d96ff453a11c82b6ad27f35e3cfa5020442de4736295e761fe2f33c7169ff5c30898eb9c0aa14c73f5b69ddc74da9900c6e1c662ea1089332ccff01907739e83d34c7567982e1f4fd3600f7fe6e51748d2318b351ba1d1b93ff1fd5a142330b088800319497a22afad46d8c835b1037bd12e4d3c98653e6f8d1cf36eeeebc0c8dea91951db3d845350285c27c7c6de14bf2001b760690d7dfb3a47afb7ae3d66106a6a4be4dc5c0c193d92afc8eb2ccff327c12d15c3a821fd624a7549a26b95b90bfcbaaf6920ae781e7fad165e375913bc6a6c71d3fa90f7d87d5086a4653a0d8c57175fa3347358f474ef7d728a7339c80041f4b90e53d6ee4e0b6bdc2dbdf90c9ad64180c3770aae9b87af5f4b4fe7000fa5869d5206e401ea8caaa81d76fc51cf8e6edd579a31569f4bc134dc66a5deb851aa6fd481261704c0424057e654ea71c4727a3825d937bf052a4594ed944c958da296f6cee67c3daaf86de49d910868284d479d9be1c9cc896dd94d9d5db213a227819111672e544ae40d018a416acf6e3a4beb64b9e3b9bb158600033b9198cc0aa0b86f3c049301b694f981f9553fbb8d083140ec1402dcca8e6489f78ec1052ce850983a033b26835ad56262673d8f05ffb949991333eae1fd549401c8ce51612aebdff678fb35857e67d283605851ed35457426ca9ad97ee18aea69802d8491c75153ea4be8d0b2ddadcd3f9cbc4c18d545367a28c0a52d509dddb5597cca0bf20a294fbe04a28694d00c792b5b94720bad5e36bf224e7bfe51cfc187cb76b2a608a312624b9242c84640430e7907718537842d3ccdc47f354c01a4ad0629b0fb4a20be542fade395a77e4d98a046aa354d93e6e9ca7aa5488e38bb757bcabe34b99bbb2590e329539c5626494e1e5373f596d7f50ac9157d1dd87c17ddb98eb37f1834b9fcc13ea419e34fb0f930fa29e09bcf4b7489e6cddddbc3849a4b5d5eb17132d96e170ffb4eed19fa980a8f5f980def12cb70d786d6b680afa3c5e4445f36569c8212c6a2c6234d2b1a999ef58e3c0852a0b30c639327028517c8bafab330ae6e7a5277ac579b44c3dc0250fdc37a818ceba1bbef9d90e4f0b9d20fc1073298b4ae0a4788f646e9a2042c232ca08247cf6b2af0cdede3b8e397cd686c9c9536b40fb8f2e1285f5c18af1b29f72961a79741b904cd3b800853507db07fe91e626b4829a09ce3350e3f8357ba846254cf59dbcf0d2ee58e7e4d3e26e3fc3c31a5d1666512b2cf8a8a7af3daa815defae24a61521805ca4224ee9ae88e27f51badecb54d197d5362b2edec5033b6e9585ff3bf2716c381ae3fe53e9bc7e0e8c7180cf66cf7db6b7ed42bace792faea933b0f62cbe05d98acaf2dacbf9c1060ff3c435dbf8dd9112811501dde11dfa9091a104797a8d6a5f1b4d5e7154a5754ca30ab54575805e58c8c3240a4d0ec3b9f44a14b34e0ec264f2a15c8f8fab1960d8dcca37efc91420008228fcfc1b90a9055cc9f90079c2d080fa80365570f0c970b32f4f09968a06144113584f2ade0c36fd19d8eaa7ddb91ef899d40e27b4b03ad80680496a28a7b2cc49f794305b653472300658a3e7a988e8b098f59c4bdb202d3fc6263dd2b6eb9d9e1b022815a72e0d82fe2637482810245f1b680b0c8e15d2ddca42a6e461d40ade61c7db5bc12586ba12472557f081fb917ad4b8dd7a7ac7f91a2bcbe41df46d03be8d11574dfb0d2779bb5860416f45ff66b1c5c86a5b8dbe29c2f8ca3cee5fd4bf03381a738f4370c733c9bb18d3fff19ac9180e7ddb306e1863bb2b9f5a2ae16e13f2ae32415b5254b2535d1a911167d9e03825d7e68b2c84b302fd93049b210484892bf8520493d8af5d347d2bfbbf8640420ef612cd7ef6632cdbf6a232a41926ad54b04f9abf601542c9fa2f66be9e08fb5ee9f31da24052af2192065bb8bfe3eb5f5cc80993223e424437f6be6a6af3a4a385f17e53d57fe7075543a92b72cabfa46f5717dfefd2041b0e44241a74a1ccf169136f08112c38bc3dea9b1611badaa127088aee6e17165ee4e60911ba68c56d41e8da09541c1558a8d479310d231add2a701784eaec1a24cc01c75071fe50d471ab127479a4e75009e81f83aae70eb4768e02a2dfa91e9ced8ad70e5ca2828ad5525a97415e0900e646b1c4f5d638ad937c1723df859bd60f9eae149dec227f1fb210c222d1680a4a5d4be0e0098fe25987dcb7eb8a8c8dc785df671bc68b991ebc88e08bb6406fb6932dd9a0a33bd3a0981747f983ce8bf74400a3f8be9cfaf8ba04df35e0739b91bd53700badccb4533408d0f04e1513133363eb486bfc4c3738934082ec526245ba1fba6686834ea9e2bb77544e42b78850c4e080e3ba8914238766e8865c0b3050577d6a9f80d928662c47f2b80af1da35847025396e8bdc000f0a37d940bd10b13000a5eac42ba1b419e161f803bfe191841126a96ef6fe58afddaa27bfd00f69a0e2539914f7037e2d109ab0ed10612d483aebb5f49dc9496ccde5858d7f71f76838d637fd43af5c0c6ddf67b6f981e2d82c99adb4b2275a76314eab69b8ca7ca16da2ae43707a2dd9897d7a32a9798f5cb191a5d1f93ee7460579e354c87b265a9f6a53e1ff28622d4f1355715943b584c7a2b9b1b9aed00630aab5af6de621256fb7ea6dce3b530d5892883d8e2ca3252d5044d3a39ade608d84f34ba918af54676fd197f59e3ccc6bf0e020d08e4179a5fba9957a617761b1db80293859baf4dd062e386bd8afe3e77b2a4f573a960ff68565fd69cd45096c9aa1da9cf736ee44531098ca54e69331487a1e78b4ce1b9bf44a8e4a1c1f08ee61490059038abcf7dbe54dde4d15379fb0af43ce1434", 0x1000) r7 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r7, 0x400, 0x1) r8 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000100)=r8) fcntl$setown(r7, 0x8, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) execveat(r7, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() 09:08:26 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f03004000"}, 0x26) msgget$private(0x0, 0x0) [ 987.973179] SELinux: failed to load policy [ 987.979031] kobject: 'loop3' (ffff8880a4a249e0): kobject_uevent_env [ 