0x0) 23:47:09 executing program 4: socketpair(0x18, 0xe800000000000000, 0x2, &(0x7f0000000280)) 23:47:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$cont(0x1f, r1, 0x80, 0x8) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000000)={0x9}) 23:47:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00e9f58088000000"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffea9) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r8 = creat(0x0, 0x0) ftruncate(r8, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r9, 0x335d, 0x0) ioctl$TIOCSSERIAL(r9, 0x541f, &(0x7f00000001c0)={0xff, 0x3, 0x3ff, 0x20, 0x0, 0x6, 0xb56, 0xfffffff7, 0x6, 0x40, 0x3, 0x5, 0x1, 0xfff7, &(0x7f0000000340)=""/232, 0x5, 0x8, 0x100000001}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0x1, 0x20000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1498.061132][ T26] audit: type=1326 audit(1570837629.621:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=1928 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:09 executing program 4: socketpair(0x18, 0xe801000000000000, 0x2, &(0x7f0000000280)) [ 1498.147559][ T1936] Enabling not permitted [ 1498.158375][ T1936] Enabling of bearer rejected, failed to enable media 23:47:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x88000800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sched_getscheduler(r1) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x2, 0x4}) 23:47:09 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) wait4(r1, 0x0, 0x8, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x80000000, &(0x7f0000ff4000/0x9000)=nil, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x83}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000100)={0x400, 0x1, 0x2}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r8, &(0x7f0000000640)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c040000280007050000781e23d6000000130000", @ANYRES32=r10, @ANYBLOB="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"], 0x45c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000004c0)={@dev}, &(0x7f0000000500)=0x14) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)={0xffffffffffffff5c, 0x0, 0x2, 0x0, 0x0, {}, [{{0x2cb, 0x1, r9}}]}, 0xfffffffffffffee2}}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r11, &(0x7f0000000640)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c040000280007050000781e23d6000000130000", @ANYRES32=r13, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x4101}, 0x0) accept$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) r15 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r15, &(0x7f0000000640)={0x11, 0x0, r16, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c040000280007050000781e23d6000000130000", @ANYRES32=r17, @ANYBLOB="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"], 0x45c}}, 0x0) r18 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r18, 0x335d, 0x0) r19 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r19, &(0x7f0000000640)={0x11, 0x0, r20, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c040000280007050000781e23d6000000130000", @ANYRES32=r21, @ANYBLOB="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"], 0x45c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r18, 0x8933, &(0x7f0000000240)={'vcan0\x00', r21}) r23 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r23, 0x335d, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r23, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe8, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r13}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r17}, {0x80, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0xfffffffffffffcc2, 0x6, r22}}}, {0x40, 0x1, @lb_port_stats={{{0xffffff63, 0x1, 'lb_port_stats\x00'}, {0xffffffffffffff0b}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r24}}}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x4042) pipe2$9p(&(0x7f0000000000), 0x8000) 23:47:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000100)={{0x4, 0x6, 0x8, 0x400, 'syz0\x00', 0xfffffffe}, 0x2, 0x30, 0x3887b1ae, 0xffffffffffffffff, 0x2, 0x100, 'syz1\x00', &(0x7f0000000000)=['\x00', 'vboxnet1\x00'], 0xa, [], [0x3, 0x5, 0xffff, 0x8]}) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000040)={0xc0, 0x3f, 0x7}) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:09 executing program 4: socketpair(0x18, 0xe900000000000000, 0x2, &(0x7f0000000280)) 23:47:09 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x150, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x303f7c8f}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3f, @ipv4={[], [], @remote}, 0xe21}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40000840}, 0x8) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ptrace$setopts(0xe706, r4, 0x2, 0x49) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}}, 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r8 = creat(0x0, 0x0) ftruncate(r8, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r10, 0x335d, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r11, 0x401054d6, 0x0) sendto$unix(r9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:47:10 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) tkill(0x0, 0x1) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ptrace$cont(0x7, r0, 0x402, 0x0) [ 1498.595251][ T2064] Enabling not permitted [ 1498.633600][ T2064] Enabling of bearer rejected, failed to enable media [ 1498.862702][ T26] audit: type=1326 audit(1570837630.431:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=1928 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:10 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x203, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:10 executing program 4: socketpair(0x18, 0xe901000000000000, 0x2, &(0x7f0000000280)) 23:47:10 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:10 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) fstatfs(r1, &(0x7f0000000100)=""/210) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:10 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES16=r3, @ANYBLOB="0971510000000000000001000092e6000000014137695200"/42], 0x3}}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r4, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}}, 0x50}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r7, &(0x7f0000000640)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0xfffff307) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r9, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r10 = creat(0x0, 0x0) ftruncate(r10, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r11, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1499.033594][ T26] audit: type=1326 audit(1570837630.601:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2280 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:10 executing program 4: socketpair(0x18, 0xea00000000000000, 0x2, &(0x7f0000000280)) 23:47:10 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x800, 0x6}) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:10 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00eaf725c17e0000000086f5f3a2518643b1287105afeb7e564779", 0x2ae}], 0x4, 0xe) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:10 executing program 4: socketpair(0x18, 0xea01000000000000, 0x2, &(0x7f0000000280)) 23:47:10 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8400, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:11 executing program 4: socketpair(0x18, 0xeb00000000000000, 0x2, &(0x7f0000000280)) 23:47:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000140)=0x2) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)="043fff4d2f3a919b03c2d0549cbd6199a0e20b5b7444a7898d7b91e2dbacfe9ba0197686dd") r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1499.834895][ T26] audit: type=1326 audit(1570837631.401:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2280 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:11 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x204, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:11 executing program 4: socketpair(0x18, 0xeb01000000000000, 0x2, &(0x7f0000000280)) 23:47:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x3) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x1, r0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c040000280600000000781e0bd6000000130000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000800010063627100300402000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000047157dacf0c5958e00bf1ef67ab33f479a000000000000000000000000000000da3f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005529000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000000000010018000100fb0000000000000000000000000000000000000053b924c54543555f8659fa144e7702b8a3408fbec253762bce1cc1b551aabf62bdc59ac1889e448c5a2ae7fc0c8f2825b4935eee610a18b43f1063c5b4eaf1e62f9ff6d3f3693ad036aef5cf96b3ab9ad9f9e0d4d9a44aa52b0a910f8c9ae5d75efb88cdc974b83fc891c8e944c135dc8fac681c461460e2068eb5748fed84dc610498aa7dab4e3dfcd2d62c36a30b76af5e03aa4b09b95f5cb46b543550a0eb07854cdf330299067c1b491778278a48d70bb30d4b0877904a34d1f0b6c61cba4ec5450708bca16b2a291bc6c8648ab8877d3b535373df3cad64f7de42cd48d7571c356b4c830bc287dfd6ce79a4d17af6f5a69d9e68d39cfabdc6e48f786f4d063c4a063027406f90f9920163f8f72235302fb827d08d4e9ca043e70f"], 0x45c}}, 0x0) bind$can_raw(r2, &(0x7f0000000040)={0x1d, r5}, 0x10) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000000)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3000000853bb43f4174c0387e05c8eee8203ea8fe6a39f5301f1e71d3d00bdc5942c46ee1bb8afaccac8ef7c27e7c29ee79180eacebb61a8b1145d8ed873a0e2b58e376742d2b792041acd7a8d29a0cd582ad3496a976104fa4f11783a877d3874563c6c47cada7080871ec3f7c2d25508b9b5d35736283fd6871ec17265f390b4de641cd0d26f306cc35bc5e6fe3ba423ce844b6105378bab8d2304fdb50719e2bb6111c7a9f836f8fc1ec77ca5f08bc53b8a823d2cfcf8025dd684db35012adffaa1f42523ec867cdb3c", @ANYRES16=r1, @ANYBLOB="095a00000000000000000100000000000000014101000014001700000000000000006574683a6c6f000034e291f01bdabe5be10ff8248ef460a64d84d6173712639c843827d23a1af4c37708ae73b3a1aae4b1c98a408cd9c7cfc779981d281bc771d84e4f63c1467a8627310db3979b85172e66d4e99b21106089da7b7d2341c49e43c3db5b32c3c3236b3c97ca18504fd2c5401b7508a9aa000029a7bb35f3dbb259d5319c8fb9eeefa683"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}}, 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r8, 0x0, 0x3, &(0x7f0000000040)='lo\x00'}, 0x30) sched_setscheduler(r9, 0x5, &(0x7f0000000200)=0x2) getpgrp(0x0) r10 = creat(0x0, 0x0) ftruncate(r10, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x26, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x6, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0x7, r10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r11, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:47:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:11 executing program 4: socketpair(0x18, 0xec00000000000000, 0x2, &(0x7f0000000280)) [ 1500.050358][ T26] audit: type=1326 audit(1570837631.611:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}, [@mark={0xc}]}, 0x5c}}, 0x0) sendto(r3, &(0x7f0000000000)="e7d732f20069fe6f1daab7516f641456a5fe315ae3f56fa50e38f9c759117035a5c73bbd9adc5d87b82a0a623b2414144366059445", 0x35, 0x4, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) set_tid_address(&(0x7f0000000000)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:11 executing program 4: socketpair(0x18, 0xec01000000000000, 0x2, &(0x7f0000000280)) 23:47:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) capset(&(0x7f0000000400)={0x20080522}, &(0x7f0000000440)={0x3, 0x1, 0x3, 0x800, 0x0, 0x2}) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001500010000006fdbd9b3fdce6be232da0000000000e000000100000000000000000000aa00ac1414bb0000000000000000000100"/79, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@gettaction={0x68, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x20, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x10, 0x1d, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0x10, 0x11, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0xd, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xf5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r8 = creat(0x0, 0x0) ftruncate(r8, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:47:12 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) wait4(r1, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1500.443972][ T2668] Enabling not permitted [ 1500.463222][ T2668] Enabling of bearer rejected, failed to enable media [ 1500.850228][ T26] audit: type=1326 audit(1570837632.411:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:12 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x205, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:12 executing program 4: socketpair(0x18, 0xed00000000000000, 0x2, &(0x7f0000000280)) 23:47:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0x10000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x3, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r4, 0x400454ce, r7) r8 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r8, 0x1, &(0x7f0000000680)={{0x0, 0x0, r7, r6, r7, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r5, r5, 0x9}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getuid() r10 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r10, 0x400454ce, r12) shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) r13 = getpid() sched_setscheduler(r13, 0x5, &(0x7f0000000380)) r14 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r14, 0x400454ce, r17) r18 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r18, 0x1, &(0x7f0000000680)={{0x0, 0x0, r17, r16, r17, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r15, r15, 0x9}) r19 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r19, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r20 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r20, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000000000000010000023cc96ce", @ANYRES32=r6, @ANYBLOB="02000300", @ANYRES32=r9, @ANYBLOB="827a3a9bf59b0e544ae9319a46436cc6447191a77a06076e9ad116e871b19abd41d066c43879de58b6c9443321573a7ef96c42bd6cc7df2f195aa0de4c067c", @ANYRESOCT=r20, @ANYBLOB="02000100", @ANYRES32=r11, @ANYBLOB="022000c8", @ANYRES32=r16, @ANYBLOB="040001000000000008000100", @ANYRES32=0xee00, @ANYBLOB="08008b9bffff9df9e40000", @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRES16=r3, @ANYRESHEX], @ANYRES32=0x0, @ANYBLOB="514d67b81867a7068fa0a5fbb31833aeafb53420000000f592a71e40d4c8a4e1bc3954244d0701140f9c960f8f98474444e42e3877fdf09e85c21a9e20"], 0x11, 0x0) tkill(r0, 0x1) r21 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r21, 0x335d, 0x0) r22 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r22, 0x335d, 0x0) r23 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) r24 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r24, 0x335d, 0x0) r25 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r25, 0x335d, 0x0) r26 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r26, 0x335d, 0x0) ioctl$VHOST_SET_VRING_KICK(r26, 0x335d, 0x0) ioctl$KVM_IRQFD(r21, 0x4020ae76, &(0x7f0000000040)={r22, 0xf78, 0x48000000, r23}) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:12 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f00000000c0)=0xe8) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r2, 0x400454ce, r5) r6 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000680)={{0x0, 0x0, r5, r4, r5, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r3, r3, 0x9}) getgroups(0x1, &(0x7f0000000300)=[0x0]) r8 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r8, 0x400454ce, r11) r12 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r12, 0x1, &(0x7f0000000680)={{0x0, 0x0, r11, r10, r11, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r9, r9, 0x9}) r13 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r13, 0x400454ce, r16) r17 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r17, 0x1, &(0x7f0000000680)={{0x0, 0x0, r16, r15, r16, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r14, r14, 0x9}) r18 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r18, 0x400454ce, r21) r22 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r22, 0x1, &(0x7f0000000680)={{0x0, 0x0, r21, r20, r21, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r19, r19, 0x9}) getgroups(0x3, &(0x7f0000000340)=[r11, r16, r21]) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r25 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r25, 0x400454ce, r28) r29 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r29, 0x1, &(0x7f0000000680)={{0x0, 0x0, r28, r27, r28, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r26, r26, 0x9}) r30 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r30, 0x400454ce, r33) r34 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r34, 0x1, &(0x7f0000000680)={{0x0, 0x0, r33, r32, r33, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r31, r31, 0x9}) r35 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r35, 0x400454ce, r38) r39 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r39, 0x1, &(0x7f0000000680)={{0x0, 0x0, r38, r37, r38, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r36, r36, 0x9}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x1, 0x4}, [{0x2, 0x1, r1}, {0x2, 0x8}], {0x4, 0x1}, [{0x8, 0x1, r5}, {0x8, 0x0, r7}, {0x8, 0x1, r23}, {0x8, 0x2, r24}, {0x8, 0x4, r28}, {0x8, 0x4, r33}, {0x8, 0x4, r38}], {0x10, 0x43fb6c1f6d0c72b9}, {0x20, 0x1}}, 0x6c, 0x5) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000000)={0x81, 0x7}) r40 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0xfffffffffffffe37}, {0x0}, {0x0}, {&(0x7f0000000140)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x8) ptrace$setopts(0x4206, r40, 0x0, 0x0) tkill(r40, 0x1) ptrace$cont(0x18, r40, 0x0, 0x0) ptrace$setregs(0xd, r40, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r40, 0x0, 0x0) 23:47:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000700)=0x283) shmget(0xffffffffffffffff, 0x1000, 0x6570668a2ec2be5d, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000640)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xc9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getpgid(0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x80200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0xfffffffffffffe0a) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x4], 0x8000, 0x400, 0x2, 0x10000}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2003, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6f, 0x0, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x6, 0x0, 0x0, 0xc1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000500)=""/199) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_security(0x11, r5, &(0x7f0000000080), 0x0) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, r5) request_key(&(0x7f00000004c0)='blacklist\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f00000007c0)='em0\'\x00', 0xffffffffffffffff) r6 = request_key(&(0x7f0000000900)='trusted\x00', &(0x7f0000000940)={'syz', 0x2}, &(0x7f0000000980)='syz', 0xfffffffffffffffa) r7 = add_key$keyring(&(0x7f0000000ac0)='keyring\x00', 0x0, 0x0, 0x0, r6) request_key(0x0, &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000240)='keyring&-\x00', r7) [ 1501.034191][ T2893] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 23:47:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000240)=[r2], 0x1) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) ptrace$setregs(0xe, r8, 0x8001, &(0x7f00000001c0)="6132e027a95c431c7f2ccb42a32a85637b5b6023608387") r9 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000380)='asymmetric\x00i\x8dRT\xcc|\rO\xe2\xbe\x95\xe2\x80}5y\xd6\xda1\xbd\x15\xddH_\xed\xe3\xae\x0e\x14\xc1\x87$\xae&\x90cPh\xb1,\x93[D\xd7\x88\x9dI^AD\xf4[3\xe17\xfa\x05\xc7\x16\x1c\x02G\xa8z\xd3\xda\xc1\xd01\x87\xbf\xdf\xe6)\\=\xc2\x15\x7fu\xf1n\xba\xb8\xdc\x80\x0f\xf8m@\xb2\x88\xce+\vXKa\xaeK\xed\x89<\x84_a\x8e\x82\x15\x9d\x9d^\x99\xa6\xbd\xbd\v\xd6\x1d\x80%#}\xaeDZa\xb9\x01\xff\xca\xf5\xc5\\F)F]\xc0\xfe\xd9\xff\xc79\x86\x01\xf9\xf1\x00\x80\x00\x00\x00\x00\x00\x00\x19@\xd7\x1ds\b4\x98U\x17Od\xaa\x98\x1cu\x13\x1c<\x01 \xe5\xf6\x8b\xe6C\x99\xe4\xc5\xf5v\x98{\xce\xc40N\x03\xcb\xffh\xf2h0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0x78, 0xb, 0xf9, "b21d8f2955708a7a8202d0e50136bf18", "ab1daca2adebc03562d0f1d2a39b0fc9c0b0ac53d604f7581227540bd729fdb470584aec6cba6af71ec7618109f44f1397b09973bb853589392c47e64209d7523440775dd5bd8ed0ffac9f0acda460d815f33e7d125c072166b82864d662e85c6a1df6"}, 0x78, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r3, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb0000000000000000000000000000f3ff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x1, 0x400}, 0x20000, 0x314000000010000, 0x0, 0x0, 0x5, 0x0, 0x1f}, 0x0, 0xa, r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r10, 0x0, 0x1dd, 0x28, 0xffffffffffffffff, 0x3) 23:47:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0xa0080) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x401, 0x3) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0xfffffffffffffffe) 23:47:12 executing program 4: socketpair(0x18, 0xee00000000000000, 0x2, &(0x7f0000000280)) 23:47:12 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000e365f0110f0e09a2341cfd4f27cb0063c4b0d8db71c4a0e6cd06000000000000008612e351fea05af8645e4449dbbb9888bc378a63c605061b725d28e99082a7cadc927bf67a09b61dd93140f133bb3e32bddf42ceb9d3f8134cd89ea640c2779c5efb7ce0a423bce08b6962f23c84a2", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r2}, 0x8) r3 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x1, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={r2}, &(0x7f0000000080)=0x10) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r4 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) r8 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r8, 0x1, &(0x7f0000000680)={{0x0, 0x0, r7, r6, r7, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r5, r5, 0x9}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r9, 0x335d, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4}}, &(0x7f0000000480)=0x9) r11 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r11, 0x400454ce, r14) r15 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r15, 0x1, &(0x7f0000000680)={{0x0, 0x0, r14, r13, r14, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r12, r12, 0x9}) setresuid(r6, r10, r13) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r16 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r16, 0x0, 0x0) tkill(r16, 0x1) ptrace$cont(0x18, r16, 0x0, 0x0) ptrace$setregs(0xd, r16, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r16, 0x0, 0x0) [ 1501.364716][ T3014] Enabling not permitted [ 1501.401831][ T3014] Enabling of bearer rejected, failed to enable media [ 1501.883935][ T26] audit: type=1326 audit(1570837633.451:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2897 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:13 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x206, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:13 executing program 4: socketpair(0x18, 0xee01000000000000, 0x2, &(0x7f0000000280)) 23:47:13 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000000)={0x8000, "1a6323d229c6d6901d8d16b9c1a684b6fd1c4e15d0826ee620ee5cca00570dae", 0x2, 0xb05303037bcc9700, 0x6, 0x1, 0x4, 0x2, 0x80000001, 0x7}) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) socket(0x5, 0x800, 0x97) accept4$packet(r2, &(0x7f0000001f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001fc0)=0x14, 0x800) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000002000)={@mcast1, 0x61, r5}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000000998144df57", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r8 = creat(0x0, 0x0) ftruncate(r8, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:47:13 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0xe, r0, 0x0, 0x2000000000000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r2, 0x400454ce, r5) r6 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000680)={{0x0, 0x0, r5, r4, r5, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r3, r3, 0x9}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x9, 0x8, 0xffffffffffffffff, 0x0, r4, 0x0, 0xfffffffffffffe00, 0x9}) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) socket$pptp(0x18, 0x1, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffff7f}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x986b}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r3, r5}) 23:47:13 executing program 4: socketpair(0x18, 0xef00000000000000, 0x2, &(0x7f0000000280)) 23:47:13 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x8d06}, 0xb) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000180)={0x7, 0x79, 0x2}, 0x7) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x1, 0x1, 0x8000, 0x2, 0x7f}) [ 1502.103374][ T26] audit: type=1326 audit(1570837633.671:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3317 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 [ 1502.136071][ T3291] Enabling not permitted [ 1502.181790][ T3291] Enabling of bearer rejected, failed to enable media 23:47:13 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000380)=""/151) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000100)=""/150, 0x96}, {&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f00000001c0)=""/184, 0xb8}, {&(0x7f0000000080)}], 0x5, 0x0) r4 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x2, 0x80) vmsplice(r4, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x335d, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f0000000540)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000005c0)={r6, 0xff, 0x10}, 0xc) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0x335d, 0x0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x40010, r7, 0x4f) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) r8 = getpgrp(0xffffffffffffffff) tkill(r8, 0x11) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:13 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f0000000180), 0x0}, 0x20) 23:47:13 executing program 4: socketpair(0x18, 0xef01000000000000, 0x2, &(0x7f0000000280)) 23:47:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="17001000", @ANYRES16=r1, @ANYBLOB="090600000300"/23], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000ac1414bb0000e2ffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r8, 0x8040ae69, &(0x7f0000000040)={0x10000, 0x7, 0x401, 0xb, 0x5022}) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r9, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1502.902152][ T26] audit: type=1326 audit(1570837634.471:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3317 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000040)={0x101, 0x34325842, 0xbd9, 0x7, 0x1, @discrete={0xfff, 0x400}}) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) 23:47:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x82100400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x309300, 0x24) getsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000000100)=""/246, &(0x7f0000000040)=0xf6) r1 = gettid() r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) wait4(r2, 0x0, 0x8, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) open(&(0x7f0000000200)='./file0\x00', 0x131802, 0x180) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r6, @in6={{0xa, 0x4e22, 0x0, @loopback, 0xdf64}}}, 0x84) ptrace$cont(0x18, r1, 0x0, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0x335d, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r7, 0x7706, &(0x7f0000000080)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:47:14 executing program 4: socketpair(0x18, 0xf000000000000000, 0x2, &(0x7f0000000280)) 23:47:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) clone3(&(0x7f0000000240)={0x40800600, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), 0xe, 0x0, &(0x7f0000000100)=""/176, 0xb0, &(0x7f00000001c0)=""/75}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3}, 0x0, 0x0, &(0x7f00000002c0)={0x5}, &(0x7f0000000340)=0x8d, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x4}}, 0xffffffffffffff81) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) ptrace$setregs(0xd, r3, 0x6, &(0x7f00000004c0)="2927a691917166184d6dfb0e71dc5c1cab212ce5f3b430947c61bb00d8bc775e978774499feb3cc44f87be107c4645e6aae1826a3f56ce29df510ae0e42282ab2042570959f60759b67f29ab5f9f5c9a98f46358fc6733737914abc1b3a6a35595cd1e2103754ac3d87f3b357a2b503497c3e86db5d368addf43d59b0beaa083ecb195ebc3c78262b15a73b3b1584f9f0db5c58114ace8d0172510b1c69c967453d2ae1af2691813430e2b3cde7ec44e3d85acf4d21673ba") bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r2}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000300)='\x00', r2}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r1, r4, 0x0, 0x3, &(0x7f0000000380)=']\'\x00'}, 0x30) 23:47:14 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x207, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="095a00000000000000000100000000000000014100000014001700000000000000006591035e1bb1ab41"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}}, 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r8 = creat(0x0, 0x0) ftruncate(r8, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0xfffffffffffffd3e, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0x0, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:47:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xa972e3beda684c18, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:14 executing program 4: socketpair(0x18, 0xf001000000000000, 0x2, &(0x7f0000000280)) [ 1503.088949][ T26] audit: type=1326 audit(1570837634.651:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3923 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) tkill(0x0, 0x1) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x2, 0x15, 0x10, "4159a9e325a8887f2813e724a16ef811537b01bfeb6fa9ed3fb5d0f13ebeca20f7eb7d18fd7dcd9128f1ee9cb7beb15502910ef9939bb472118b861852206bcb", "520b783026584c459c4ec60a4885e533de4852e2107e6c9b89b69a3755b08895b59de151684f6829f2e6b43fb06ee05f797662c00991bc9e06686fc31ec1f79f", "babd843d72fa0625062072ecbf8012cbb523c9172641ea5993693cfde8fee744", [0x2, 0x2]}) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 23:47:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000040)=0x200) 23:47:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000100)={{0x2, 0x3, 0x100, 0x0, 'syz0\x00', 0x5}, 0x5, 0x1, 0x747, r3, 0x7, 0x4, 'syz1\x00', &(0x7f0000000000)=['self^cpusetkeyring\x00', '\x00', '!%@selfvmnet1\xdfbdev]em1/\x00', '*bdev%%wlan0!nodev\x00', 'trustedGPL\x00', '#[md5sumproc-[!\x00', ')}&):md5sum:),.vmnet1#securitycgroup#+]Gbdevvboxnet1ppp1\x00'], 0x93, [], [0x0, 0x7, 0xdbc, 0x1]}) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000000040)=0x14) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}}, 0x50}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r7 = creat(0x0, 0x0) ftruncate(r7, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r8, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x1) 23:47:14 executing program 4: socketpair(0x18, 0xf100000000000000, 0x2, &(0x7f0000000280)) 23:47:15 executing program 0: r0 = dup(0xffffffffffffffff) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0xe00000, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000480)=0x9) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000280)={@pptp={0x18, 0x2, {0x3, @rand_addr=0x1ff}}, {&(0x7f0000000040)=""/119, 0x77}, &(0x7f00000000c0), 0x2e}, 0xa0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x95) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000038000000f72da473712c04f16bcb818888fc48b9dd77ec70381aa37e288af07553b27579776ae20eecacab214c954a271650e2ff6703b74a537a0000"], &(0x7f0000000200)=0x5c) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x402000, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000340)={{0x88, @loopback, 0x4e24, 0x2, 'nq\x00', 0xc, 0x9, 0x3b}, {@empty, 0x4e22, 0x2, 0x70a, 0x4, 0x2}}, 0x44) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000180), 0x0}, 0x20) 23:47:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r2, &(0x7f00000000c0)=[{0x0}, {0x0, 0xffffffffffffffeb}, {0x0, 0xffffffffffffffbd}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x20c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:15 executing program 4: socketpair(0x18, 0xf101000000000000, 0x2, &(0x7f0000000280)) [ 1503.549911][ T4371] Enabling not permitted [ 1503.604397][ T4371] Enabling of bearer rejected, failed to enable media [ 1503.883029][ T26] audit: type=1326 audit(1570837635.451:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3923 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:15 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x208, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0xfffffffffffffe01) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:15 executing program 4: socketpair(0x18, 0xf200000000000000, 0x2, &(0x7f0000000280)) 23:47:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0, 0x3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000180), 0x0}, 0x20) 23:47:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x5) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r3, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000001040)={@dev, 0x0}, &(0x7f0000001080)=0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="31a8867c8ba08398"], 0x50}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r8, &(0x7f0000000640)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c040000280007050000781e23d6000000130000", @ANYRES32=r10, @ANYBLOB="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"], 0x45c}}, 0x0) r11 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r11, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi={0x6, 0x0, 0x0, 0xd51f3fc0876d6e81}}) dup2(r11, 0xffffffffffffffff) syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'gretap0\x00', r5}) bind$packet(r7, &(0x7f0000000640)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r13 = socket$unix(0x1, 0x2, 0x0) bind$unix(r13, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r13, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r13, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r14 = creat(0x0, 0x0) ftruncate(r14, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r15, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1504.037607][ T26] audit: type=1326 audit(1570837635.601:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4738 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 [ 1504.085964][ T4726] Enabling not permitted 23:47:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f00000003c0)={0x42009000, &(0x7f00000000c0), &(0x7f0000000140)=0x0, &(0x7f0000000180), 0x41, 0x0, &(0x7f00000001c0)=""/194, 0xc2, &(0x7f00000002c0)=""/234}, 0x40) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x82, @time={r4, r5+30000000}, 0xe4, {0xeb}, 0x80, 0x414b63e9829d1696, 0x3}) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:15 executing program 4: socketpair(0x18, 0xf201000000000000, 0x2, &(0x7f0000000280)) 23:47:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x7, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x73, 0x0, 0x26, 0x2}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x6f, 0x0, 0x2c, 0x2}, @struct={0x5, 0x3, 0x0, 0x4, 0x1, 0xa9, [{0x5, 0x2, 0x3}, {0xf, 0x3, 0x2}, {0x2, 0x2, 0x80}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x8, 0x2}, {0xd}, {0xc, 0x2}, {0x4}, {0x4, 0x4}]}]}, {0x0, [0x0, 0x30, 0x61, 0x0, 0x0]}}, &(0x7f0000000100)=""/101, 0xa3, 0x65, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1504.106517][ T4726] Enabling of bearer rejected, failed to enable media 23:47:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000001c0)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) 23:47:15 executing program 4: socketpair(0x18, 0xf300000000000000, 0x2, &(0x7f0000000280)) 23:47:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x223, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) [ 1504.822993][ T26] audit: type=1326 audit(1570837636.391:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4738 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:16 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x209, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:16 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x408000, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000200)={0x7, 0x3, 0x28}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00i\x8dRT\xcc|\rO\xe2\xbe\x95\xe2\x80}5y\xd6\xda1\xbd\x15\xddH_\xed\xe3\xae\x0e\x14\xc1\x87$\xae&\x90cPh\xb1,\x93[D\xd7\x88\x9dI^AD\xf4[3\xe17\xfa\x05\xc7\x16\x1c\x02G\xa8z\xd3\xda\xc1\xd01\x87\xbf\xdf\xe6)\\=\xc2\x15\x7fu\xf1n\xba\xb8\xdc\x80\x0f\xf8m@\xb2\x88\xce+\vXKa\xaeK\xed\x89<\x84_a\x8e\x82\x15\x9d\x9d^\x99\xa6\xbd\xbd\v\xd6\x1d\x80%#}\xaeDZa\xb9\x01\xff\xca\xf5\xc5\\F)F]\xc0\xfe\xd9\xff\xc79\x86\x01\xf9\xf1\x00\x80\x00\x00\x00\x00\x00\x00\x19@\xd7\x1ds\b4\x98U\x17Od\xaa\x98\x1cu\x13\x1c<\x01 \xe5\xf6\x8b\xe6C\x99\xe4\xc5\xf5v\x98{\xce\xc40N\x03\xcb\xffh\xf2h0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0xffff, 0xe, 0x800, 0x1, r3}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r4, 0x3f}, 0x8) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1505.765080][ T26] audit: type=1326 audit(1570837637.331:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5373 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:17 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x20a, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) 23:47:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$swradio(&(0x7f0000001480)='/dev/swradio#\x00', 0x1, 0x2) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) writev(r1, &(0x7f0000001400)=[{&(0x7f0000000000)="f38139170f254fd9619361b582c97b6d4230ae0c9389f60620f6127e995c0bdbabc8a7295740c70ac5b81c8d02d5d39374fef065f42bb47c355598286178e8a926dd", 0x42}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000100)="cef62833c0c35a1210501c61bf7ddad1b18778fdc58675fcab8e2171b3d38801a5ac64a00251a4f7dc1bacdd3b34381ff56aa9bd2edfc10aa49250ebdd01ea8eb29b255527e6112e9b729046bd4685c1606141c7f0b17e30cbb940bf2feae31a044086d3980fc741f0146e44260d8aafdec971d08f6ead9b1a3aba6f01d747cc34e1016a1a", 0x85}, {&(0x7f00000001c0)="df9e41bdaff6171900b6a97267448c221d15c8e133c73bb16a5ec9e61e8bfe34b29c49b1650fd9ea4595f9aa676b55aacf6a4873de6ee571e6900c4637b51c39adfd9f19230c2999d9942cfa5d5314b5ed65b47e45ffed9c6e2d48335feecae88c5dc18271bf517c557e5906b406c85ad53481a5ac4b645d5238205b73", 0x7d}, {&(0x7f0000000080)="47fbb53803a410781de4242d26924710898112778de9780490dcddac6917b7605609d77f4680c2c2c56f6a08ce609c41048c371e37a1f8a15d", 0x39}, {&(0x7f0000000240)="0c7bd2a5a98923435836ebea6a8fe2cf50924f8692a285a5fdb6a400", 0x1c}, {&(0x7f0000001300)="509c646e6e2e1c9d798b93a03436b97a15c765c57218189858d376d6ec2bc9c51ead9692ff65cd08be44b6196930496ce5dcb839cea4cbc77003e64e903c84785e1350d134f4de616af2ae19f79f9713840b3804fe06fb5d21d1f36d0c4b385f2a730b03ca63ef40fc5967c440ece9a2956aaf4848adbdeda1cc0fec785ac22882fe137b0ae245026815f894fc1d9c829f0aa63d9b3bd42a047bc18137f76df26f46a8da", 0xa4}, {&(0x7f00000013c0)="6be69d9992a0", 0x6}], 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = syz_open_dev$media(&(0x7f00000014c0)='/dev/media#\x00', 0x2, 0x20000) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0x335d, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001680)='/devshotg\x00\x00\b\x00', 0x400, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000001600)=r8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="81000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r9}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000001500)={r9, 0x1}, &(0x7f0000001540)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={r10, 0x8}, &(0x7f00000015c0)=0x8) ptrace$cont(0x18, r4, 0x1, 0x1) 23:47:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:17 executing program 4: socketpair(0x18, 0xf500000000000000, 0x2, &(0x7f0000000280)) 23:47:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) semget$private(0x0, 0x403, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 23:47:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000080)) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0xffffff4a}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x10000000000001fd, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r7, 