987.997740] kobject: 'loop3' (ffff8880a4a249e0): fill_kobj_path: path = '/devices/virtual/block/loop3' 09:08:26 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x8001, 0xfffffffffffffffc, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x0, r4, 0x30, 0x0, @ib={0x1b, 0xff00, 0x1000, {"a29108014e77e3e1ea4fec411aa4aa35"}, 0x3ff, 0x4, 0x635}}}, 0xa0) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) geteuid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x802000004, 0x6) ioctl$DRM_IOCTL_MODESET_CTL(r7, 0x40086408, &(0x7f0000000000)={0x80, 0xffffffff}) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = gettid() tkill(r8, 0x1000000000013) 09:08:26 executing program 1: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) semop(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) pipe(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 988.048343] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env [ 988.069959] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 988.109601] kobject: 'loop4' (ffff8880a4a2ea60): kobject_uevent_env [ 988.116850] kobject: 'loop4' (ffff8880a4a2ea60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 988.131201] SELinux: failed to load policy [ 988.143433] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 988.150111] protocol 88fb is buggy, dev hsr_slave_0 09:08:27 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='cm$line\x00\x85\x14\x10\xaa,^m\x8d\xaf\xa0\xadC\xa3e|]\xfci\xbfYGs\xe8\\9\x9b\xbd\xca\x81]8A*q\xe0\xa2\xfd4\x15\x84c|k\x95]\x96A8\r\xd8\xe0DNwVU\x94\x87\x02\xfcZ%e\tW^\xe7G\xe6v\r3\xc9D\x89SZ5q4\x19;%\xb2G\xbf;\xca\x98.\f\xb8\xb0\x9el\xb8\xbe\xb5O\x04\xc3\x8a\xb3\x89\xf9\xdc\xf2D\xa0\x8f\x94\x7f\x9f\xdaFY\xb4\x18\xccZK\xfe\xe08{\xf6\xcb]\xd886\x90\xbd\xd1\xd8\x9em\xebLNU\x0f\x16\xb0uz\xc8\x00\xd9.Pu\\\xbe\x18\xb3\xef\xf0\xea\x9f\x12L\x0f\xcf\xc4\x0fw\x81r\xbb\xa5i\x19C\xfd9\xe7\x1f\x88[\xcc\x042\xe2B\xc0\xfe\xc4j\x1e\x89\xe4P\xd01\xe5\xdf\xf1qG\xfb(fY\xf4\xc9\x06\xd5\x89\xe0$\xb4\xf7\xd600\xca\xef\x87\x8c\xc0*\x8eb\xc1\xe8') getdents64(r1, &(0x7f0000000080)=""/189, 0x25c) getdents(r1, &(0x7f0000000ea9)=""/375, 0x177) 09:08:27 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c2"}, 0x2b) msgget$private(0x0, 0x0) [ 988.155605] protocol 88fb is buggy, dev hsr_slave_1 [ 988.165696] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' 09:08:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:27 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c2"}, 0x2b) msgget$private(0x0, 0x0) [ 988.208303] kobject: 'loop3' (ffff8880a4a249e0): kobject_uevent_env [ 988.216856] kobject: 'loop3' (ffff8880a4a249e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 988.256604] kobject: 'loop3' (ffff8880a4a249e0): kobject_uevent_env [ 988.279193] kobject: 'loop3' (ffff8880a4a249e0): fill_kobj_path: path = '/devices/virtual/block/loop3' 09:08:27 executing program 1: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) semop(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:08:27 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c2"}, 0x2b) msgget$private(0x0, 0x0) [ 988.307914] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env [ 988.322403] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' 09:08:27 executing program 3: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180)=0x3, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x20000, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000140)={0x0, 'team0\x00', 0x4}, 0x18) [ 988.354438] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 988.379839] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 988.401162] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env [ 988.407946] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 988.510778] kobject: 'loop3' (ffff8880a4a249e0): kobject_uevent_env [ 988.517242] kobject: 'loop3' (ffff8880a4a249e0): fill_kobj_path: path = '/devices/virtual/block/loop3' 09:08:27 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() [ 988.590645] kobject: 'loop0' (ffff888091fd17a0): kobject_uevent_env [ 988.597188] kobject: 'loop0' (ffff888091fd17a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 988.685274] kobject: 'loop4' (ffff8880a4a2ea60): kobject_uevent_env [ 988.694352] kobject: 'loop4' (ffff8880a4a2ea60): fill_kobj_path: path = '/devices/virtual/block/loop4' 09:08:27 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280)=@int=0x80000000, 0x4) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14, 0x800) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f0000000240)=0x4) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000140)={{{@in=@multicast1, @in, 