0x0, 0x4, 0x0, 0x0) vmsplice(r5, &(0x7f0000000a00)=[{&(0x7f0000000040)="ce", 0x1}], 0x1, 0x0) splice(r4, 0x0, r6, 0x0, 0xe211, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:47:17 executing program 4: socketpair(0x18, 0xf501000000000000, 0x2, &(0x7f0000000280)) [ 1505.937737][ T26] audit: type=1326 audit(1570837637.501:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5652 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0xee, &(0x7f0000000100)="8c8f707f0c44a676d893a42b107e56a90a7c3aa0b25ff489fc693187244f79f2542c07053b5bda1d3cf83986ff7f5bcc7f6f11dc054f109ff6798b6380b2314a256d96e14eddfe567fcc22062fcbc6be17b31bd855ca672acc972d2fa99b9ee7d632a8cab8ef274116bca32700c93375") ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) semget$private(0x0, 0x403, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 23:47:17 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="458342ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f000000000000000000", 0x0, 0x8}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) 23:47:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000000)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0x4, 0x7}, {0x7, 0x3}]}, 0x14, 0x2) getuid() getpgrp(r0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setregs(0xd, r2, 0x2909, &(0x7f00000003c0)="618b1d493add2ab2949e2989ef37470bb63bac3af35f40c15a7d63fd808599c5cead1f359c7dc08d5a40adb51d3f510506a6933f8711fb771eb55cefb67faaa5c83abe6902da7c44f3c06b300c447ed7c300110d4d7c924ff474983eac5d63d7fee234d19e0b6719e47cba393d5fbc8adbb9f654d4da495001c15927f66069acb9dbf983f690d9a1ab5b7fb816415e32262b370ccb1d63c8bfa64f7dea6ed5b63a21d33b9f2ca666d2b4c483fdef6b37c5d2929e") r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ifb0\x00', 0x7c4277e62f1b888c}) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1506.728384][ T26] audit: type=1326 audit(1570837638.291:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5652 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:18 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x20b, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r4, 0x400454ce, r7) r8 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r8, 0x1, &(0x7f0000000680)={{0x0, 0x0, r7, r6, r7, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r5, r5, 0x9}) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000100)={{{@in=@dev={0xac, 0x14, 0x14, 0x10}, @in=@empty, 0x4e22, 0x6, 0x4e21, 0x0, 0x2, 0x20, 0xd2cb70422ce712e7, 0x61f61e724d9aa8c5, 0x0, r6}, {0x4, 0x60000, 0x4, 0x4, 0x17, 0xffffffffffffffff, 0x7fff, 0xa3}, {0x9, 0x800, 0xe4de, 0x800}, 0x200, 0x6e6bbe, 0x8a44679917e073ca, 0x0, 0x5, 0x3}, {{@in6=@local, 0x4d5, 0x2b}, 0x2, @in6=@mcast2, 0x3504, 0x1, 0x2, 0x2, 0x7, 0xdd2400, 0x40}}, 0xe8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:18 executing program 4: socketpair(0x18, 0xf600000000000000, 0x2, &(0x7f0000000280)) 23:47:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'io'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'memory'}, {0x6, 'cpu'}, {0x2d, 'pids'}, {0x7b, 'pids'}, {0x2d, 'cpu'}]}, 0x2c) ptrace$cont(0x18, r0, 0x0, 0x0) accept4(r1, &(0x7f0000000040)=@tipc, &(0x7f0000000140)=0x80, 0x80800) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) semget$private(0x0, 0x403, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 23:47:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f600daa3323e66d3c5455ad61f", 0x0, 0x3d9582915e83cfe8}, 0x20) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x20) 23:47:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) semget$private(0x0, 0x403, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 23:47:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:18 executing program 4: socketpair(0x18, 0xf601000000000000, 0x2, &(0x7f0000000280)) 23:47:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1802) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x100000) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) ptrace$cont(0x7, 0xffffffffffffffff, 0x0, 0x400000) [ 1506.925527][ T26] audit: type=1326 audit(1570837638.491:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5999 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:18 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3, 0x21a}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) 23:47:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = eventfd2(0x10001, 0x80000) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x0, &(0x7f0000000040), 0x1a, r4, 0x5}) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r5) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x800, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000300)={'filter\x00'}, &(0x7f00000001c0)=0x54) r8 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r6) r9 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r8, r9}, &(0x7f0000000700)=""/243, 0x356, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00\v\x00\x00\x01\x00'}, &(0x7f0000000180)}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 1507.722526][ T26] audit: type=1326 audit(1570837639.291:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5999 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:19 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x20c, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) semget$private(0x0, 0x403, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 23:47:19 executing program 4: socketpair(0x18, 0xf700000000000000, 0x2, &(0x7f0000000280)) 23:47:19 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x3c7, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80800, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x7f) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000080)={0x9}) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$capi20_data(r3, &(0x7f0000000100)={{0x10, 0x8, 0x4, 0x82, 0x93f, 0x1}, 0x55, "5c39fa2a8c6f13b7a41e40b748c91ea0e95764f0b16ac06138c7c9b167874261a0b30c6bad3d49c8f4460abac9062c0b84e5e97a9626b8871e6f59af4e16b478e5e67c5b6a64dc1f814ace3107335e02c8d8a62622"}, 0x67) 23:47:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) modify_ldt$read(0x0, &(0x7f0000000140)=""/181, 0xb5) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x401) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) clock_settime(0x1, &(0x7f0000000080)={0x0, 0x989680}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$CAPI_GET_SERIAL(r3, 0xc0044308, &(0x7f0000000040)=0xfffffff7) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:19 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000002c0)={0x2, 0x0, 0x2, 0xffffffff80000001}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000300)={0x3, r3}) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000280)={0xc8b820c9228f6da5, 0x5, 0xfffffffd, [], &(0x7f0000000040)={0x980905, 0x7, [], @p_u16=&(0x7f0000000200)=0x1}}) 23:47:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000000)=""/125, 0x6}) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0xd10, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000140)={0xf92, 0x18, [0x2, 0x7fffffff, 0x7fffffff, 0x2, 0x8, 0x9]}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:19 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x82000, 0x0) 23:47:19 executing program 4: socketpair(0x18, 0xf701000000000000, 0x2, &(0x7f0000000280)) 23:47:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) semget$private(0x0, 0x403, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) 23:47:19 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r1, 0x400454ce, r4) r5 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x335d, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0x335d, 0x0) getpeername$packet(r7, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000780)=0x14) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f00000001c0)="a32ecf319fb32a1bdb04bc216d08bb18e1548a38a9a14d8dae4880746890d9918c2ce8c8965f0d839fba4521b58e05ef68279741d7c21c3856e10537848671b73f5c3f1408ec32741ba0c3f25cbae0") setsockopt$inet_mreqn(r6, 0x0, 0xea896a41d30b32c6, &(0x7f00000007c0)={@multicast2, @multicast2, r8}, 0xc) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000680)={{0x0, 0x0, r4, r3, r4, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r2, r2, 0x9}) lsetxattr$security_capability(&(0x7f0000000000)='\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [{0x200, 0xff}, {0x3ff, 0xffffffc0}], r3}, 0x18, 0x5) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) [ 1508.676909][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1508.676922][ T26] audit: type=1326 audit(1570837640.241:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6429 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:20 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x20d, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) semget$private(0x0, 0x403, 0x0) setns(0xffffffffffffffff, 0x0) 23:47:20 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000040)=""/31) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000000)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:20 executing program 4: socketpair(0x18, 0xf800000000000000, 0x2, &(0x7f0000000280)) 23:47:20 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000000)={0x200, 0xffffffff, 0x4, 0xffffffff, 0x8, 0x4}) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x800, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) r5 = getegid() write$P9_RGETATTR(r2, &(0x7f0000000300)={0xa0, 0x19, 0x2, {0x20, {0x2, 0x3, 0x5}, 0x108, r4, r5, 0x80000001, 0x6ff1, 0x1f, 0x6, 0x80, 0x5, 0x100, 0x800, 0x8b, 0x1, 0x7fffffff, 0x3ff, 0x6, 0x807, 0x9}}, 0xa0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1508.898129][ T26] audit: type=1326 audit(1570837640.461:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6650 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:20 executing program 4: socketpair(0x18, 0xf801000000000000, 0x2, &(0x7f0000000280)) 23:47:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) semget$private(0x0, 0x403, 0x0) setns(0xffffffffffffffff, 0x0) 23:47:20 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) semget$private(0x0, 0x403, 0x0) setns(0xffffffffffffffff, 0x0) 23:47:20 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:20 executing program 4: socketpair(0x18, 0xf900000000000000, 0x2, &(0x7f0000000280)) 23:47:20 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1509.694382][ T26] audit: type=1326 audit(1570837641.261:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6650 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:21 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x20e, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:21 executing program 4: socketpair(0x18, 0xf901000000000000, 0x2, &(0x7f0000000280)) 23:47:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) 23:47:21 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) vmsplice(r1, &(0x7f0000003600)=[{&(0x7f0000000180)="3d7b489f388975dd79f52ea2cde589e924872367c6a1308c4108244b3029c68ea9c126760d8b64ac2a8d690db8ddf6c061653f4e795311c0c77650fa76d6365e3abd7cd2d200b126a5213191d08d2c9fed4e1a7d737b3ffdba1798a05134d9433a3a931d669a0b0ec85ad1bf6fb7b80ede7d8b49df4bd23687acbe819384df7b154c85511610481a41fa259c14a1f73ac20c7f053ef984f4646779b95a868a083c885ec4ad081625f7f5cdb3473e603d9f589b550599331c899cc90f8bf348127bddb11649b53c7c398ca2218082bc777d7a3ffd8a6cdc62af9525ea4dd39810a93c5217b8f2653fdf4e38dc9247320573aba65aa0eb1afbc4b6bb1ac87cae1d2c69cadae26af0b95587e6f0e8bf84f256e70d922f4d8d6e28459f54914ab10faddfa9011f058309da5325b22adaec259ab44de3cd5433de4cc32a4e06661351e6d366505ada6b695b8e0de1cd4a3db2ec8bfe058cefc967a3b0e4fd33431fa0b1b609d8c15eeecc9adf9293aa7fc4162c96926e9db130068363ede22aecfc7b465e56cd82ccb97a51b3ae0273ad21766ec984e3c6a8ed7962da53da38515f2274a047bc8b4f5b8764fd7b3badf3b459ff3a0861d001184e97aaa098e3cd4a83e2b6bd8faed1503819a440dcf08f79965337e987820315f4b5af0dbf8e4eb14afc6451d1d86ee3d9ef5b4c48e79dcc672baceae3e4241af63cd30998b71450cb8ce6d40364d6df2d790e6b267bd77de7fa8bffb1c2b46dabe58c4122e11229e20b8283c3d22ff20c78ab77e1a2d45b620ecbdf5cf5edbb3e5bca4d1a0bff26847fab074c3e9add067e8bfa04345f20cc7a44eb77ffc44d02bf5a31d6602f3b7a2e352b368e02cd435dd152b1e2bd2d4328d41dd07af2eb30d4be2ac2bc710d6ed7530ca0fa025e5b94ed70a6c020ad5de086add020938d80f0a2ad25d8aa0c5c33ea9c57e478cf939a946c246764f14d708f1ebb37ca4c169ffc9ecd708736ef9392586ffcdb10e1a9696a0f4f9bdc29006dff9cda8107d7e4d726d461cf0a8fe3d989ff98cb1e57eeda4b2260868973577b6a90ca5c6248416915a6ce72a508f0897097ecfb4911eb098750d71852f023273cda9c97f368ca431ef61ac4eaf8c5aba14867ff30a73788aec1a59e89a75d4a7f0e30af92a1a29e95c4b53be5049f61e3984f5a2d9a8d93a6e0623e049a2f2505a8385996a2bc39a6c281e27d4d36441ecde2f07da389a54b1996e52191623cc75a841c70f588fc26e3fc94cdda23d2d63dd5fdfbc584fa70559da897a8222536d9f42de1ab1ebe3b770cd372943047d608aa8bfce80efd837b6f165df8e732f02947addf72447f919f678705a2047a67e0192696e7f6328f484d359d63852601f6202de29444964b94fc4b162288563b816994fb598a92da9a818245795868bc50a88644813242b58373c0a8fe149e37f5df26e4c645bda5c29983cba543f9eb40990549e1bc8ca16a1e219b34a6e0b7ebacedcf0c0d0a1f0e86935a3d30ae33244c7df4e55645483d1057e8850cae1b587c148982fdeee67c6281a210b18945c8bc6951696e972c5df4b20991800428697f17870fb0285f219affca77d835f5e181509b632fcbc82c2bbfc82c13e6ff9a8a7729e8a000ddc9b858f7dba6032ecb2a903c568fd1147c54c42d16542a717574d2345f3719c370d62d9fecd81bbfd6ccf88ebb4340d4e4aaaa918b2e13697e2b14f13c449731745d95cb2d76214ae1d204566ba521f44cb95aa375b691c6fbf87f897681b53c0bb5aaa8f7a935265b15f614ecfb38b8b3448ede7864f4bfa0c87819df159e661de8640e198e325a6fc02c3d84c3e38a1649d0725f389b68e71ca9e6f24a269cf106fb4b9ba2a57d926cb4c4b3e433de80dd91223e16baaecbef6ad4e3c0a267a8c39aca3f00763fe6b4df5ccaeb1294b5ee07899399212131c3067b3d73f5e8047646a22db9bddfc50173805152ce1f79e684f78f237a7d5ce0b1f7d3ebde8c6ecab466257793f4304a1c19cb8636c492049e5d963d899b7d26582bcaea36b276bb595e5d3c59d3aacf0a74f098dddb4453537ad630f6e9a1c74a9b17618e596acacc3cf4c7f56dee9b9b0979396b7b2e082b6fef004c5f20dfcdcadb66167692f45103c69bec6bbb29d92aa735bd2c49de273ed93e803dd1e711de23e97fb427c9a286c6ab541e074da8eb5e5fa73ecea4ed071394f5127395571333b6522cd74be733f8853a928915ff3d2b8995bb983d1c1ed3f2dd27e626680d4f46bece6003220a7ba6d20a575134eb06257526db696c99dfde386c1e0d99a6a28791d52e38baadcc8c8562bb370de737c914600626127b490e70a88bb2d0808d5c72dda50d41c1283d569ec9d9d5974e18331b9dc6b33973d493eb7145d39e16b96db32614a7ae0e20825258e778c199611794a629c5eadf6165c353c1561a2419f8ff76431dcb530b26d86af163adcbe32abb852a92f950dac790f865c484aa7a17343486000716f22e188ab11b245aac7b93cb56226757f00c62df8d5d3961c0f82d03767e1317f5fd570ac975cd2163be635ed25b2db4da14d3491b3fe530f5911c9c63701a7e35dfd7e578ecc3b954ab9ee632ef5dea8a4c358a089e75bfe0c6a07043e613c70918383cdd3a540988fe7113eee29b6e706672d3d06b1401a58b920e407886271238a72d4a4a1e698612a71effab19e668f56d7e651d00325e6506660171ae1def8b021440778464c13bf2ba36307fd8e2ec228e34aeb857f180dcdf3891f23ae91379a050a19e8a294e22a22e9d3a483041b4155f62b6348f491c0aedccf2a49c402bc5c642a86cf33871e5fa3baceecd8982b91ce93699aa6f99853a91b870e3cff8db157e8f0ae03faa38d2e496449f8eac3ee2dce60f905ef14e24b47fa4b1c4b731ea014ed13e9c3d8057f154430dde9f1e55658d2fb0bd292e2b0f4ff5aa47026ee525b91f9b70bf25c7d35f1acb9400b6b243c729d0ca3d933735b5f8d6f5085f643246ab7c0d0f7f9782bf524747ea1f4ebb5e3e883c263bb575a947c38e6dc07cbbc974a8e35a37fc478b1a1d25ac3d845e7dd4bcb2e9f30633a39f20fa7f827da24889c719fe43822045a0fb1672287c4dc7cb238f9cf6dd40ac26aaed4373c320b5ddcd185b464cd170d17256328739f644261cfe7c5a5cdc6ac7cd92fceb23479a8049ef50421c6915001444ccdd9546cf04dfd0dd7f26bc64ea456c525c8eb4384fcdc50d5f3974048c04cf403daeb39548779365bedf80f2b6c7f1e793b7a476472724051b130f94e00a75177887042567c93d12809d22446069e64991810331705a6b4254c0255f2abc3b40683269cf3336cfa44525cee95249e31eb1d2d79d74a4639593b59f8da60538d595bc9d9407a3a91086feab99b5509e52b3951cddc1fcec9bf997e22a835b97d888ff61ebbe05c47fbea817c5c0faf40a25294717d27f5b991ce3631d2dec56858720f3622950688a422996e74eb934534f63d1564fca95a38ad879af1c8c1dc013ded8215a6960279bbed2f9820a1a837cd15760ca38c31d7c0676c2d3bd3a1061082379f9e54f5552b4cb87048c17590c551aab913fd28b14b0a69447d667fa870b460c29cfa9a545f02caeeea07d6f90df4d3ebe979a36945c1ac922f87b0746f66dd90691432ff3e706b33021353addba2f7119a03b230dbc4a1112e9ec9f667ab89cdbdff3f17ce5799642f9b41755e6c274b072e0087629bb1389e1f622018eb8e62ed396b2ba4834443f6abc69c0960b6fd3a3e02a677753efa794efbda719224b8e7e251ac708e7d7d5cb5e05bdadb880862ec4e9479107329054faaabd68f171e89dbdeed052985cf423f4b5e9ba669ede3660e822c5e9e92f96a354a20bc10fdf8cf1d1580081c073abf9dd3dcfa74cc93dc39823e24aed16a8b65808db4f2c1c7d22b723afa916e2cd3cbd8e0451ad4113e493d872f96b821bfe40d65a1ce6cf21dcc868555ccc3f341adabea7c024d9422beff11760fd2145d205a98723735abd13f49371c6e197b4f5662a8e91ed22f5e1854c5cfd06c875ee13d0248a3350e97ebb49c92034567e3c492d1ab3086aa1ed522bf0ea069a1239f1c6097c0bec44d89ee7f71c72da7bc889d9a505000e53d8b1c6c9dc154eb48135f1c4bc733811b661c88abcb3598ddd803faa4a92a5fac17adbec671194110bc638267debb756d30a0e167b5a7b7473ab7d940665164b3251a470df3f612df98972874f6d428847e7e6cd5f9e39cee856e9bee9830ccb28eb683b2a041c0a8381dd9eba65518ebd82403aa80ae70ab2db824ff321ac78163e9a86cdd7033852c4dd82677bfda99d27bc6f594825b66f4da3a7b16cb164c467a1e20579585cf52db996c81a8d3a69c6aec410e3083cc84fd601e8eeac1eda90fb0933999ed2c5576f4d078ad3724b333917e30192dfcffb68ead01b732274926bef5e670abe78c3547426ddd813463343579fd8a61881cad013483ba2867a6dfb02c13e6b55820f80477e0b915182cb99cc7d0d3683ee5ff02035d5137434c31d139bce9d462c44faf747257298ec3d5f5483aa0b482860adfb9b2d5d975e4a33ca29053b7196743a367b3439adfeed99d8b41eaa1e97b9207df6221123b3af5e3abc0632288b906f0b09770132e5eff34f1300cf7a10402f951f419416780514486c395fe2b5704473c0dbbf6966e79133e2c1fbf7ee3c7f442146b25e92bfeca65889dec80b115865b790f8a2361c6722a27824513a32fd60e2925851d28ca9f8b1268cbf94d12a262d056bcfd6fd40a5201667db8f545cc1fb489eb80624a53383651d911fa55584d19f3d50ebdde8c8bb9d9b2599366a1498001f0303384aa455c11e781d2b52f487a3f8b67b0ddec2e358f360bcad9d1235a10072d7cf2796d345832597be847a5486bf922f7d8d3e47f24cd98f5a5fae00b1c65feb172e4a5a1dbc453aee6a2a06877236364641503d048004fb701a3f368988115fc5b776ee03d32b53887dddf12f33c7857b3a1bee159410a8ca3bb99daf71c2acc0dc5b61a711db414867ad81d7976720871b8fa2e8add38e32044ad9d727f2ba0b58707244eff48160c4ceb264cefa45788d4b449257c71ff4cf42e8c35b208d9e589227bf82a7d317d1b8c6342016d313c6520399303e9a16201d48d97d820e70840d7c234fba9f6dd6c33cf8f23bdfc293ff7ba81c8cdec34d07f0820401b78cbfed4114fa915352cc332f253b88c9b2fc5a885dfde7c8f42c3be233c1d3467617125b822ab9b82bfba59c08144ba610e60b9866245220ffa95596c8a934259b6deba652b1c59de4ce868bd8c50c922f6ece2300363e100b01b265a80eeca33148028ea85903147cb8994ac7db0addf89234842587c28b43a9b3b305a3678ba38fd6e98b5bc154a3c282df0f485e000b155f066cf0393bef4302dbdf6ef5b154524595de594448c868807e128425df54e40c8f1c6286aea2debbf1c38782a9a4b3495277bae3578fffd9b9e9f5411081ee6b92f73a92e803adf0f95a4a981be75b338b637be6aede8ae1f80743e46a9fa366cf781a3df71eb1f709ee5784fbcb69ec895a70279e37280497e9253a1e1eae6265656634c350b3afc587760e1573abae81141c92b8f21a59404d0297d0871b3728c35dba0d14ecf6ee3ac01a704b446a70b5f744f876847bf5d41894110d63298941774afc08f96686aadbc945ddd3c38f4179536962ff88555e5e89fa81f42b5b820915b0b28eed3b4a3ab2d9058f6579074a", 0x1000}, {&(0x7f0000000100)="befd3a7397d2e519e1d6c83665eb1bb3", 0x10}, {&(0x7f0000001180)="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", 0xfffffffffffffe2e}, {&(0x7f0000002180)="337f8ca600bbdc1572e36a04a03db9f0e99884f4cf26033d23a33d63b6283ffebc61ce698e2b94d2e447d237315ad2ecde6f9bd3235da99399ceace732a5bee15802b28292ea8607ba62348afced9a73319c72820825504913f6284a539529f4176a88b48280cc899b5344110458ed7def35995cc6888c69ba0342fb6141509c2773ff6eb0253dccf92d0bcf55800fdf9b17fbd678382f2ca6b1169e3f73d5c3e07cc58dd1301ea4d7f6c2ae84a71290a1380724d7c1b68377693c5230dc206b486b628f42b959b2f9108fb0b1323fbf1708396ffc79e287258b6d4c277f862843", 0xe1}, {&(0x7f0000002280)="83223642773cbb1e67af3f840ab5d20c751785a94033cc18190210cb0b3b0da390f2d044bad453282657ee709e6d2bc760952a4e60e36448b655fed1cd18a66f6a3869b295fbb17b4757ec446b6ef1c6b19912f20cef769fdd71018b4d20808a72c94035b83808abad6e642973633de59b3ffa2b1be9431e3096e22169805d78a6abf8ddb1a8ce3ddc0c962cfbc6790eeb601b19106c9edc6c5a83f8ccf996cddbb3b9344d8d413c3abcce19048d75e4e7a55ec0938949aa75", 0xb9}, {&(0x7f0000002340)="062c2b934b940f8952bdc9e102007d9eb9e0fdedce9f386b0148c3e082d86925cf985e1837673c705f686e423cff82403542411917cd6ed89e9cbe68560552859714ce446b6120f83a573ae035ae8a1045fbd6b08c742ccf4695f7bb643ca98526ba8bbc520f1e055d734b1397fb29fca29e6b95f0bd1774aafff1d3a81be450f7db499f5eaf3e599350a0f3e4fc61455c08b755dad5808319fe345a", 0x9c}, {&(0x7f0000002400)="73283743092fa6663b46bd1eb6a875603b5c88a1c389886f5ce04d213041f84f97a9ff093da177546d0f86ede45bea87cbb9ee742d9eaae81b80ef0b84661c0a538dc93008397f320061e2a3d0363f46626768ccb92a84465202fa7473e1f89d271cb71008ce6ead1822c8144598100229", 0x71}, {&(0x7f0000002480)="34b89bde237f7a071c772cf5950941947f6e9a28d3bf4659c8397056595a68f524a0c4d0f773a264d0848d9ba9b334b0f13e55996806aa6b13e965e5ee9d92ea467d9b8ec7aa50f57a530a716a8d0b88a7e1ab1903c608447b6277cc4abd2ede637e0892956f9ac57cf0b8667268052eae4e4a6f118539afa205e8dafc59314b4618403664e4019cc8726b24a5018dc13b781117f8c0d41d9c0a1f757b28fb43b921b44fa76f13d637b8b8406c766a", 0xaf}, {&(0x7f0000002540)="5acd2a31347647872f68ee05d5c769d3cbc6b55174cea43a5abc54e4605edf66075d7d17326a53dc536076c17e90e2a14c713fefd781814238ca9482e8f23f836bbaff8b0aa521e24522118a599cab47c99ac80265e645dc7a316ca996f156e0b17990cc4eb8e4280e58f05c824f80df89b4393f5e22c622bc682352f035d1d859f81e84b5de9e8c52a6a037291998979d152cf25054e1a2e001eb1ac92536db8c24e0847332f87bd1a92a4b8bf9564619171b4c89", 0xb5}, {&(0x7f0000002600)="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", 0x1000}], 0xa, 0x3) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) prctl$PR_MCE_KILL_GET(0x22) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000040)={0x5, 0x7fff, 0x7f, 0x7ff, 0x3}) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x335d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x7ff) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:21 executing program 4: socketpair(0x18, 0xfa00000000000000, 0x2, &(0x7f0000000280)) [ 1509.882920][ T26] audit: type=1326 audit(1570837641.451:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6797 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) 23:47:21 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='i\x02es\x00', 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x5) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000000540)="590eaac37b32dbda5f42e1fc92a87b95191bf85ca718d43137cfd6e4322a9846600a3e821bc942c6bad63a1f000000df8f241249736cceade5b96e01edbf63154fd8fa6b4406a3c856bd9a40ba0ef5132016f167e9a31b442923fb42ba5075c7baa1a01777a5a419d5a6701706e96d5a7c7f7550b278848b0718b5c09bd7c89b21da45264403ccdc7c61b213b4de5196df0bbfd1facc086008d9a3f806d5"}, {&(0x7f0000000400)="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"}, {&(0x7f0000000300)="e1e351839a946a25b67f40fc946c11dbf67f8fdcd070930cb2d575bd87ddb44a52375866884b247112aecd6957fcacca35386d6932ae5453f57ffe4a7417555ae98ed8c10e6d1d08d4cabc58f4aa1b45d8004d8c7b76e6a53d897a744de2e46021b8d07caadfcd890525d319f4fcb06ac0d3e320a30bff0683e18f8737555b27258dcdf67f75413a5232fe7ded68aebb87b7c28dcd8b34c4cdcd8ea3a6bdd6448a85ff6c944d0ba5d4db439e1fe3d26d31"}], 0xa86037391db98ab1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x100000000, 0x180bd471b8dc07a8) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x154, 0xf, 0x7, 0x200, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x5}, [@nested={0x10, 0x18, [@typed={0xc, 0x36, @binary="570c5c013a"}]}, @generic="e93d8a95e6d4331bd2afb22e75ffe5a96f235a5eb86291f508aee3036b699d7c644280e1b80f387494f105533da1fa540c3e585a136e6d6f8ea6e352ee51547f68c4ad0573c672542feb8b0e8d7e12fc9eda2e91161f2337dbc7a565e15d48eb5cf76f6907c4d3d31853103c181c03321c53094f36134969154851ada47db0c583205ae24d43f40a0f79bb914efec46ac989c55bc45c0fb754a150d63488", @generic="137d045ff12cc109355eec79a76b28bff591d2621d9a79d3cf4a65a97e7af54bbe6ee9a9631a182c4a4c8e076e8941bfb5f78f5b6741030bf315bc83633b3d6bdfedf67ccf2d4a9e4711bd1ac741ec8648a46466859f1f3bd6fcef0443ee3f03df66e6a6b8c3337f63eb05751f77853d34c340810688c905eef3eecd87ba2657f6ffb779c123fcf62a597109429bec24341e"]}, 0x154}}, 0x4054814) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4, 0x1, 0x2}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x2) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x7f}}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x4, 0xea, 0x800]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}]}, 0x40}}, 0x20000080) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x335d, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r5, 0x0, 0x1a, 0x33, &(0x7f0000000240)="d76ebb38ef93a44c3094c55c2657ff9b9bb4831ed5b13aa2183c", &(0x7f0000000300)=""/51, 0x7ff, 0x0, 0xf3, 0x0, &(0x7f0000000340)="15ba9a98ad9a1ef456d8740b81e8b996e3314e64dde21556563fb7ab1acc3da83bbb805f7ba6fb46ad392749370fabd99dd7e62c6fbf07de39bc0322d92e115be953a841214b27d27066824f49372168a582468e35e500781f59f03219add644356ec4ec81a15ad7d3aad2e41cc3b6d6b959350f29aa86ba73196a6907867ef4ab3c3c94ff61d19365b7763cc20afad8aebacc0ad7256ab34edfd3ffd1ae4ab5805717bbdb252a97fe660f74200e7fd8c67d2ceb947d9eeffbad8300add12e983a1cdce9a794dfbe43b25d7b9356a70affa394194c80ec7f667b9728dc4f53beb12003d7bfd1af89d9112e8e5a4bfc60a40093", &(0x7f0000000440)}, 0x40) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x335d, 0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYRES32=r8, @ANYBLOB="00020300000825000300e888451e97895f9a9aa4d2898a8857b0c08319de78d72057f162211caff3535b7bb4d8c81d83a628da13362443a654e6729590b36c855595514bcd06eddc2ac6b95dc9b55de6398dd0585d7899389ec0d54c48ea789ff029ecaba0ef5576e24e98c3ed4f90e1bf967d517cbae3f843b30c415565c3338d95e8f46355fe3a76af"], &(0x7f0000000200)=0xe) 23:47:21 executing program 4: socketpair(0x18, 0xfa01000000000000, 0x2, &(0x7f0000000280)) 23:47:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) 23:47:21 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f6800fe01b2a4a280930a060001fe80000214000000390009002d00", 0x22}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="220000001500070500e80000004c030502080303010000000800010041024fc10768", 0x22) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924924924923aa, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1510.240578][ T6821] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1510.688281][ T26] audit: type=1326 audit(1570837642.251:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6797 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:22 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x20f, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:22 executing program 4: socketpair(0x18, 0xfb00000000000000, 0x2, &(0x7f0000000280)) 23:47:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) 23:47:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000300)={"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"}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$getregs(0xc, r1, 0xffffffffffffffff, &(0x7f0000000000)=""/186) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000840)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, @in6={0xa, 0x4e24, 0x0, @loopback, 0x2}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e21, @rand_addr=0x7}, @in6={0xa, 0x4e20, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, @in6={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}], 0x84) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x402000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x101}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000010}, 0x40) tkill(r1, 0x1) syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x80000000, 0x40) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000001c0)={0x334, 0x6, 0x2, "5772e0275b4c5724eba15893164420d701fd9656779b4943f671d373c0e21405", 0x9506040a}) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1510.859689][ T26] audit: type=1326 audit(1570837642.421:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7031 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:22 executing program 4: socketpair(0x18, 0xfb01000000000000, 0x2, &(0x7f0000000280)) 23:47:22 executing program 3: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) 23:47:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup3(r0, r1, 0x0) dup2(r3, r2) 23:47:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000180)={0x101}, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1f, 0x200000) write$P9_RWALK(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f02000100240300000001000001000000"], 0x16) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000000)={{0x0, 0x0, @descriptor="2aa3d8f87ea5c26d"}}) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) tkill(r5, 0x2a) 23:47:22 executing program 3: unshare(0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) 23:47:22 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x30b00, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:22 executing program 4: socketpair(0x18, 0xfc00000000000000, 0x2, &(0x7f0000000280)) [ 1511.660840][ T26] audit: type=1326 audit(1570837643.221:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7031 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:23 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x7, 0x8) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000100)={0x0, 0x7, 0x1ff, 'queue1\x00', 0x1}) ptrace$setregs(0xd, r3, 0xfffff7fffffffffc, &(0x7f0000000000)="c504a6620000000000004507e742d910") ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:23 executing program 4: socketpair(0x18, 0xfc01000000000000, 0x2, &(0x7f0000000280)) 23:47:23 executing program 3: unshare(0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) 23:47:23 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f00000002c0)=""/384, 0xffffff23) signalfd(r0, &(0x7f0000000100)={0xffffffffffff7ffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) gettid() tkill(0x0, 0x9) rt_sigprocmask(0x0, &(0x7f00009fd000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 23:47:23 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x210, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:23 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x7b, 0x208000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14, r4, 0x300, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x5b3d54107ac5bc0d}, 0x30) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x900, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x5c4, 0x7, 0xfa, 0x6}, {0x1ff, 0x4, 0x61, 0x4}, {0x3, 0xf7, 0x81, 0x8}, {0x4, 0x4a, 0x6, 0x20}, {0x6, 0x7, 0x9, 0x7ff}, {0x1, 0x2, 0x80, 0x8c7}, {0x7f, 0xff, 0xfc, 0xfffffff7}]}, 0x10) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x335d, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r6, 0x28, &(0x7f0000000380)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r7, 0xb1b8, 0x10}, 0xc) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) [ 1511.775589][ T7282] Enabling not permitted 23:47:23 executing program 3: unshare(0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) 23:47:23 executing program 4: socketpair(0x18, 0xfd00000000000000, 0x2, &(0x7f0000000280)) [ 1511.809241][ T7282] Enabling of bearer rejected, failed to enable media [ 1511.817432][ T26] audit: type=1326 audit(1570837643.381:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7284 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:23 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e23, 0x4, @local, 0x80000000}, @in6={0xa, 0x4e21, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x7, @ipv4={[], [], @broadcast}, 0x3}, @in6={0xa, 0x4e22, 0x1, @loopback, 0x81}], 0x90) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/2) 23:47:23 executing program 5: socket$inet(0x2, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x332) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)=0x1) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x0, 0x7ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffffc}}, 0x0, 0xfffe, 0x8, 0x80000000000000, 0x13}, 0x0) r1 = fcntl$getown(r0, 0x9) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$int_in(0xffffffffffffffff, 0x80000000005016, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2f0000000400000000000000100000000400001c000000000600000000008e238f71df375e00"/47], 0x2f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgrp(r1) setpriority(0x0, r2, 0xffff) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, &(0x7f0000000240)=0xcaf) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) 23:47:23 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) getitimer(0xefd99600abad836d, &(0x7f0000000040)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x6, 0x7ff, 0x4, 0x4301, 0xe, 0x8, 0x8, 0x2, 0x7, 0x1b}) 23:47:23 executing program 4: socketpair(0x18, 0xfd01000000000000, 0x2, &(0x7f0000000280)) 23:47:23 executing program 3: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, 0x0) setns(r0, 0x0) 23:47:23 executing program 3: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, 0x0) setns(r0, 0x0) 23:47:23 executing program 4: socketpair(0x18, 0xfe00000000000000, 0x2, &(0x7f0000000280)) 23:47:23 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1512.615760][ T26] audit: type=1326 audit(1570837644.181:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7284 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:24 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x211, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:24 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3, 0x200}, 0x3c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x14, 0x2, 0x4000002, 0xff, 0x10, r1, 0x0, [], 0x0, r2, 0x4, 0x3}, 0xfd7f) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) 23:47:24 executing program 3: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, 0x0) setns(r0, 0x0) 23:47:24 executing program 4: socketpair(0x18, 0xfe01000000000000, 0x2, &(0x7f0000000280)) 23:47:24 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$cgroup_type(r1, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000002380)={&(0x7f0000001d80)=@can, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002bc0)=""/4096, 0x1000}], 0x1, &(0x7f0000002340)=""/10, 0xa}, 0x0) close(r2) 23:47:24 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x61204800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_open_procfs(r1, &(0x7f0000000000)='net/ipx\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0xffffffff) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:24 executing program 3: unshare(0x8020000) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(0xffffffffffffffff, 0x0) 23:47:24 executing program 4: socketpair(0x18, 0xfeffffff00000000, 0x2, &(0x7f0000000280)) [ 1512.797790][ T26] audit: type=1326 audit(1570837644.361:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7854 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00e9f58088000000"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffea9) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r8 = creat(0x0, 0x0) ftruncate(r8, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r9, 0x335d, 0x0) ioctl$TIOCSSERIAL(r9, 0x541f, &(0x7f00000001c0)={0xff, 0x3, 0x3ff, 0x20, 0x0, 0x6, 0xb56, 0xfffffff7, 0x6, 0x40, 0x3, 0x5, 0x1, 0xfff7, &(0x7f0000000340)=""/232, 0x5, 0x8, 0x100000001}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0x1, 0x20000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:47:24 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) 23:47:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000fa008dcc0181be260cb0eccdcbd4ce000000001fcf6a747f3623bc425712150d5bfa70ea9957d78836ced420ed20159db76de1aa46ca84ed6f988c753146c8da61217f281e3cc4bf12ce285b0f7a3328963ab70fcc6bff9a9ebe4aef4427d649e633831062e86b6cd42407edbb4385e56659a7b7bc02e35934d156d4f29d3deb7feb1abd8569cd", @ANYRES16=r1, @ANYBLOB="095a00000000000000000100000000000000014100000014001700000000000000006574683a6c6f0000a2ab37ba959a92f659be16e84c4e176f0e11efec54b744e58ec90c18f170bae7adc5a3df224a0cd8060425d8f2"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}}, 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r8 = creat(0x0, 0x0) ftruncate(r8, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r8, 0x0) fsync(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:47:24 executing program 3: unshare(0x8020000) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(0xffffffffffffffff, 0x0) [ 1512.980178][ T8054] Enabling not permitted [ 1513.042085][ T8054] Enabling of bearer rejected, failed to enable media 23:47:25 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x212, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:25 executing program 4: socketpair(0x18, 0xff00000000000000, 0x2, &(0x7f0000000280)) 23:47:25 executing program 3: unshare(0x8020000) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(0xffffffffffffffff, 0x0) 23:47:25 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x559a01, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r4, 0x0, 0x1, 0x2, &(0x7f0000000380)=[0x0], 0x1}, 0x20) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000002c0)={0x1, {0x7ff, 0x8, 0x200, 0xffffffff}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="095a000000000000000001000000000000000141000000140017683a6c6f0000"], 0x30}}, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x20000) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f0000000200)={0x8, 0x2, 0x1000}) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x166, r5, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[], [], @multicast1}}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e22}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V4={0xfffffffffffffdc5, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x891}, 0x8000) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x703, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000440)={0x0, 0x41415270, 0x2, @stepwise={0x40, 0x8b10, 0x1, 0x7, 0x6, 0x71c}}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ashmem\x00', 0x610100, 0x0) 23:47:25 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) 23:47:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000006047bab2dba491d273c7110b9b84f9270e72ef15f6378dfd25fd14907fd076371f6a7e83fe345cdea9a8a362d3a230508d4f171dbf9a456e4d69021d312fe4eda6cb5bc0b3028b2067e0dbbcaa773cdc8d83cb725123bcce9e612142df3afeffffffffffffff756a2a682110ecc5d37eb4f6f593d5ec126c8114bd06fe1eb0fa58587ecdbf4c4a504235c078844f9fe6337fb96f2cf3178ec8272aec3cde4a12823291cf61df3f32fbc1c6136e769d327f2aba34d3fadb775b788eadb479d8a65997ce4c01369bdcb602c698f87ca69af90b62bc7c5fc7cc7d303a6d7830134b27fee87f63cdf45881d9740547", @ANYRES16=r1, @ANYBLOB="095a00000000000000000100000000000000014100000014001700000000000000006574683a6c6f0000"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x3, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) getsockname$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r8 = creat(0x0, 0x0) ftruncate(r8, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r8, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r9, 0x335d, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000200)=0x1) [ 1513.735439][ T8281] Enabling of bearer <> rejected, illegal name [ 1513.761760][ T26] kauditd_printk_skb: 1 callbacks suppressed 23:47:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}}, 0x50}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) r8 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x2) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f00000001c0)) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:47:25 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1513.761773][ T26] audit: type=1326 audit(1570837645.331:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:25 executing program 4: socketpair(0x18, 0xff01000000000000, 0x2, &(0x7f0000000280)) 23:47:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000006047bab2dba491d273c7110b9b84f9270e72ef15f6378dfd25fd14907fd076371f6a7e83fe345cdea9a8a362d3a230508d4f171dbf9a456e4d69021d312fe4eda6cb5bc0b3028b2067e0dbbcaa773cdc8d83cb725123bcce9e612142df3afeffffffffffffff756a2a682110ecc5d37eb4f6f593d5ec126c8114bd06fe1eb0fa58587ecdbf4c4a504235c078844f9fe6337fb96f2cf3178ec8272aec3cde4a12823291cf61df3f32fbc1c6136e769d327f2aba34d3fadb775b788eadb479d8a65997ce4c01369bdcb602c698f87ca69af90b62bc7c5fc7cc7d303a6d7830134b27fee87f63cdf45881d9740547", @ANYRES16=r1, @ANYBLOB="095a00000000000000000100000000000000014100000014001700000000000000006574683a6c6f0000"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x3, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) getsockname$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r8 = creat(0x0, 0x0) ftruncate(r8, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r8, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r9, 0x335d, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000200)=0x1) 23:47:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40840, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f00000001c0)="0bb0a9abd46f0b347ff4005daa92684a56f8bdadf9c51b61d9a919b3395e63d0356918a0f3ac1f653965067b81c3fe7b1cc9a8b916a0de1d3b3cfbe88c9d72054e42db579ff12c238496b1e7ec9480dc3b7f82d710b177457084ce", 0x0}, 0x20) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={r1, 0x16, 0x1, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x20) [ 1514.034335][ T8393] Enabling not permitted 23:47:25 executing program 4: socketpair(0x18, 0xffffffff00000000, 0x2, &(0x7f0000000280)) [ 1514.071705][ T8393] Enabling of bearer rejected, failed to enable media [ 1514.532038][ T26] audit: type=1326 audit(1570837646.101:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:26 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x213, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:26 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:47:26 executing program 4: socketpair(0x18, 0x0, 0x3, &(0x7f0000000280)) 23:47:26 executing program 0: write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000001480)={0x108, 0x0, 0x1, [{0x3, 0x4, 0x9, 0x8001, ',ppp0ppp0'}, {0x6, 0x2, 0xe, 0x4b5b, '/dev/snapshot\x00'}, {0x4, 0x6, 0xe, 0x8001, '/dev/snapshot\x00'}, {0x2, 0xa9, 0x18, 0x1, '/dev/infiniband/rdma_cm\x00'}, {0x5, 0x100000001, 0xe, 0x5, ',wlan0keyring{'}, {0x4, 0x4, 0xe, 0x7, '/dev/snapshot\x00'}]}, 0x108) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x40}}, [@mark={0xc}]}, 0x5c}}, 0x34000003) sendmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@isdn={0x22, 0x8, 0x9, 0x2c, 0xfb}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)="55e2e1d84674809f39dcf24bea61b4e278", 0x11}, {&(0x7f0000000300)="f8f2b0623d39ef633a8924c06618bd74ff37dada4c386d4c", 0x18}, {&(0x7f0000000340)="c1b8fac580bb5c961cd11ee55eda5fb17d11f89697a9", 0x16}], 0x3, &(0x7f00000003c0)=[{0x58, 0x0, 0x6, "a4b77333070df3cea9d5c94eb9df3121e6a5df8b56c423ce5f69656deb21f658998026e1e2783d8e91e294b35cea00751cab8401a1dad30cb895126c5ad36e7ac79cba2f98af"}, {0x1010, 0x102, 0x800, "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"}], 0x1068}, 0x2000) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2, 0x3}}, 0x20) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r6}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r6, r2}}, 0x18) 23:47:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="095a0000000000000000010900000000000000410000001400170000000000000000810000006c6f0000"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}}, 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0x335d, 0x0) write$FUSE_LSEEK(r7, &(0x7f0000000040)={0x18, 0x0, 0x8, {0x8}}, 0x18) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r8, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:47:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}}, 0x50}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) r8 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x2) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f00000001c0)) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1514.686984][ T8861] Enabling not permitted [ 1514.696598][ T26] audit: type=1326 audit(1570837646.261:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8869 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 [ 1514.711896][ T8861] Enabling of bearer rejected, failed to enable media 23:47:26 executing program 4: socketpair(0x18, 0x0, 0x4, &(0x7f0000000280)) 23:47:26 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x9, 0x5, 0xb42e}) 23:47:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x2, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}}, 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r8 = creat(0x0, 0x0) ftruncate(r8, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:47:26 executing program 4: socketpair(0x18, 0x0, 0xf, &(0x7f0000000280)) 23:47:26 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) lookup_dcookie(0x4a4d, &(0x7f0000000000)=""/125, 0x7d) [ 1515.107443][ T9129] Enabling not permitted 23:47:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}}, 0x50}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) r8 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x2) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f00000001c0)) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1515.132638][ T9129] Enabling of bearer rejected, failed to enable media [ 1515.373571][ T9398] Enabling not permitted [ 1515.400399][ T9398] Enabling of bearer rejected, failed to enable media [ 1515.497342][ T26] audit: type=1326 audit(1570837647.061:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8869 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:27 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x214, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:27 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:47:27 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80000, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x6) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) 23:47:27 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000040)) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x20040) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4000, 0x1}) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000100)) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) 23:47:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x2, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}}, 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r8 = creat(0x0, 0x0) ftruncate(r8, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:47:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}}, 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r8 = creat(0x0, 0x0) ftruncate(r8, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x24000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1515.647932][ T9507] Enabling not permitted [ 1515.666396][ T9507] Enabling of bearer rejected, failed to enable media [ 1515.687815][ T9509] Enabling not permitted [ 1515.702958][ T9509] Enabling of bearer rejected, failed to enable media [ 1515.712659][ T26] audit: type=1326 audit(1570837647.281:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9670 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:27 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x18, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x1}, 0x3c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000440)={r2, 0xf001}, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xe0201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x88fd7c876b758172}}, 0x20) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x335d, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f00000001c0), &(0x7f0000000200)=0x4) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x5, 0x0, {"18eba73c2fc1b103b36dba4c5da24da4"}, 0x8, 0x3}, @in={0x2, 0x4e21, @empty}}}, 0x118) 23:47:27 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000080)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c02aa00150001000000000000000000e0000001000000000000000000000000ac1414bb000000000069fa00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c0015000000000000000000"], 0x5c}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x435}, 0x8) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x6) 23:47:27 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}}, 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r8 = creat(0x0, 0x0) ftruncate(r8, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x24000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:47:27 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000080)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913c9508d91cc2a016e7f6d9daa3323e66d3c5455ad61fd3a6187bd5cb2d24245376a54bfdb084", 0x0, 0x2}, 0x20) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000280)=""/4096, 0x1000}, &(0x7f0000000140), 0x4}, 0x20) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x4000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) 23:47:27 executing program 5 (fault-call:2 fault-nth:0): unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) [ 1516.060864][T10230] Enabling not permitted [ 1516.112316][T10230] Enabling of bearer rejected, failed to enable media [ 1516.177170][T10278] FAULT_INJECTION: forcing a failure. [ 1516.177170][T10278] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.225930][T10278] CPU: 1 PID: 10278 Comm: syz-executor.5 Not tainted 5.4.0-rc2+ #0 [ 1516.233872][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1516.243939][T10278] Call Trace: [ 1516.247245][T10278] dump_stack+0x172/0x1f0 [ 1516.251606][T10278] should_fail.cold+0xa/0x15 [ 1516.251625][T10278] ? fault_create_debugfs_attr+0x180/0x180 [ 1516.251646][T10278] ? ___might_sleep+0x163/0x2c0 [ 1516.251667][T10278] __should_failslab+0x121/0x190 [ 1516.262044][T10278] should_failslab+0x9/0x14 [ 1516.262060][T10278] kmem_cache_alloc+0x2aa/0x710 [ 1516.262078][T10278] ? ksys_dup3+0x3e0/0x3e0 [ 1516.262096][T10278] create_new_namespaces+0x34/0x7b0 [ 1516.262123][T10278] __x64_sys_setns+0x1f8/0x350 [ 1516.295533][T10278] do_syscall_64+0xfa/0x760 [ 1516.300053][T10278] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1516.305940][T10278] RIP: 0033:0x459a59 [ 1516.309836][T10278] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1516.329437][T10278] RSP: 002b:00007fb6e2190c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1516.329450][T10278] RAX: ffffffffffffffda RBX: 00007fb6e2190c90 RCX: 0000000000459a59 [ 1516.329457][T10278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1516.329463][T10278] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1516.329471][T10278] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6e21916d4 [ 1516.329478][T10278] R13: 00000000004c7d49 R14: 00000000004ddc38 R15: 0000000000000004 [ 1516.504281][ T26] audit: type=1326 audit(1570837648.071:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9670 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}}, 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r8 = creat(0x0, 0x0) ftruncate(r8, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x24000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:47:28 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000040)) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth1\x00') 23:47:28 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r9, 0x0) 23:47:28 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x215, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:28 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r1) 23:47:28 executing program 5 (fault-call:2 fault-nth:1): unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) [ 1516.647788][T10559] Enabling not permitted [ 1516.663618][T10559] Enabling of bearer rejected, failed to enable media 23:47:28 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) [ 1516.682389][ T26] audit: type=1326 audit(1570837648.251:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10616 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:28 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3, 0x1, r0}, 0x3c) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000200)={0x3}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0x196) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x568, 0x80000000, 0x8, 0x20c, r0, 0x3, [], r3, 0xffffffffffffffff, 0x0, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f0000000180), 0x0}, 0x20) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) ioctl$KDENABIO(r4, 0x4b36) 23:47:28 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2e0240, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000002c0)) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r2 = dup2(0xffffffffffffffff, r1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000180)={r5, @in={{0x2, 0x4e20, @rand_addr=0xab}}}, 0x84) write$FUSE_OPEN(r2, &(0x7f0000000000)={0x20, 0x0, 0x1, {0x0, 0x10}}, 0x20) 23:47:28 executing program 2: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:28 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x2) 23:47:28 executing program 4: socketpair(0x9, 0x6, 0x2, &(0x7f0000000280)) 23:47:28 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r9, 0x0) 23:47:28 executing program 4: socketpair(0x4, 0x80000, 0x1, &(0x7f0000000280)) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 23:47:28 executing program 2: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1517.481782][ T26] audit: type=1326 audit(1570837649.051:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10616 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:29 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x216, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:29 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x3) 23:47:29 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r9, 0x0) 23:47:29 executing program 4: socketpair(0x8, 0x80803, 0x1, &(0x7f0000000040)) 23:47:29 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000280)=""/195) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) 23:47:29 executing program 2: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:29 executing program 4: socketpair(0x18, 0x4, 0x2, &(0x7f0000000280)) 23:47:29 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r2, 0x400454ce, r5) r6 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000680)={{0x0, 0x0, r5, r4, r5, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r3, r3, 0x9}) r7 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r7, 0x400454ce, r10) r11 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r11, 0x1, &(0x7f0000000680)={{0x0, 0x0, r10, r9, r10, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r8, r8, 0x9}) r12 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r12, 0x400454ce, r15) r16 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r16, 0x1, &(0x7f0000000680)={{0x0, 0x0, r15, r14, r15, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r13, r13, 0x9}) r17 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r17, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) fstat(r17, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r19, 0x400454ce, r22) r23 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r23, 0x1, &(0x7f0000000680)={{0x0, 0x0, r22, r21, r22, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r20, r20, 0x9}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="020000000100040000000000020046dd", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r4, @ANYBLOB="02005927", @ANYRES32=r9, @ANYBLOB="82000700", @ANYRES32=r14, @ANYBLOB="040005000000000008000200", @ANYRES32=r18, @ANYBLOB="08000200", @ANYRES32=r22, @ANYBLOB="0800f8d3", @ANYRES32=r24, @ANYBLOB="10000200000000002000000000000000"], 0x5c, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) [ 1517.802125][ T26] audit: type=1326 audit(1570837649.371:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11523 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:29 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000040)={{0x76, 0x20}, 'port1\x00', 0x20, 0x41010, 0x40, 0x1000, 0x785, 0xfffffffc, 0x3f, 0x0, 0x4, 0x9}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000180)=0x1) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000100)=""/22, &(0x7f0000000140)=0x16) 23:47:29 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:29 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x4) [ 1518.038073][T11859] QAT: Invalid ioctl [ 1518.068060][T11859] QAT: Invalid ioctl 23:47:29 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x32e) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x335d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x1, 0x5}) close(r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x1, r3, 0x1}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x191140, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x335d, 0x0) close(r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r6, &(0x7f00000006c0)="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", 0x0, 0x1}, 0x63) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000040)={0x6, 0x5}) [ 1518.533271][ T26] audit: type=1326 audit(1570837650.101:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11523 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:30 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x217, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:30 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x300) 23:47:30 executing program 4: socketpair(0x3, 0x2, 0x2, &(0x7f0000000280)) 23:47:30 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) creat(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:30 executing program 2: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) r9 = creat(0x0, 0x0) ftruncate(r9, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x0, 0x0, 0x9, 0x0, 0xcb0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3e793bb083aecd8a}, 0x20000, 0x314000000000000, 0x0, 0x0, 0x8, 0x0, 0x1f}, 0x0, 0xa, r9, 0x0) 23:47:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000040)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0xb) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20) 23:47:30 executing program 4: socketpair(0x1, 0x180002, 0x3, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x411, 0xffffffffffffff5e) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) fcntl$getownex(r3, 0x10, &(0x7f0000000300)={0x0, 0x0}) sched_rr_get_interval(r4, &(0x7f0000000340)) r5 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x9, 0x6480) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000200)={0x8000, 0x5, 0x64a7, 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}]}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x10040, 0x0) dup2(r1, r6) 23:47:30 executing program 0 (fault-call:12 fault-nth:0): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:30 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x3f00) 23:47:30 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpgrp(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:30 executing program 2 (fault-call:4 fault-nth:0): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:30 executing program 4: socketpair(0x3, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x1) [ 1519.515573][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1519.515585][ T26] audit: type=1326 audit(1570837651.081:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12530 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:31 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x218, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x3a, @rand_addr=0xfffff6d8, 0x4e22, 0x2, 'lc\x00', 0x1, 0x6, 0x49}, {@loopback, 0x4e22, 0x10000, 0x2, 0x2, 0x9}}, 0x44) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x5, 0xfff, 0xfffffff8, 0x3f, 0x81}) 23:47:31 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x4000) 23:47:31 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1519.632669][T13012] IPVS: set_ctl: invalid protocol: 58 255.255.246.216:20002 23:47:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) accept4$inet6(r2, 0x0, &(0x7f0000000000), 0x80000) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1519.698095][ T26] audit: type=1326 audit(1570837651.261:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13055 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x20000266}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:31 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x40000) 23:47:31 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r2}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r2, 