0x4e23, 0x0, 0x4e24, 0x1b0, 0xa, 0x70, 0x493a59ef4b25ccc8, 0x11, r5, r6}, {0x5, 0x5, 0x100, 0x6b58, 0x8, 0x2, 0x4, 0x4}, {0xfffffffffffff8b7, 0x7, 0x1, 0x6}, 0xf, 0x6e6bb2, 0x6, 0x0, 0x3, 0x3}, {{@in6=@local, 0x4d5, 0xff}, 0xa, @in=@rand_addr=0x2, 0x3500, 0x1, 0x0, 0x0, 0x1000, 0x0, 0x1}}, 0xe8) 09:08:27 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e8"}, 0x2e) msgget$private(0x0, 0x0) 09:08:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) r3 = dup3(r0, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000180)={{0x3, 0x9}, {0x4, 0xee}, 0xfffffffb, 0x1, 0x7}) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) getdents64(r4, &(0x7f0000000080)=""/189, 0x25c) getdents(r4, &(0x7f0000000ea9)=""/375, 0x177) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) 09:08:27 executing program 1: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) semop(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:08:27 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() tkill(r3, 0x1000000000013) [ 988.942655] kobject: 'loop5' (ffff8880a4ab4ae0): kobject_uevent_env [ 988.949158] kobject: 'loop5' (ffff8880a4ab4ae0): fill_kobj_path: path = '/devices/virtual/block/loop5' 09:08:27 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e8"}, 0x2e) msgget$private(0x0, 0x0) 09:08:27 executing program 1: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) semop(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 989.010510] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env [ 989.019446] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' 09:08:28 executing program 1: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) semop(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 989.066753] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 989.076053] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' 09:08:28 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e8"}, 0x2e) msgget$private(0x0, 0x0) [ 989.132300] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env [ 989.138791] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' 09:08:28 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f"}, 0x2f) msgget$private(0x0, 0x0) 09:08:28 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x802000004, 0x6) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000000)=0x65, 0x4) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0xffffffff, 0x5, 0x7fffffff, 0x8, 0x7fffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x802000004, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000040)={0x9, 0x20d, 0x1ff, 0x2}, 0x14) gettid() [ 989.199912] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env [ 989.223564] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' 09:08:28 executing program 1: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) semop(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 989.258648] kobject: 'loop0' (ffff888091fd17a0): kobject_uevent_env [ 989.275582] kobject: 'loop0' (ffff888091fd17a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 989.301554] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 989.313518] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 989.549613] kobject: 'loop4' (ffff8880a4a2ea60): kobject_uevent_env [ 989.562069] kobject: 'loop4' (ffff8880a4a2ea60): fill_kobj_path: path = '/devices/virtual/block/loop4' 09:08:28 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x10, 0x1, 0x8}}, 0x14) gettid() 09:08:28 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f"}, 0x2f) msgget$private(0x0, 0x0) [ 989.686442] kobject: 'loop5' (ffff8880a4ab4ae0): kobject_uevent_env [ 989.695109] kobject: 'loop5' (ffff8880a4ab4ae0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 989.723199] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env 09:08:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="7b29105aab3e0b886595b096e7da34dc3bf5f9d902c086b418af587e0e63f433c900a1e278566c4208a4d35ad8393dab0b68523847315f1a59eeadca82c4fb642be467e068dbbcc85ba764b37baf8ab216e18cdac22da25372afb1331b7f00515a96878d091c51e2c37fb83720f3853551f95837893f0651e7051d93a7a0a45ff4c56e3edfd3b269d9eff32e067e4c588f03c9f5e4ebf0e79663164dd6d14c397dfbc84e6c400a51", 0xa8}], 0x1, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4102}}], 0x18}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r1, &(0x7f0000000080)=""/189, 0x25c) getdents(r1, &(0x7f0000000ea9)=""/375, 0x177) 09:08:28 executing program 1: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) semop(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:08:28 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000)=0xca, 