0x1f}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x4e24, @empty}}, 0x2, 0x2c1, 0x5, 0xfffffff7, 0x12}, 0x98) 23:47:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x29, 0x23, 0x13, 0xf, 0x0, 0x1, 0x6, 0x9c, 0x7ffffffffffffffe}}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:31 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1520.498732][ T26] audit: type=1326 audit(1570837652.061:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13055 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:32 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x219, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) pipe(&(0x7f0000000000)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:32 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000040)={0x100, 0x101, [0x6, 0x8, 0xfff, 0x7], 0x40}) 23:47:32 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x1000000) 23:47:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x7ffff000}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:32 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000)=0x8, 0x4) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1520.662572][ T26] audit: type=1326 audit(1570837652.231:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13828 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:32 executing program 4: prctl$PR_SET_FP_MODE(0x2d, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000080)='\xf3{vboxnet1]%)\x00', 0xe, 0x1) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x5) 23:47:32 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x2000000) 23:47:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x200002a6}], 0x2) 23:47:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x1a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x434, 0x7, 0x2, 0xf44eab856bb5d726, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x1}, [@nested={0x3a0, 0x13, [@generic="8556df1bce61139600c333062ca370e8cddf69b3eb01cf9aabe541a5675fef3b1b53c2a58144128c3c838c69b044b509ae85b06ae7c223c69b3d6ee39811f11569d5a3d9e77ab9e897b21f8c5644740c4d91000c75245266abd25ff39569c2a36b31a36ca5ad68192746e7f993efea58cbc2d6ce6e18485ece89c5d6b495fef4824e", @generic="a4600c8808b77c586179eaab3ca42ba087ddfbabb9b2e0f95b6523255af7c98f0ece11689989af39fa61fa543b0506d4680e5b8d42f143feb6d7be56a11aa8670ac10c7fef97f1c620bbdc8377b0ccddaf5bbae4e4c55c17d18f16c7604ade31c7949828d80b02a45642b4fb76f57b960c673ad618be3545260b0c7cdbaeaf3902a9bf90c3bcd620eda25a14ecdf0fe47ab3f230e75b2e0d", @generic="f793f4e2befa522343991f28e618bd27c647428dd87cfc45a7aee8c8401abf2f5685d2f0e73562f73c263e7822fdb07be842e7909cfa7d", @typed={0xdc, 0x4d, @binary="c4a16b9e46e3c694192090d3bf5df783690f3c80588c2880a2f9f10a21c676428544bd3b299c7174ff3d385e502c56a1d2fb0df611a455602fc3890c64a9dbc23f3ad0f46870589ec4b9ba50ca6566b373403973c3b92e8b3ebfabec61ddbb8739cc2a2eaa8ca7d10db121d4c6d767586b65d71c984e5ffcb888ff4830eff3e66f8ae9be6b1ea5c983281331e8b5142549dc5315ad8dabbd0fe1108252e139314d19f88185bf47cad220195edcedddbaff9b8fd17efa201236635abb991af22c4d3d291818b5e76c0428a0a103560c1877e99d7e4d8ebf"}, @generic="400d2bc9036eaea92a2b4b10fce84fdb58554ce331aea6f721be84beb5a51c25f57f36d2c75eb5f1af907d02ce95878f7b8ba01eb35ec2c570064a2c246cfc7910cbee12209d04ae22c9bddc199130e6aefab8a776", @typed={0x8, 0x1f, @str='\x00'}, @generic="30894cb4f58ec3c3e1b67437965af6aae737648c36a03ad04c332d7c5ebcfb08d25920a8529a0aa0271f2daa03b824b48af5511488fd33527d86a2af155714dcbcf010c6e4a5a106dc541a02e9f36c941f87f667e46a25d185c3df8e365742adddb558aa647d47175bf60a420bd78ee73f05b528540fc8b18bc889f8d7b47e078522095d9c516d9111d9571e373f11cbbe09fc99e4fdfc7a4483d5b8b66864a0eb4a3e7d35a6259ac20e9d98f509a2bf7f05bb11640264ce312d76e764d22792e1e7a8a1e14e487b8bc60ac8509423", @generic="2fa5a1c1655efda371b1b2823313951dbd17944ae34b4d52143738923655ad7580aa67706bc4e1d14aa5dd503e7967c85faa5fc0fda583770ac1aa360a0c60cc83ca"]}, @nested={0x80, 0x5b, [@typed={0x8, 0x6d, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}, @generic="e296a101dec28a42201038cbc92e663aceb28d3d256ea851bbbf01ff42adb6aeb8fe06d788fa01359fde276793cf2ed35957ebcf55c3c3953f7d30589cbdf6201deecb6e1eabd3551ba1f7a4e89215200b30e3d2e0b69abe3ce95dbeaf1cd673ebfa25f5eab1694a9ad89f4f2632f83a48f2"]}]}, 0x434}, 0x1, 0x0, 0x0, 0x20010845}, 0x4001) 23:47:32 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1521.454841][ T26] audit: type=1326 audit(1570837653.021:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13828 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:33 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x21a, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:33 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x3b, &(0x7f0000000080)="8041d978747e677c7836baec44a36a8af0ce8b6eaa5fb9861c4d7a2cb9c1b2e585505c3ee19d2a4ee9ea621c3cebc490db8a1aae7f96913e478c9d37f714775972ab37fdd7c08fed6640c527b0", 0x4d) socketpair(0x8, 0x1, 0x1, &(0x7f0000000040)) 23:47:33 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) bind$xdp(r3, &(0x7f0000000000)={0x2c, 0x5, 0x0, 0x37, r2}, 0x10) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0xffffffffffffffff) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x1, 0x5) 23:47:33 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x3000000) 23:47:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x7fffef9a}], 0x2) 23:47:33 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1521.632284][ T26] audit: type=1326 audit(1570837653.201:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14597 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:33 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r1, r2}}, 0x18) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000200)=""/67) ptrace$setopts(0x4206, r3, 0x0, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x335d, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0xffffffff, @empty, 0x58}}, 0x0, 0x5, 0x0, "13f37005ce67a173d67b263c65d4a13a6daa3cb3d1f19cec817e13c6f17f85e4738add0e64eaac999c15604e94b9dac738e59ddf732f8896cd8cdbb87f7c2f0c344ac920faf4ca153f96e754beed82bd"}, 0xd8) tkill(r3, 0x1) getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 23:47:33 executing program 4: ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000000)) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) 23:47:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x8) 23:47:33 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x3f000000) 23:47:33 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:33 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}, [@mark={0xc}]}, 0x5c}}, 0x0) getsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='openpromfs\x00', 0x8000, &(0x7f00000001c0)='/dev/cachefiles\x00') setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x9}, 0x8) r4 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000080)={0x2e, 0x22, 0x17, 0x10, 0x6, 0x3, 0x3, 0xce}) [ 1522.429158][ T26] audit: type=1326 audit(1570837653.991:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14597 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:34 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x21b, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:34 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0xa0a0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x2, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x2f) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c98df76176cc3aa2396b6f176e11766140015000000000000000000"], 0x5c}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x0, 0x1d, &(0x7f0000000040)="a1f59e9bcf6710ec76fa666221a4ecda11ac02b17f6e0c2be6d337e806", 0x20, 0x4, 0x800, 0x0, 0xff, 0x3, 0x0, 'syz0\x00'}) 23:47:34 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x40000000) 23:47:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) set_tid_address(&(0x7f0000000000)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x48}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4200, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000080)) 23:47:34 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1522.556338][T15150] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 23:47:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x178, 0x0) ptrace$setopts(0x4206, r0, 0xffffffffffffffff, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1522.610902][ T26] audit: type=1326 audit(1570837654.171:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15185 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:34 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) 23:47:34 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0xfeffffff) 23:47:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4200, r0, 0x0, 0x6) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000000)) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:34 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1523.409016][ T26] audit: type=1326 audit(1570837654.971:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15185 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:35 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x21c, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:35 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)=0x0) ptrace(0x4208, r4) 23:47:35 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}, [@mark={0xc}]}, 0x5c}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c040000280007050000781e23d6000000130000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000800010063627100300402000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000047157dacf0c5958e00bf1ef67ab33f479a000000000000000000000000000000da3f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005529000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000000000010018000100fb0000000000000000000000000000000000000053b924c54543555f8659fa144e7702b8a3408fbec253762bce1cc1b551aabf62bdc59ac1889e448c5a2ae7fc0c8f2825b4935eee610a18b43f1063c5b4eaf1e62f9ff6d3f3693ad036aef5cf96b3ab9ad9f9e0d4d9a44aa52b0a910f8c9ae5d75efb88cdc974b83fc891c8e944c135dc8fac681c461460e2068eb5748fed84dc610498aa7dab4e3dfcd2d62c36a30b76af5e03aa4b09b95f5cb46b543550a0eb07854cdf330299067c1b491778278a48d70bb30d4b0877904a34d1f0b6c61cba4ec5450708bca16b2a291bc6c8648ab8877d3b535373df3cad64f7de42cd48d7571c356b4c830bc287dfd6ce79a4d17af6f5a69d9e68d39cfabdc6e48f786f4d063c4a063027406f90f9920163f8f72235302fb827d08d4e9ca043e70f"], 0x45c}}, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) r11 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r11, 0x1, &(0x7f0000000680)={{0x0, 0x0, r10, r9, r10, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r8, r8, 0x9}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r12, &(0x7f0000000640)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c040000280007050000781e23d6000000130000", @ANYRES32=r14, @ANYBLOB="00000000ffffffff000000000800010063627100300402000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000047157dacf0c5958e00bf1ef67ab33f479a000000000000000000000000000000da3f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005529000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000000000010018000100fb0000000000000000000000000000000000000053b924c54543555f8659fa144e7702b8a3408fbec253762bce1cc1b551aabf62bdc59ac1889e448c5a2ae7fc0c8f2825b4935eee610a18b43f1063c5b4eaf1e62f9ff6d3f3693ad036aef5cf96b3ab9ad9f9e0d4d9a44aa52b0a910f8c9ae5d75efb88cdc974b83fc891c8e944c135dc8fac681c461460e2068eb5748fed84dc610498aa7dab4e3dfcd2d62c36a30b76af5e03aa4b09b95f5cb46b543550a0eb07854cdf330299067c1b491778278a48d70bb30d4b0877904a34d1f0b6c61cba4ec5450708bca16b2a291bc6c8648ab8877d3b535373df3cad64f7de42cd48d7571c356b4c830bc287dfd6ce79a4d17af6f5a69d9e68d39cfabdc6e48f786f4d063c4a063027406f90f9920163f8f72235302fb827d08d4e9ca043e70f"], 0x45c}}, 0x0) r15 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r15, 0x400454ce, r18) r19 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r19, 0x1, &(0x7f0000000680)={{0x0, 0x0, r18, r17, r18, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r16, r16, 0x9}) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20020}, 0xc, &(0x7f0000000340)={&(0x7f00000007c0)=@newsa={0x294, 0x10, 0x2, 0x70bd26, 0x25dfdbfd, {{@in=@local, @in6=@loopback, 0x4e24, 0x5, 0x5, 0x0, 0xa, 0x20, 0x20, 0x2f, r6, r7}, {@in=@local, 0x4d3, 0xcc}, @in=@multicast2, {0x0, 0x9171, 0x7, 0x100, 0x200, 0x2, 0x40, 0x6}, {0x21, 0x1, 0x40, 0xffffffffffff609e}, {0x4, 0x80, 0x3}, 0x70bd26, 0x0, 0x2, 0x3, 0x40, 0x28}, [@proto={0x8, 0x19, 0x33}, @policy={0xac, 0x7, {{@in=@rand_addr=0x1, @in=@multicast2, 0x4e24, 0x6, 0x4e23, 0x0, 0x2, 0x10, 0x40, 0x2c, 0x0, r9}, {0xfd7, 0x3, 0x9, 0x1, 0x0, 0x3, 0x1, 0x3}, {0x7, 0x244, 0xff, 0x100}, 0xfffffffa, 0x0, 0x2, 0x0, 0x3}}, @policy_type={0xc}, @sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@mcast2, 0x4e24, 0x8, 0x4e22, 0xca, 0x0, 0x0, 0x20, 0x9e, r14, r17}, {@in6=@mcast1, 0x4d5, 0x32}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {0x8, 0x9, 0xfffffffffffffff8, 0xffff, 0x7, 0x60, 0x6, 0x7ff}, {0x8001, 0xffffffff, 0x80000001, 0x200}, {0x1, 0x4, 0x4}, 0x70bd29, 0x3502, 0x1e, 0x2, 0x7, 0x8}}]}, 0x294}, 0x1, 0x0, 0x0, 0x40}, 0x45264c84c52b7316) r20 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r20, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) fstat(r20, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, r2, r21}, 0xc) 23:47:35 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0xfffffffe) 23:47:35 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:35 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x488000, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000380)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = syz_open_dev$video(&(0x7f0000000200)='Ldev/videL#\x00', 0xffff, 0x800) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/180, &(0x7f0000000000)=0xb4) r3 = semget(0x2, 0x1, 0xef9190a9a75d0eee) semtimedop(r3, &(0x7f00000002c0)=[{0x4, 0x40, 0x1000}, {0x0, 0x7ff, 0x1000}, {0x0, 0x0, 0x800}], 0x3, &(0x7f0000000300)={0x0, 0x1c9c380}) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0xf4]) pread64(r2, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r2, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:35 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x475c00, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x498, 0x270, 0x0, 0x0, 0x3b0, 0x3b0, 0x3b0, 0x4, &(0x7f0000000000), {[{{@arp={@loopback, @local, 0xffffff00, 0x0, @empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, @empty, {[0x0, 0x0, 0x0, 0x1fe, 0x80, 0xf5f74ff06e373bce]}, 0x8, 0x3, 0x3, 0x8000, 0x6, 0x3, 'rose0\x00', 'erspan0\x00', {0xcff4248ddef9658d}, {0xff}, 0x0, 0x2}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x10}, 0x1}}}, {{@arp={@loopback, @rand_addr=0x3ac, 0xffffffff, 0xff, @empty, {[0x0, 0x7f, 0xff, 0x7f, 0x1fe]}, @empty, {[0x17e, 0xff, 0xff, 0x0, 0x0, 0x80]}, 0x7d07, 0x0, 0x52, 0x0, 0x9, 0x3, 'bpq0\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x0, 0x5d8bbe0280a7da88}, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7, 0x8, 0x3b2}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x94c9063e4edb6313, 0x6d9a6720e92abab0, @empty, {[0x818a37650df159dd, 0x0, 0x29dba06926961eb1, 0x181, 0xff]}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {}, 0x6, 0xfff, 0x34, 0x0, 0x200, 0x3, 'veth1_to_team\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x10}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @remote, 0xf}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4e8) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1523.596615][ T26] audit: type=1326 audit(1570837655.161:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15935 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x4e21, @local}}}, 0x88) ioctl(r0, 0x2, &(0x7f0000000380)="0800967146a800007b0071d33ffdfe4843261e3f141638a28fd6cf3227b48d1434656b06db0db5c71454f4a19be6fa61535ba32ddddcb35dc8de51ae331361fe8c5618d0774acb4f509177da54e30f8249be6cf1aa6522c205682d270389ad11cd1e210d90944f84783437c8bbd0240f194636b6969da8e98211ba8611f4fc2f710cd3bda6a5a3a0212fe4fd326148c66d7081eed9b26458d46cf95ffa8b1fb0c9a4799e479e65305da3693506ff4328b6ab114ab65054acabab4076a62be15f192cddcb6e4a185d2e3829ca0c115b369bb6556212ee9f33c86ca077ce028060da09f992354fde2a") r2 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r2, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r2, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:35 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x1000000000000) 23:47:35 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x9, 0x80000001, 0x9, 0x3, 0xc, 0xe2}) 23:47:35 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:35 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000000)={0x9, 0x0, {0x2, 0x1, 0x6, 0x0, 0x7}}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:36 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x21d, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x4080) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x2, 0x6, 0x7, 0x2000, r2}) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80802) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0)={0x20}, 0x1) 23:47:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000000)={0x6, 0x8d, 0x8, 0x44400, r2}) 23:47:36 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x2400) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) 23:47:36 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:36 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x4000000000000) 23:47:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1524.559477][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1524.559491][ T26] audit: type=1326 audit(1570837656.121:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16770 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '*]bdev'}, {0x20, 'keyringcpuset'}, {}], 0xa, "01d0bb1157d59409a504899377dbc14562942045d0e8f325310f9d2cae9974fb102ee3b425e9770d46ceb04710c37b746420c60d1de164ed5bbf80cae4a8d2ecfe9e1fb38d8c874215e83dacbea845685bb01cdc0d8db91d36ea50d529e0599a80875c3eb78e26ad9ea2bea95e75d3da0a08d5f2095fe7640a3fb36c152f9f9c3598909df419fe8d71432d84ba447e519294b802316758f4fd0982a83d37c19f866ec5bd6d924f362a7b4a959edaeaafb27201efc5db1b1415b0bac531cec2d890a55b55cc817490ec21956c9b6309b1099348fe245566888cf9ddfb660fb15bebf13885a1a5166714f9a10934c02daa158a2b2d96"}, 0x116) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:36 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) socket$pppoe(0x18, 0x1, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 23:47:36 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x100000000000000) 23:47:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x35, 0x2e, 0x9, 0x4, 0xa, 0x8, 0x2, 0xd0, 0x1}) 23:47:36 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1525.358167][ T26] audit: type=1326 audit(1570837656.921:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16770 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:37 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x21e, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:37 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}, [@mark={0xc}]}, 0x5c}}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x25}}, 0x5}}, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000002c0)=[{0x110, 0x10b, 0xdf, "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"}, {0x18, 0x0, 0xb4, "a56491ac"}, {0xf0, 0x107, 0x2, "d07dc2f3dd17ca33b825558086050d886672c4a22c7a0f632f6185218cac9b509daa1f723d34b784b996a61c862b1aa3d09a2b4b00626e73e9484c8a32b87188679235fc43e4d8aa3bc3e00f27ad223f7a0726fb5a56de03df17cb9c96da8d6175a77e377c4416746a21d91c740e3b8aa86227cfcb45ea612d310da85f26a25a4180d0f306ba0038a6c7fc479f1e7ab7d68b66525ba590fc0a68645bed5229f9699fbc0aaf4d5c1cfcd183a28b8fa43beea901c868688787a08e7a927ca84b76dce9b2235391faef05e516421182fbc3ffb426c0834809600bf1fa478ce27f8b"}, {0x80, 0x105, 0x67f0, "199e84246abb29bf4dafde88af5debea629a06afab9509143c3f6f5b37a54c2579292ea84eea9f65da87d0adade1aaddaadde31f426bbaac20c16c5d8486047b96fa286346c09ee2768957eebf4f4191f030ebf0cc6bebd48a26bce5645be2f892a07fabe5e8321763"}, {0xc8, 0x107, 