0x4) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() tkill(r4, 0x1000000000013) [ 989.733879] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' 09:08:28 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300400000000000c27ed0e81f"}, 0x2f) msgget$private(0x0, 0x0) 09:08:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x800000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x64, 0x0, 0x1c121ae095e69884, 0x800, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20002010}, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x20) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="56ef2c688e13390b6f2efb"], 0xb) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, 0x0) [ 989.788606] kobject: 'loop3' (ffff8880a4a249e0): kobject_uevent_env [ 989.799686] kobject: 'loop3' (ffff8880a4a249e0): fill_kobj_path: path = '/devices/virtual/block/loop3' 09:08:28 executing program 1: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) semop(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:08:28 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0x4, 0x8f000, 0x3, 0x40, 0x8e, 0x4, 0x7, 0xe6, 0x0, 0x0, 0x6, 0x9}, {0x6000, 0xd000, 0x7, 0x8, 0x41, 0x0, 0x1, 0x3, 0x7, 0x4, 0x80, 0xff}, {0x0, 0x4000, 0xe, 0x7, 0x80, 0xfd, 0x7, 0x81, 0xff, 0x9, 0x2, 0xf7}, {0x4000, 0x1, 0x0, 0x1, 0x40, 0xd7, 0x2, 0x4, 0x3, 0x7, 0x5, 0x8}, {0x9002, 0x4000, 0xb, 0x0, 0x6d, 0x80, 0x8d, 0x9, 0x2, 0x9, 0x5, 0xc2}, {0x6000, 0x4, 0x10, 0x81, 0x2, 0x7f, 0x80, 0x3f, 0xfd, 0x0, 0xfd, 0x5}, {0x2000, 0x10000, 0xe, 0x20, 0x7, 0x1, 0x6, 0x7, 0x8, 0x1, 0xb, 0x6}, {0x6000, 0x3000, 0xf, 0xfd, 0x1d, 0x8e, 0x45, 0x3, 0x7, 0x3f, 0x1f}, {0x6000, 0x6000}, {0x800, 0x1}, 0x40070018, 0x0, 0xf000, 0x20, 0xb, 0x100, 0x6000, [0x1, 0x100000001, 0x0, 0x5]}) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r3 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() [ 989.842775] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env [ 989.882791] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' 09:08:28 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000000)) [ 989.932867] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 989.964813] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 989.983300] kobject: 'loop5' (ffff8880a4ab4ae0): kobject_uevent_env [ 990.006385] kobject: 'loop5' (ffff8880a4ab4ae0): fill_kobj_path: path = '/devices/virtual/block/loop5' 09:08:28 executing program 1: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) semop(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 990.019865] audit: type=1804 audit(1571994508.896:302): pid=11404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir047390502/syzkaller.FSkbqn/63/file0" dev="sda1" ino=18369 res=1 [ 990.025306] kobject: 'loop0' (ffff888091fd17a0): kobject_uevent_env [ 990.104737] kobject: 'loop0' (ffff888091fd17a0): fill_kobj_path: path = '/devices/virtual/block/loop0' 09:08:29 executing program 1: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) semop(0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 990.166112] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 990.175759] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' 09:08:29 executing program 1: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 990.204246] audit: type=1804 audit(1571994509.086:303): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir047390502/syzkaller.FSkbqn/63/file0" dev="sda1" ino=18369 res=1 [ 990.236333] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 990.243599] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' 09:08:29 executing program 2: syz_open_dev$radio(0x0, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x401}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) [ 990.275149] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env [ 990.282431] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 990.311770] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 990.331209] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 990.412593] kobject: 'loop4' (ffff8880a4a2ea60): kobject_uevent_env [ 990.419093] kobject: 'loop4' (ffff8880a4a2ea60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 990.477218] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env [ 990.487274] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 990.592177] kobject: 'loop5' (ffff8880a4ab4ae0): kobject_uevent_env [ 990.599037] kobject: 'loop5' (ffff8880a4ab4ae0): fill_kobj_path: path = '/devices/virtual/block/loop5' 09:08:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) prlimit64(0x0, 0x7, &(0x7f0000000280), 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$pptp(0x18, 0x1, 0x2) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:08:29 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x200, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x9a720c60f6d75304) renameat2(r2, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00', 0x2) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x0) r4 = gettid() tkill(r4, 0x1000000000013) 09:08:29 executing program 2: setpriority(0x2, 0x0, 0x2) 09:08:29 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getresgid(0x0, &(0x7f0000000400), 0x0) gettid() r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r2, 0x9, 0x6) prlimit64(r2, 0xf, &(0x7f0000000040)={0x381f, 0x76}, &(0x7f0000000080)) [ 990.640445] kobject: 'loop0' (ffff888091fd17a0): kobject_uevent_env [ 990.649172] kobject: 'loop0' (ffff888091fd17a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 990.668772] kobject: 'loop3' (ffff8880a4a249e0): kobject_uevent_env 09:08:29 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x1, 0x2) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x9, r2, 0x9, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, r2, 0xffffffffffffffff, r1, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xe2f9ef75) r4 = geteuid() openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x58c881, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x802000004, 0x6) getsockopt$inet6_buf(r6, 0x29, 0x21, &(0x7f0000000140)=""/178, &(0x7f0000000200)=0x36c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x802000004, 0x6) ioctl$TIOCCBRK(r8, 0x5428) setreuid(r4, 0x0) fchown(r3, r4, 0xee01) r9 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r9, 0x400, 0x1) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$int_in(r10, 0x5421, &(0x7f0000000040)=0xfffffffffffffff9) fcntl$setown(r9, 0x8, 0x0) execveat(r9, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() 09:08:29 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 990.698594] kobject: 'loop3' (ffff8880a4a249e0): fill_kobj_path: path = '/devices/virtual/block/loop3' 09:08:29 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000008c0)='/dev/loop#\x00', 0x0, 0x0) io_setup(0x800, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x7ffffffff000}]) 09:08:29 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 990.764291] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 990.787349] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 990.804343] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env 09:08:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 990.822404] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 990.837265] audit: type=1400 audit(1571994509.716:304): avc: denied { getrlimit } for pid=11457 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1 [ 990.865079] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env 09:08:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x10000, 0x80000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) socket$rxrpc(0x21, 0x2, 0xa) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) 09:08:29 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 990.876491] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 990.905943] kobject: 'loop3' (ffff8880a4a249e0): kobject_uevent_env [ 990.917417] kobject: 'loop3' (ffff8880a4a249e0): fill_kobj_path: path = '/devices/virtual/block/loop3' 09:08:29 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000008c0)='/dev/loop#\x00', 0x0, 0x0) io_setup(0x800, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x7ffffffff000}]) 09:08:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @local, 0x4e22, 0x3, 'sh\x00', 0x0, 0xed8b, 0x9}, {@remote, 0x4e20, 0x10000, 0xbe9, 0x1f, 0x43}}, 0x44) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) [ 990.935190] kobject: 'loop3' (ffff8880a4a249e0): kobject_uevent_env [ 990.945229] kobject: 'loop3' (ffff8880a4a249e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 990.955929] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 990.973170] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 990.991507] kobject: 'loop3' (ffff8880a4a249e0): kobject_uevent_env [ 991.003928] kobject: 'loop3' (ffff8880a4a249e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 991.091986] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env [ 991.098803] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' 09:08:30 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) r2 = socket$isdn(0x22, 0x3, 0x2f) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000000)=0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) socket$nl_crypto(0x10, 