0xc1, "3868559a0ce19926fb5181746fad898fadee734100d562d0cf33093676347698df70c1ca76952067a71b42230a4f90917fead680f6d0adc3c34171008723b88dcae3e18afa89ff1682236a92548b54034af90ea07e5e6cb52972683b9f3a2105853f90fff30f562005e9a7d91ff267480a8c577c4200adc666335c964e4a4c23d6601fdca4c374a2c5b397deca5864fb6ede7ceb140777fe5d6b74a1e818c08428b06df21991c734c2658b468326c4f3ef0ec5b4d1"}, {0xe8, 0x105, 0x6, "fd46a77c2a28cf348f6030d364ce39e4c55fb2e9ffa246c84a35ee4d17679c83cfc64267c4091cbe7b47f7c5f9bf3490545d17cae09894a109becbd6d8621d419fc300fc4b1cdd651c879f6a43c6b74e6ce1b377b8ca6e67bab3a8ecd11219cdfccde1a6f8fb967c7e57fb4eac071160c29942df35b3bfe2aa99608cca8b9c858dd464c381bbb9b1bcea7064b07a8f4ab3e820c1e56a12549cad5cb0cc07fc0a8b808e10830a9f37892938adf3e40262f0d1cb2af22c251dff7f2b8b011b9fc25b4ec48c8f2209fdf46684ad146cd9b09e7f7cf0"}, {0x58, 0x108, 0x6, "6a156eabbc3a99e7e68b1989ec0fb08f911989ed9138f492a70b59b16ab001226cd9e7468108b5bab697f78ed3c6d59c332195808fb0dd351ac97c1c42b05e9b86963ee7b0bf2ad2"}, {0x18, 0x10b, 0x0, "3ef8858f17a3"}, {0xf0, 0x102, 0x9, "255e7254094ff3cc4756e344ff060a6c2c3e29db841cc98b46c6644a4727e5f9ba268ed3392527f2edbe2e3ee7f975608e9baf572f4fe956ccc0e9ec7e97f7ddcbae6dcd06f298233d8d92f22d4936826ebfecc77b9057ba4c19a5d1a93a4344821c3ebbcec6033850ed2ed12079918cb77af3d010586d7006bc336f24285b9b41619395a1884d8cc41bc24f9551ab30424525458360d0cdc036d784353824677b826107eba4e623aaf3faaa311c9c6d5f68ba5db9f7539bb58cf128afeab1979fc97e902c04e9c810425944cff38ab4e3749dfd4bb6677dfd2beb6a141fe957"}, {0x30, 0x0, 0xffff, "7bb7ff82051c649cd431498a5c070740f1035c112fee6678a9a86ac68d81f177"}], 0x5d8}, 0x0) 23:47:37 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x58e881, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xffff, 0x200900) fallocate(r2, 0x3a, 0x2c2, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:37 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x200000000000000) 23:47:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgrp(r1) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}, [@mark={0xc}]}, 0x5c}}, 0x0) sendto(r3, &(0x7f0000000000)="4bbe94d08e05cfb2b28d57f5a0fbb38fe70053d8c0324b5eecc2118d0625db10ad44d9f5eb2ad8b3e7a4ffac67e2916e4f9f73259907c58717bd546c6f95f3493424d7c29d3f8416bf5bd381d6861f9369f2a7c6712e2cf26faca815fbde787b9a74156c0da4e7b1d1daa70e", 0x6c, 0x20000000, &(0x7f0000000100)=@sco={0x1f, {0x5, 0x2, 0x2, 0x6, 0x5, 0x4}}, 0x80) r4 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) rt_sigtimedwait(&(0x7f0000000080)={0x8}, &(0x7f0000000180), &(0x7f0000000200)={0x77359400}, 0x8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:37 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1525.521928][ T26] audit: type=1326 audit(1570837657.091:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17586 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:37 executing program 4: socketpair(0x11, 0x80000, 0xfd, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$isdn_base(r1, &(0x7f0000000240)={0x22, 0x1, 0x4c, 0x1, 0x2}, 0x6) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x8, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0xfffffffffffffd23}, 0x1, 0x0, 0x0, 0x16d7a3cb8783be3b}, 0x44010) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280)=0x6, 0x4) capget(&(0x7f00000001c0)={0x19980330, r2}, &(0x7f0000000200)={0x200, 0x8, 0x9, 0x68, 0x1, 0x1f}) 23:47:37 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:37 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x300000000000000) 23:47:37 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0x10003, 0x8600) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x400) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f00000002c0)={0x6, "d327504dff94ba88b54dbd8f2328e2a8fa9f10f4efb1ccc643279c92676cf6ee", 0x1, 0x1}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000240)) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) readv(r2, &(0x7f0000000ec0), 0x0) 23:47:37 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x3f00000000000000) 23:47:37 executing program 4: socketpair(0x0, 0x0, 0x2, &(0x7f0000000280)) [ 1526.291865][ T26] audit: type=1326 audit(1570837657.861:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17586 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:37 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x21f, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:37 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) socket$unix(0x1, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:37 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x141000, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) getrandom(&(0x7f0000000080)=""/11, 0xb, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00013841502dd5e7c2024ddbcc4700011017f00ffff0000"], 0x18) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000002c0)={0x0, @bt={0x3ff, 0x7, 0x0, 0x1, 0x6, 0x9, 0x6, 0x1, 0x8001, 0x9, 0x5, 0x87, 0xfff, 0x5, 0xb, 0x3}}) 23:47:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3}, 0x0, 0x0, &(0x7f00000002c0)={0x5}, &(0x7f0000000340)=0x8d, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x4}}, 0xffffffffffffff81) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r5}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r4, 0x0, 0x7, &(0x7f0000000000)=':eth1*\x00', r5}, 0x30) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x9, &(0x7f0000000140)=""/3) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:37 executing program 4: socketpair(0x18, 0x0, 0x1, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_destroy(r2) io_submit(r2, 0x0, 0x0) io_getevents(r2, 0x1, 0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000040)={0x8, 0x0, [], {0x0, @bt={0x9, 0x10000, 0x0, 0x2, 0xcd65, 0x10001, 0x118, 0x800, 0xc99a, 0x4, 0xffff664a, 0x10001, 0x8, 0x7, 0x8, 0x11}}}) 23:47:37 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x4000000000000000) 23:47:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) futex(&(0x7f0000000000)=0x1, 0x85, 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000080)=0x100000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1526.437314][ T26] audit: type=1326 audit(1570837658.001:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18463 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:38 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0xfeffffff00000000) 23:47:38 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/d\xda:\xba\x98\xa7spshot\x00', 0x400, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'vcan0\x00'}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r4 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r5 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) write$binfmt_elf32(r5, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x7, 0x8, 0xff, 0x18, 0x2, 0x3e, 0x2, 0x326, 0x38, 0x309, 0x7, 0x3, 0x20, 0x1, 0xfffe, 0x4, 0x7}, [{0x1, 0xff, 0x0, 0x5, 0x9, 0x6, 0x4, 0x3}, {0x0, 0x0, 0x81, 0x56d9, 0x9, 0xfffffeff, 0x4, 0x8}], "c3a6e978f7fe1cf42469af585f6debe44b20084b1fd3b9819046809b8980a6c98dfe485506dcee291a3da2697470", [[], []]}, 0x2a6) r6 = socket$inet6(0xa, 0x80c07, 0x3) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f000000ad80)={0x82, 0x400, 0x200, 0x1000000, 0x7fffffff, 0x3, 0x6, 0x100, 0x0}, &(0x7f000000adc0)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f000000ae00)={0x3a, 0x4, 0x8c9c098e2b7492a3, 0x0, 0x5e65, 0x9, 0x100, 0xeb, r7}, &(0x7f000000ae40)=0x20) ioctl$DRM_IOCTL_FREE_BUFS(r4, 0x4010641a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[0x2, 0x8ad9]}) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x8000, 0x0) ioctl$RTC_RD_TIME(r8, 0x80247009, &(0x7f0000000140)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) sendmmsg$alg(r2, &(0x7f0000001480)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000080)="bf945095f14a760f158c604017d43b46137e674496f127751668cded45ee80fb6b79ff8d50cccb2f394fed51329f3b0542646cf1d8a8aeb7e5b14c6af4339786bd275aa1e41fba075bbdbdf8d9bbdfc5", 0x50}, {&(0x7f0000001300)="04f80421c14be0580c952a713c6871c584b09fa97316e6ff195a9ae2a5c6a46a1d7d09b7b07af6", 0x27}, {&(0x7f0000001340)="c1fb89109cc0e87449d3b242bb827814a1cbec740779ba041e687afc7a89a47e3a38ed0ff93b9bbf94ac9a3bfe74c82f20f0078c714d1c8713b85d080b8e2726cee9947acf38ffc269e0d229480d281499ff909767f8e5de125389488d2239a254432dd0078b18dadfb91c0ec91dce82681dd1abe1a2924de912266f3c3f35523d18a5b3f39ba2b3b89ea73bb51936f3427893333bb69b4c9c685c5dcc99d0fec36ffc203b6d6afe99d2dcb233993c38325c39010ea75f09c03da07a28e6f8a6c1cb36b13b944646060bd296fa233709c3fca5dde250c85dfd8f512b80487ee849a5cbc46a8cbc95774898118b126b91aa2c4e9ae492", 0xf6}, {&(0x7f0000001440)="eeb07c9a6d6e3bd9c481665d98ed9a9c74187b8ebdf9f9efbb7e7c308527c0d4", 0x20}, {&(0x7f0000001500)="a89dde34d8943db7b3f669095f33954bdf858471ded9241b4fae079dec6816912acf1b666a46a442afa7bcb006443c1465ffebda29081dfeed5fb8f007d9b3934dde828525a16373949e8685af2dae8eb924c8fa30ba5435ade91f35baae11b4e30bc9217b76f7987eb04443bc25d299f16e7692414614b7626805eecc593167a63a8f0da131e5ed0925d93d091eb257fadd86a836a4298f94b4115af3725b0b41af35bcd6c8a61454bac066dd76922656f2e30db8bbf808e5ec2e5f1bcd0a4792599b88d014bb392e774113d30da4dd8cc15f53248fb94a2bae23adbcec5f01df78575a11a698c79a", 0xe9}], 0x5, &(0x7f0000001680)=[@assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x100, 0x117, 0x2, 0xe7, "908e0e7ad3fb154ca40553166f11f428833db851d4484259647bb182bcffb8b9122d4bfe3e5540eb5491a1fb5ee6b416fd0b8d47e69cc787d6be5a42881b2e3037a5dac5092b9e47698738ab4487c92f40bb1368128679d1815db69d17c5c901d51f142143efd4faf0744f6df8097e792ed6567f6ed183ee397260409b6063ede66d0adc642ef1c69027ae24bb68252d6b858faf11c6c9e9847d79cd601bcd91b26575d2e89b5b00ad58862ab700098b9fcbe8939c1f8110a574d3f5092b013ac8b168fe55ee05b122d695af0a886a2066fc5aebd53f9b8b90931485167f6cc629f11bf3d9fbad"}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x1178, 0x4004860}], 0x1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000002c0)={0x1000, ""/4096}) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/7, 0x7}], 0x3c3) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) 23:47:38 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r3, 0x2, 0x10}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r4, 0x30, &(0x7f0000000080)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000100)=0x10) [ 1527.230198][ T26] audit: type=1326 audit(1570837658.791:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18463 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:38 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x220, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:38 executing program 5: unshare(0x8020000) fanotify_init(0x52, 0x101000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) 23:47:38 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000000)={0x200, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000040)={0x1, r5, 0x10001, 0x3}) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:38 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x10000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x3, 0xc1}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e24, 0x2, @local, 0x7fff}}}, 0x84) 23:47:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), r3, 0x10000}}, 0x18) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r4, 0x4040ae70, &(0x7f0000000000)={0x1, 0x8, 0x8001, 0x204}) 23:47:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x11) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) ptrace$setregs(0xf, 0xffffffffffffffff, 0x2, &(0x7f0000000000)="ae4dc69785e9727d5a1c2fe3f2756c30be0c2b7407d3") ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1527.445129][ T26] audit: type=1326 audit(1570837659.011:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19268 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:39 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:39 executing program 5: unshare(0x8020000) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000040)={r1, 0x5, 0x6, "8b6aa7fb698e497f352df9b43d1d6735887a1b7497901f770dc4ff545465066725b180e16c0005f8ea7d79c49049f7ced9cbd302e79b43"}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) setns(r2, 0x26000000) 23:47:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000000)={0x8}) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:39 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="06000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x181c00, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r1}, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xfffc}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={r4, 0x101, 0x81}, 0xffffffffffffffd1) 23:47:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x25800, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1528.245247][ T26] audit: type=1326 audit(1570837659.811:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19268 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:39 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x221, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:39 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x4173991ef03abdf4) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x800, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x678, 0x2a8, 0x4f8, 0x0, 0xc0, 0x0, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x6, &(0x7f00000004c0), {[{{@uncond, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x84}}}, {{@ip={@loopback, @empty, 0xff, 0xffffffff, 'team_slave_1\x00', 'ip6gretap0\x00', {}, {0xff}, 0x0, 0x1, 0x4}, 0x0, 0x1b8, 0x1e8, 0x0, {}, [@common=@inet=@set2={0x28, 'set\x00', 0x2, {{0x1000, 0x6, 0x20}}}, @common=@inet=@recent0={0xf8, 'recent\x00', 0x0, {0x5, 0x200, 0x1, 0x0, 'syz1\x00', 0x4a}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x80, @multicast1, 0x4e21}}}, {{@ip={@local, @local, 0xff000000, 0xff000000, 'ip6erspan0\x00', 'netdevsim0\x00', {}, {0xff}, 0x4, 0x3, 0x40}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@unspec=@statistic={0x38, 'statistic\x00', 0x0, {0x0, 0x0, 0x0, 0x2, 0x60, 0x5}}, @common=@socket0={0x20, 'socket\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x7f, 0x1, [0x3a, 0x1, 0x2a, 0x21, 0x40, 0x16, 0x18, 0x3a, 0x11, 0x1c, 0x22, 0x1, 0x31, 0x22, 0x19, 0x14], 0x4, 0x93, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x4, 0x2, @ipv6=@remote, 0x4e24}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0xe}, 0x901f08116665294d, 0xffffff00, 'ip6erspan0\x00', 'bpq0\x00', {0xff}, {0x6e29022fb113265c}, 0x416ce64e243ed2a2, 0x4, 0x9}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={0x28, 'socket\x00', 0x3, 0x2}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b1ba343d4cc39e040a1b6c00000053ffb0c476a3dc954fb2d683006b98205e2dbddc28dd62e89e318b71d7943edaef193dca8fbf1bbb38a99af7d7266fd4b934c40f0446e6159356f50643c8a974605ad5c8ce80a7ef3440ac3b4169d7bd1d8b3e8cc843d08cb6aaddf0778cb0fbcd1d740e9f053ae440828405c56f1ecd6d02d025f426bf810e4ffcedee9ca9e37ba246942a1086e90412dfcbb47d4d2769eb043f38e823621c88775effc936a43ca1417954db70111a963c", @ANYRES16=r4, @ANYBLOB="f0c32abd7000fcdbdf250300000014000200080004000800000008000400000000003c000200080004000000000008000400ff03000008000b0002000000080006000600000008000900070000000800080005000020080009000a3500000800050003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8b38c1f1781768e9) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xd0, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x5b5045ebc6520464}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1a}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @empty}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x1200c000) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:39 executing program 5: unshare(0x8020000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x6, 0x1}) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x24000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000140)='ns/net\x00') setns(r5, 0x0) 23:47:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0xffffffffffffffff) 23:47:39 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x3) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x10002000}) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000100)={0x401, 'syz1\x00'}) prctl$PR_GET_KEEPCAPS(0x7) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000000)={0x7, [0x5, 0x50, 0xea28, 0x2, 0x2, 0x1ff, 0x1, 0x20, 0x81, 0x7fff, 0x0, 0x800, 0x4a, 0x64b, 0x2, 0x3, 0x4, 0x5, 0x0, 0x800, 0x3, 0x9, 0x9, 0x800, 0x3, 0x3, 0x1, 0x619, 0x668, 0x1, 0x1, 0x1f, 0x5, 0x9, 0x6601, 0x3ff, 0x3, 0x8001, 0x0, 0x7, 0x400, 0x9, 0x6, 0x3, 0x7, 0x7ff, 0x8001, 0x2], 0x7}) [ 1528.399787][ T26] audit: type=1326 audit(1570837659.961:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19881 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x0, &(0x7f0000000080)}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r4 = getpid() r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x2d) sched_setscheduler(r4, 0x5, &(0x7f0000000380)) sched_setparam(r4, &(0x7f0000000000)=0x10001) 23:47:40 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:40 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000000)={0xb2cc, 0x0, 0x4, 0x40000000, {}, {0x1, 0x3, 0xff, 0x9, 0x2, 0x6, "eba722db"}, 0x2, 0x4, @userptr=0x5, 0x4}) setns(r0, 0x0) 23:47:40 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x103000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2}) 23:47:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpgid(r0) ptrace$setopts(0x4206, r1, 0x8, 0x5) clone(0x10008700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) r5 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 23:47:40 executing program 5: unshare(0x8020000) clock_adjtime(0x5, &(0x7f0000000000)={0x0, 0x6, 0xdbe, 0x3f, 0x0, 0x7, 0x6d, 0xffffffffffffff06, 0x1, 0xffffffffffffff00, 0x1, 0x4eb, 0x5, 0x7f, 0x7fffffff, 0x7, 0xffffffffffff8000, 0x8, 0x3, 0x1, 0x4, 0x1, 0x2, 0x1, 0x0, 0x5}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x1000, "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"}, &(0x7f0000000100)=0x1008) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000011c0)={r2, 0x3f}, 0x8) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r3, 0x0) [ 1529.199990][ T26] audit: type=1326 audit(1570837660.761:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19881 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:40 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x222, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000080)={{0x5, 0x0, @identifier="f28900151bfc17f2f682b22cdf69f7fa"}}) 23:47:40 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fba54d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x10000000000002dd, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:40 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x490e00, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x8, 0x8]}, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYBLOB="004001000000b804d7ef427a4bdb6d7ffcda2582a5af590d83d90f19bacddd6f78fbec7f65e7968cbe424aec2889df75e6fa590bc834750519274ee0d649ef0539afe2a4d3493c80d4f513e126b7c6fe14ff0072c28603c06bb7088f2c6a7db9584703cd622f4e305e5fd99b2c1aeaa80e1bf5bc6665f9519ba75203f3a0025fa2cadbac4ad0b201dc928b2906645f7569e3b9f311c3ada74ec667356ad7f44914d827c0ef133d45b4f21f5accf955b0872e0ae0"], &(0x7f0000000080)=0xa) 23:47:40 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000180)) 23:47:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) vmsplice(r3, &(0x7f00000000c0), 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:41 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x3800000, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x400}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000001c0)}, {&(0x7f00000003c0)="9819f83a05c56c4c0053a778985b6ab0c1ca8de536360cffe693be75287662b9256b6008950b91b4", 0x28}, {&(0x7f0000000400)="cfbdb403f297944c337675b388a4529e3fd7fbcfe8b7cde26e8173ac6368e110e6e641bede5c70dec266cafd53c586e547e043953df901c0de4ba61184a4929ff18a59f18b3d9af0de4299ac090771abe0c2eaaa12ef4c8d3bc6dfd93965745dc904508d8221790bd24c56e346e60cd8662d02b55698e2a7885b28cd3a4ed22dc3aba9f49873802d145f464c0625ea615828db78573fc4a86f08e24810daa3c8fa81d2984bbe214a6e15bfd3670028246472439d3c822931f62e", 0xba}, {&(0x7f00000004c0)="6768293f6bad051a9d01cae8046ba9ff0617056381de24f2e9b95dcc2f52cfd5da", 0x21}, {&(0x7f0000001500)="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", 0x1000}], 0x5, &(0x7f0000000580)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x16, 