0x3, 0x15) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() tkill(r3, 0x3d) 09:08:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 991.291155] kobject: 'loop4' (ffff8880a4a2ea60): kobject_uevent_env [ 991.297643] kobject: 'loop4' (ffff8880a4a2ea60): fill_kobj_path: path = '/devices/virtual/block/loop4' 09:08:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000008c0)='/dev/loop#\x00', 0x0, 0x0) io_setup(0x800, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x7ffffffff000}]) [ 991.350662] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 991.357200] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 991.382028] kobject: 'loop5' (ffff8880a4ab4ae0): kobject_uevent_env [ 991.388564] kobject: 'loop5' (ffff8880a4ab4ae0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 991.457871] audit: type=1400 audit(1571994510.336:305): avc: denied { create } for pid=11531 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 991.461842] kobject: 'loop4' (ffff8880a4a2ea60): kobject_uevent_env [ 991.509595] kobject: 'loop4' (ffff8880a4a2ea60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 991.546761] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env 09:08:30 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xa, 0x0, 0xa) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) rt_sigaction(0x23, &(0x7f0000000080)={&(0x7f0000000040)="c46241986001c4a16d60aa6b000000c4437d191d3b760000f9c4220592440900c461f8176305459ef30f1ec6430f4371002e3e40c1379e26f30f38f6e3", {0x7}, 0x108000000, &(0x7f0000000140)="3e0f4b9ffbefffffc4a1add234db0f860b00000026660ff128c40178119f00000000c441fc534800c4425d9044c70d8f297890eec463f168920dff7be0aec442f59a680a"}, &(0x7f0000000240)={&(0x7f00000001c0)="2e400fffe783270e4599c441ff7dfa6765420ffc4d00c4c2093d0c07c421d9e8653f2e450fae06c421fb2d90ea16cac2400f0d871adfeb32", {}, 0x0, &(0x7f0000000200)="d92683a55b1100000b8fe9589184fb0000000065f00fb17f00f045297f0f400f18c2660f3a40e3fec401785aad0b000000c4c291382c0c660fed7700"}, 0x8, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x802000004, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [], {0x0, 0x989680}}) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x802000004, 0x6) ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f00000002c0)) gettid() 09:08:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x72, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x40) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={r5, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r5, 0x8, 0x10}, &(0x7f0000000040)=0xc) getdents64(r0, &(0x7f0000000080)=""/189, 0xfffffffffffffc57) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x802000004, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x20, r9, 0x5, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x4}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa2c41024}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x1e4, r9, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x28}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2e8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb30d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ec}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9ac6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000048}, 0x28041) [ 991.561166] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' 09:08:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x0, 0x10, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:08:30 executing program 4: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r2, r1}, &(0x7f0000000400)=""/262, 0x106, &(0x7f0000000040)={&(0x7f0000000000)={'crc32-generic\x00'}}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)=@builtin='builtin_trusted\x00') r3 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r4 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r4, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r4, 0x8, 0x0) execveat(r4, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x180010}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r5, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20060000}, 0x80) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = gettid() tkill(r6, 0x1000000000013) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x802000004, 0x6) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f0000000000)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) 09:08:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000008c0)='/dev/loop#\x00', 0x0, 0x0) io_setup(0x800, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x7ffffffff000}]) 09:08:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x0, 0x10, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 991.604631] kobject: 'loop0' (ffff888091fd17a0): kobject_uevent_env [ 991.635426] kobject: 'loop0' (ffff888091fd17a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 991.678610] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 991.700845] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' 09:08:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x0, 0x10, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:08:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000008c0)='/dev/loop#\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x7ffffffff000}]) [ 991.770931] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 991.783261] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 991.830349] net_ratelimit: 16 callbacks suppressed [ 991.830354] protocol 88fb is buggy, dev hsr_slave_0 [ 991.841188] protocol 88fb is buggy, dev hsr_slave_1 [ 991.854733] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env 09:08:30 executing program 1: syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x0, 0x8012, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 991.872801] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 991.913976] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 991.928029] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' 09:08:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000008c0)='/dev/loop#\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x7ffffffff000}]) [ 991.981327] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env [ 991.987820] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' 09:08:30 executing program 1: syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x0, 0x8012, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 992.082190] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 992.090348] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' 09:08:31 executing program 1: syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x0, 0x8012, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 992.143556] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 992.150400] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 992.167442] kobject: 'loop2' (ffff8880a498c960): kobject_uevent_env [ 992.185256] kobject: 'loop2' (ffff8880a498c960): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 992.222543] kobject: 'loop4' (ffff8880a4a2ea60): kobject_uevent_env [ 992.260136] kobject: 'loop4' (ffff8880a4a2ea60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 992.284387] kobject: 'loop1' (ffff8880a49306e0): kobject_uevent_env [ 992.301045] kobject: 'loop1' (ffff8880a49306e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 992.310146] protocol 88fb is buggy, dev hsr_slave_0 [ 992.315638] protocol 88fb is buggy, dev hsr_slave_1 09:08:31 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) r3 = accept$netrom(r2, &(0x7f0000000000)={{}, [@netrom, @rose, @netrom, @rose, @null, @remote, @rose, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) r4 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) execveat(r4, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000100)) gettid() [ 992.378713] kobject: 'loop0' (ffff888091fd17a0): kobject_uevent_env [ 992.400085] kobject: 'loop0' (ffff888091fd17a0): fill_kobj_path: path = '/devices/virtual/block/loop0' 09:08:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/328) getdents64(r0, &(0x7f0000000080)=""/189, 0x25c) getsockname$llc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) getdents(r0, &(0x7f0000000ea9)=""/375, 0x177) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x802000004, 0x6) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000140)) 09:08:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000008c0)='/dev/loop#\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x7ffffffff000}]) 09:08:31 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) mknod(0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=r2}, &(0x7f00000000c0)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000040)) r4 = gettid() tkill(r4, 0x1000000000013) 09:08:31 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000004100)={0x1, 0x0, [{0x0, 0x53, &(0x7f0000000040)=""/83}]}) [ 992.440851] kobject: 'loop3' (ffff8880a4a249e0): kobject_uevent_env [ 992.447336] kobject: 'loop3' (ffff8880a4a249e0): fill_kobj_path: path = '/devices/virtual/block/loop3' 09:08:31 executing program 2: io_setup(0x800, &(0x7f0000000080)=0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) [ 992.533929] kobjec