0x0, [], [@ra={0x5, 0x2, 0x7ff}]}}}], 0x20}}, {{&(0x7f00000005c0)={0xa, 0x4e24, 0x8, @rand_addr="085be30b7b52cabe49cb605b0430fd00", 0x9c}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000600)="be1acdbde48d8a3d376fbb6faea82d4ab7e1b1c211ebaad9f7b15a9e837817b4edf7cd3ca5ae4a84e9d0d844a686fa0eff4a1dd8c552079b5d297ca532d4b6a9d08256050f078aab95ea1c12b7f7ea317b7b0179d01edb7646ead1eec6219c466a27a260c36b8880ac76443fe2104725afcf53c1a38bf057af615386831f1c9c5d5c99819860ce75e26331b99a", 0x8d}], 0x1, &(0x7f0000002500)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @hopopts={{0x10d0, 0x29, 0x36, {0x17, 0x216, [], [@calipso={0x7, 0x18, {0x4, 0x4, 0x7, 0x1, [0x3a, 0xffff]}}, @generic={0x9, 0x1000, "7aaee90d4e16151a10772957a44699a2465f362e75109b5e9d0a6e3c19f0c3ff888ae748a03fc29ce6531d1ab5d2ddd51481a9444aa74d592f51d6ae8693986e9c50e1783f82489e65c0090a037a5bdff4f2d90b4531fa71767131fa7e5d3e5ec23c67f4fcea37eda7c877c9ee09ff5cfa41611f6f1d0057508f1284e0d0f852808933b0e6add87c8aef3e055730d324305e6941b029a2575e80b4073f11177e458252599249ff285aba3772af67e403a7c975a331ca9d9f03ff60c384b743d9c4c3459e4532feaf9bdba38ed712cb85c04329334921e75f69612a8a0478f8f079a9272b19f87a5957ea1792fb41f13cdcbf57fa1292f61b2ba528bab6c5bf5f798aba2c9bcd6964aac331d14d1dfaf991d60b7b20d7adced86851dfe7c2de69c3659ef4be102dc48a1524cc718ff20ba6991e12c92f1383c7c1a4fbcb96656bc556a20cff2615d8ecf3feedb22cb2f9655f79ca44ca56e8ae7f82f20339c0781d3bfacbd6210e850d8339aa1e86b822693e8e31b245b59848abf974ca116df1941a4378b4dcdb8e166a5dd0686d5b3689ef45a25e8fda22336ba0011742dbad1be1b808c528415645554ef0adee5c9c67165b970019430e27a4d81038026f8060d1461ad606804670865665d28c42ee6fafdf58563c1c2f2a17dc1d5ff6ed41cbaa1517f96abe2eca90048a4d6f00799defee670e293f9f08263dd935863249eb3d12de7d31af9279873ea95316933441ddbb74c72f28c7a30ce274c57264750e219b8905168e7e3e897d1adeacdaeef3b1352e00bff8237862e64684eebc71d5cd5fb7305b934eb737abd68ec8e724953ee34de2bd29df09d22c6c01b7622ca74f6dc7e159e5675fd8d627399ddb07d8536970db7280ac907cc0539be28641ad51862f7175e29ceb66c6ae46a8e682733e5f8e2002360be0ec18e36301dbf7876b688424a72e3fe33d76a47c7322cf9ff4ecfe3abf99b8c77650cd4eec4c1fd8cf0a57813707ebd69e6ec61a385e69c2c1f0b538d75ed1d6820b3636cbdec278a25fc6062eb8a71f691c344e321a1d9f35ecc5419bc21cae7e98449c65ed46fcf04981b00d519a594099ed411a8ad91261e144a81bd0b291da4bc36196f057f8877b00a6c5dfc3a2479bb98790f724b93754e4aaed76f7df68148292d79c53981adc4e267a18500e90f5e288752b98302cc7714a2677bef3dff2629b4d2861ae4f6a7f1a4c22d3a23aa4798afbb0f402b3ca8e9f8f28becfb1b8bee917069e6d7647288009360ac1b44832e28ded2ddbcb634f5e84f8aa5d8f629245ac13abd8164a5eb435da22ffded9ca1016fb41570036ac4f7b8fdcbf653079de3cec3f0b9ac0c3204844a73b01216f53070eb65d6700bd9d37d04f97cf1339d88829f384063aa5921366743b335274a3910268b2bd44bd56e051ec13c06b347729df35ff583eb1ee82f20771fd6f4632f802555c5787499af41b793e3251d2efb09aeaaa597bb74b29624039e7401e4fa3855f07d7e0d13cc3f50adb7f64faaf74d1c3cfce4f4d4f691b4087e4f361f193513a438682ea77661921764b692a69babf16d6430a45a2f9b9f146328945792f82693e6ac431af4213c5e084af6aebee71be169e3ccfa42d0d66474dcb966ac406f950a2a448e7792daf6da8fbcd209efec3fa3b8394abf2d3afe10966f05a2dd1a8eabc632d1bdd14e3f52b4ada817242a290c4c7170635e2efb5968d6917b943c493740a9c36a0f4d423fc54bc51da48bb07e39771327fd3bbb65d7e5ae1be0a9c31e3945aa8c81e46605416b6767f8889d41a416965842034298964e7a799f97f2aeb567870883ab97ec2cabd327e17da2467af0981a1e0f218adf96b0a4e1a5cac9b0fb48fa9fa38c2451e76ea2e66fd02669ee600f56a1473f8b4b22cca9271f8bc9390e91185cabf20288fc7dfda4d2a8c0833f8c90073621039ab45f394d278b887b36073ac4bcb91f5eadb69877af1ba6b6af78e06b60c7b3e36fae3132af66b83e7bd1b24edcf5ccf5e6e07179e142df0cac200c93b3f628a84434c372fefc1accdbb22b0c78fd36b013d828e80f8543b7e793eb1b71e9aa5d5d6326745565a5267a62ef3b2a16d5476811d58b03bda9c8ba56dabb6896c2e364a3f0824876b33f6f62a2a304b18f0c306f56ae2b27c42489083eb1d24391e26cc71c1e08a0ac691e4f561df9a5a03432394d8051aeaaf76c1b52f76ba9f311ec44135754225254c4051f177c22be7d1f333419f62e641a1c8f51d356b15b9c207ec9618bb4723f4c751e17dd5df2c2bdc0c0092c9376d8213db18f6c72e665a88c93536a5b2d6a22813423fa6b3e2285be0dd3f2bf46fd2dcc2b4e6330bb0458e61c98e52d28ca82eed99e1357175eeabcca6e3f845b9d250d85cabd1c2bec1f2bf415b2596176830dc214087a98df33e02630e72fa064fc77414f6fa1919e431c0eccdeabc86ebc08d03913cce0491c347f07de4922af794b4953bff6c03bf3b8716a852df238404d31c185e85394fd54802025f0bffdee8cada0c39b1094af1d79e549e16a95e26a466e0496f13a0990f1451a45222cdc6c7e4167528c41afc67586b792486e616b58a53720f5b83f80dfd3c58d99757cc140da8d54085c88ffdd07282f641ea6ae63b7d8982cb2f4290756a32fdb08978e8860b073ac6d4c5d68c2a7e20afde0a4d9596b991eb98d99fa4599e55bb574408065aec9f1fec76763d89db3aa8ff7cd6fa772b51819a73f45ecbf4f0b88c9d98020dd9e923a2b83e3d9f9f8cd6a2e3d5a31bccf95285a0cc0c6ce82dc9103131508351c054d3e6d3d4dbc6faad67c373bfdf88f003f54eb83ade8755277e7ac743100c7a05fe74d771e6e8677ae812b8a16497cfcb72c752262bd543aae684ce0e5b7be8097d9b0c77f2c40cd8ba0199916adfa5b346cd7f5796a9da94239cd85c857bee44e9d200546aacf7b9c9fbb9798583ca9e45385517934616af2c53c26c13c0a046a6c3003185a88bd08e82f64558c1c5048cbefae083eec53fd16d55045fb7a8a997a10370ff74f98e957edac821650a7dea689edba6152d96709439c45036ebafb0da0e15e77fc3a2fca9357fc885d3701320b715a0701cdc70f4990c668ce4138986090d1a1318e580de7f16d7ec061500afb8d007d60c0ee97dfccc6b493253da4fd503b21fbecff1247370f63733e9b0b3c412ffcf36cd8a297759f2ea3935925617478db013fd556b13a979818269b1cb1aba6a2ca13acac16f6472265590bd3109ae4bc1edabdbc2a60f960509dc487ffe1be9edca5c9f2f158f8b83f98ae406ba4c42532fc555b0a06a98537f800831c37d39fcd7ee4d7d91f579f2878adacd4efd6a736a9bb4ff6fdaca98faef1beec6039090a76ab8585d027f0aca10f6645c4e7f9998236676d3364ececb4942a6b555155197c6555c63f03e4929257951c10a55cb9b13ad261e8d365f926ea8bdd74b6dc1161b6e10b6dd54090b9c0011f02a9897b10646572f1696e857145519fc743f18c3a15e68648a1d11b2dbdad63ce34e2786eb1836139385fc35ca2c7af32fa107da1514f92ace5c9556206026f14eee3a7835496024ee84446cd3a886b5e33b7d69a09bee6d208362a52522ef08b959f702441da0648a306c79db318a3e7596788bfedd0c132a615759dcc21b54d9e1e49a321f13eef4187c87eed89d4199d4987bad3f1df4b07713597df4dfa2aa66a176bf01051ef58c49bef9512cf37ad3ad1e5020830ecb56b3a2778a2866b9c79d68626b52eac7e224be11de75bcf3f7592ebcbf3ed259b13c13b51c43fb1f010c0a60c20fd6e97408e86e5dce6855516b7bc8676f93324dd7a53832a9ef5cf3f991a49e65550f9e1a0e975afaf174185dd682739b5c8fce3e91eeb5598afce939a65920383086ef288e9c4479b1e3f87cbef77f52fb63c970ace5a43b8fdbae65a9d7bf4979f35430056a40183c91be0a16e829e26d8a7a6958f55ab293cff65463ea7e1a04440c8a78a5d4dbbf10906605ebc21a6dcfd462bf532a078df09454487d22507d096295400a90862e54a917b1245b976ce1df51b11944f0e4cf4ae896d11853c66d32f97c0a480f990dd708db4181706a911ce2da7c2b5adb3e3bc158fa13c693a4d05f90eaf7884350a692f9089180e2764bdcaea31898c2fe47261f846d5fa96bad30bd1be6dfc1351cd9fa58dd540450dcfc93c23cacccd2c9bb072fc7d74a5dca47c7c126f8ad80ec9b634afdfb68d41a692a04fcb648700eb1803df847d2aa5e9988d4956aae9f4e8000fcb683296ecf194d08ed058306ae94906b1d9ee031c25bdf55a27c86fc9cc58118e87527cefc5fcc057b3142d4286f115d4059f90373d17ead0f5726d3e7baf5c152e3a52156bf65537b10be0e3716521e22d5adf3cc092deccd1e372ff86f6a5c764d1ed99eb8b5a13081d51c8e214cfa858085f1254c255a9ff9d3204db48831bf86734ad0d81e9ef951c9f304d94cf9e2e5fb9afd95bd0c0769d071b7c7bf360726f1f4fc2a3c52064b62253440c4181c8075faf2d2ca874059329797c2d45fa26110207e06aeb1fa898a27d69399fc5efc49909a9af5e5ef2f26a080e80b27b3d6a2a1116dbf52ea8db1741d55fdcf9ce7c34bf9d87a087ab8aa40ca3c6d407ccba083e7714ea418918ab0ab58e0c30b8d6c9d77b788abd6565ad472295cf7dbb0d02e09689311ff92d879f62d6a1f7e3e85c6e80bf726006da55b32fff285f99ce8c74205c034069953100d8e1416fa83699449e45ba9cc2df3b78af50dd2711e38766379eed2275cf9e695a14729a6f0407309a423f6b96d129327a50a76dcf30b005a7d41800d33c9ca74b09e064cc4cb80d4487df37ab96159590ac50e134fb5cffdbde8e813945a65c60044e286842f53893c34cdd9359f0b3ce56520af8861554ca4eb0e7725287d7f2d94edb268ce4319fb10f7c19496612fb1d41a6cc88d667274172140ca6e6261d8e21fee467b7300a157b6db2ddd5707165e8f4f7e5d0e27a87b92a13cb7f166e9c1daa025364eb4a48c3484d9c6a689a6b1be170fdd49990b7ac457a329248f795924ce260e9b75d02aba0aac12c5155a78681ae6139f2f120ff3dd48ddb30cb33cebcdcb474660cbd9569eb538a1900d8aca9923f138ae97ec49af4f33a24b1a612b705150fbd143ce914eae5995ac16ba2f9fcebe3dd2d6aa9e28fb423b0339034acfd6f77ed2d92b50d73407b1856a71f0e9f1e5213f399bf90338c8996fab29e8e3c04281d92baab6064bc452d5305dbb2fa55ece0c3fde654eae512e2c89dfeba0357987a172fe8b084b457531075e547326b39f1b389a0a498a879b3b7caab70067638bfc30801e8a103c2629210fea45df3b779e3df45e013d531198cb2f7a0fc57950e0f12fbbebd3d34eb43b48633cb045b454635686bd0f019d3923a20fba60a077e38ff069f37e43a90c9ba00cfa71c7200835221447bb21301b1229144fdd320c77a91a8aac8888a8f07af3b9b66e4f2eb7ae70f1e82865e4fa71d0965706c069f03642c39f0a23a6cba8123ddb417f59636555ce2327274fc31636386d2494a748cafdaa0bce57743af5befce7b79d3a83930d32ea2b44143f99806c7352862f069ae36727f7ef538f7d7e9a061c37a6fac7fdd21200315af41c5a04ab6f1868732f3697d2614279d43700bcdeac35d405e2f20cbed116b926cf0dab183fa687e7992b14c4abe3e1a6008abe06b5376148e51894b3e57502276d03956e7433c5b4d20ace93a04890f6"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0xe}}, @generic={0x4, 0x7b, "4928facc0af35fb0655b171a5470314e0d3d0fd848c713ecfbb0303462e0a582efba8f5375e5c7c260ebfe42251328467aa17993adeb59b4f23cbcc7637aef91b25493deecbc04d343e3f4cbafcfee8bac2fe7a6354f5a746bfa9a67c92eb31f25cce063eadcf52a8d1f5f7b36ed3daa3b7e501e80c3c4b958bedb"}, @ra={0x5, 0x2, 0x200}, @jumbo={0xc2, 0x4, 0x100}]}}}], 0x10e8}}, {{&(0x7f0000000700)={0xa, 0x4e21, 0x1, @remote, 0x4}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000740)="eeec561708eac9594c806c96dd70ae4bf9d26aaceb3e1dce5f93159c45b2d781cf92d62a08ad3033ca40c5839b2498c0f69cfe61e5c183932e4d8c44538dcfe96d7f4836108cf39b1fdf77374b328428333bcd433f049238597de5cf7519d6e98d157df8bb37f35609f1268a825ada9d9c217faa0e974a6fa4a2a2f0abadf9c53d773cd4c3446c193b4070890ac691d9ff6f8eec8305b6beec3b9536abf476f4b03e0cfdcc4be3ae", 0xa8}, {&(0x7f0000000800)="b12e2ad916904424a1116729caa103cc4c08122ebbea4847ac33e964d4ee18ab723b4fc031c6512a0ae52a4da2671b9c66084fd350ce2e518c3b6ed4e26a637b9172dd1c3097fa175db5ad754fd2d54c07c845f261bb2150cf7b6a09b7849cdb0165e3802d842f6cb07b6e3f977c73a8bb59f4a6e7b81d6711f5b63cc8da2dea8ad63b71d369873010ae9bbb631df684dac235a4043449232e68", 0x9a}, {&(0x7f00000008c0)="ba263ddfd3d00b6af089b6ef31d889c5ae1f10d12c678c88d4a25435b66f3b290bbabf5fa3ac1a92c8394b51fd9e2aff15db08e0b0526785b5dcc70791a8c25f3450868396ac37b8cbf3ae9d1ca95c00cc20b672b077ca264874a253a1560f84518d84252daae155f72159d2f2984c8a903ce1ed2c7753d4e29b37835176c340e5f674fd9b16503d93330f5a992f9a950950f850f42a094f853c36f1cd45154be48c2ec5ad82f14de37c1aaa412eaa90a9cddd6b232532af0f83b61c30f9916a1a81a43b937475d907f071aa43e665a41f4dcb8e208ab060906e0c62da098d9f13b360e5669572f70639e1", 0xeb}], 0x3}}], 0x3, 0x20000000) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) pread64(r2, &(0x7f00000002c0)=""/237, 0xed, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, &(0x7f0000000100)=[0x4, 0x2], 0x2) 23:47:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x40900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:41 executing program 5: unshare(0x8020000) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x11, 0x80010, r0, 0x8000000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r1, 0x0) 23:47:41 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) read$usbmon(r1, &(0x7f0000000100)=""/25, 0x19) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f00000000c0)=0x2) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) [ 1530.179143][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1530.179157][ T26] audit: type=1326 audit(1570837661.741:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20627 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:41 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x223, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:41 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xfffe, 0x301000) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x1, 0x1}) r1 = gettid() r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000300)=0x7, 0x4) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000140)={0xffffffffffffffff, 0x5, 0x1, "a2537a23110dee97126626299501d3a3bbc6fedcac15c88ca4c45d1902e1d88a1abdce7216573d40cca0716a0b5cbd02189f6b5b6229974e8f5c7cac99fae8f752e946888a7bb85fc453fc415a75af0f11c2812484ef04f6a238d6124c4db6bb8035b0567954294b7ecc5dfb6e3de50920548867b49dc521"}) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = semget$private(0x0, 0x4, 0x220) semctl$IPC_INFO(r5, 0x1, 0x3, &(0x7f00000003c0)=""/192) r6 = msgget$private(0x0, 0x4) msgrcv(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000001f0000000004000000001d723b0284b6f3d700040000000000000000000000000400000000000000000000000000000000000000ffffffffff00"/97], 0x6c, 0x2, 0x2000) r7 = dup2(r4, r4) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) timer_create(0x2, &(0x7f0000000200)={0x0, 0x40, 0x4, @tid=r8}, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x9, 0x0) 23:47:41 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) 23:47:41 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) r3 = accept4$packet(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x14, 0x80000) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000140)='veth1\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x184, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x108, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}]}, @TIPC_NLA_SOCK={0x6, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x184}}, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f00000005c0)={0x6, [0xfff9, 0x1, 0x6, 0x1, 0x8, 0x7fff, 0x5, 0x1, 0x3, 0x3, 0x4, 0x3, 0x1ff, 0x45e, 0x5, 0xc841, 0xfffc, 0x7f, 0x1f, 0x7, 0x7, 0x0, 0x7, 0x0, 0x3, 0x4, 0xffc1, 0x9, 0x80, 0x718, 0x9, 0x3463, 0x400, 0x7, 0xfffd, 0x14, 0x8, 0x9f3, 0x8, 0x8, 0x1ff, 0x1, 0x9, 0x3, 0x0, 0x3, 0x8, 0x6], 0xb}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1035002}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="cc020000c3b0e362b5ba816c6a67b573b5a1e37ea02b3cb5f9f9dd334e26e2534df6ff", @ANYRES16=r1, @ANYBLOB="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"], 0x2cc}, 0x1, 0x0, 0x0, 0x2000090}, 0x800) 23:47:42 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x800, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x0, 0x20}, 0xc) setns(r0, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000040)) [ 1530.382531][ T26] audit: type=1326 audit(1570837661.951:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21359 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 [ 1530.382587][T21358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 23:47:42 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) socket$packet(0x11, 0x3, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f0000000080)='\x00', 0x1, 0x1) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) readahead(r1, 0x2, 0x304) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) setsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000100)="abcd21306e974197cd4396a84f570d96b323e134917d9d1ebf9307d3568fa96ff004db7d6db741fb7d1d7061c126eb27ed8158d4d9a5a8e4e5e2f18b840b5361a1576d72cdb6816e9d3bc84fba30f46a1deee816b92379100bd46c44629aa2d142d219f5f34f7b75ee0ee0aedc1960c53f69d84fa14b2ecb26f9ad609c700ce61dc4b0e083eb213497b74c96bcf0ce88797c2f5588576de74dcd7e5d1ad9fece980cca8108bb2bddfcd0121dc7ebb22cbb3e2172f35388926c80cfac8ee31518", 0xc0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:42 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r2 = fcntl$dupfd(r0, 0x406, r1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000)=0x9, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") shmget(0x3, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) r4 = syz_open_dev$video(&(0x7f0000000200)='/\x00', 0x6, 0x4080) pread64(r4, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r4, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:42 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f0000000400)={0x7, 0x80000000, 0x8}) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}, [@mark={0xc}]}, 0x5c}}, 0x0) r4 = dup3(r0, 0xffffffffffffffff, 0xc0000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000003c0)=r4, 0x4) sendmsg$sock(r1, &(0x7f0000000380)={&(0x7f0000000000)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000000300)=[{&(0x7f00000007c0)="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", 0x212}, {&(0x7f0000000180)="9cadbd99be06de2bf2e4f578b34d1071a96a096a8f6cfa681a2c1ebccd1c549c6bc9d4216952b4f3068035072958bba81745c316792ea7e257c329", 0x3b}, {&(0x7f0000000440)="6cad8291271458721c9a0d59f5eb6e3424a37043dbd9a0f2dcef4e9b29ebc63b062c78b30a31c909f4cef394a36cb9d41b24ca5cf47eba0ae2233048eddff0c64c9d4b138ba2667c0459306f5b3b4749f52592c72ecda02446c3e3ee740c6ed88b89b33de81ab746d60521b341cd94dc5b8026bc640076936d2308374664b43873b9249c8b2dd51c1ed01b75ddc4ff0b031e6b64d6c445347b0441bee18ad0c8d7de7c18fc5f38b71dec2ca3e4", 0xad}, {&(0x7f00000002c0)='\x00', 0x206}], 0x2fa, &(0x7f0000000340), 0x30}, 0x4040000) 23:47:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000300)={r4, @in={{0x2, 0x4e23, @local}}, [0x9, 0x2, 0x6, 0x8, 0x6, 0x800, 0x3, 0xd8, 0x7f, 0x4, 0x1, 0x400000000000800, 0x200, 0x100, 0x100003f]}, &(0x7f0000000000)=0x100) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1531.182790][ T26] audit: type=1326 audit(1570837662.751:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21359 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:42 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x224, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:42 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000002c0)={{0x2, 0x3, 0xc5d5, 0x1, 0x3}, 0x1, 0x80000001, 'id0\x00', 'timer0\x00', 0x0, 0x7, 0x4, 0x6, 0x7fff}) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/112, 0x70}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:42 executing program 5: unshare(0x8020000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}, [@mark={0xc}]}, 0x5c}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/pid\x00') setns(r2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000040)={'bond_slave_1\x00', {0x2, 0x4e22, @local}}) 23:47:42 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x7805bdc3d98df48e, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x540400, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)={0x1, 0xc, 0x4, 0x80000, {r2, r3/1000+30000}, {0x5, 0x2, 0x5, 0x6, 0x40, 0x81, "70f7202d"}, 0xfffffffe, 0x4a71552d2f6b205c, @userptr=0x92d1, 0x4}) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f00000002c0)={0x2, 0x0, 0x2080, {0x117004, 0x2000, 0x3}, [], "e948e5d3e09ac2b649cc888af2f5e4c73f62cfe7aee630829913450d163cb6571fc8143ff262d16246a06a2907841fcfef80c5fa016526ed0d967f3978df66af7984b920ce0928498b8ee4d80e2bf208fbf0d7250ab0d69efa9382b56820af8c55349c5477b518ef87239c7ca723653f33df38d5213ec257f004fcfb83550570fc56e511085bc5b49385231212a7e6fb11a9a26c880e20e95c195714672a776c8e10fba5867ab597e7b8037848a5cdb79656cc7b3fb91cc7bcc681691cae29c06edf23f0e332781cfc5afc7c9117991a004efbdf5daf832103035b02deef1f9bae2c4ebc24bc80dc061998fc36840add2eaba4de9f0a2bc91705e3f061332c6ecfa9b264ed16de2cede1b5289e5208b7d0752f9febe519de9ff1aa221516421d49531fe794d9f8d5ce157a4b883736bc4bc99dea31de07b625ec41fd2957e2f116d929836c981183b1b8004e0b947bf788646ad47bc4f173679e8721ae57bdc00094cd54a16a92224a1a235675804a116963e2e140b0fb3eb1947a5c98cf6f2d8f6dd308e8823276d76d872fe90bcef3cbdb84061b7d16754893409abde901fec6dd819f68db48fa0934cd313488ecf3fde96c698fd8e972eccd1067e2bb3a3c4c5d96cfb3e844423b0fd94d8f935ea27e31627a68a84f6f89fe7e02c40edfb20b255a1e9b8bfa10edd21f8906de64b7557ced248a1bdeb0f56d338615eb115b482775aed652868cb6fc685d693c937dd9d20193076bda53548370100ef67f7fc603d51eb8a812944622b7f57776672043415f6aa8ebcdc19cf9ba94d7f1a5765ad849e479c2293903f9474df303f3c068d064722ccc7c68528b378b2482d0643f6d374a6e3d7b3b3fef287916921ffc23cf7b7b3ad2ec2b3590283a932cd86ad97ea2d444121342de1bbe81e1b89e5fae5568d56e0e70400d57a6ff0e4fba477785fb531044c7a2032c6b4ec6aff2fdee9e028b4f3f7a428e8be93552e3154127993de31fa8c87195884ab88a48fa6e1b8533b80e76403447370b5ca394045bf963426ad52e5de2f4ac1091a9aa0af15bae91e32dbb74562a45e687b37d4bf3c85121749e40b2c668f9e67b2ce2a2a7b114a2b468f21942533766850c93fd015dfcc2e5c58088d7ad50000128a7117fcdc2e333ce3cc91597a22495e49612154d91fd832728c8d4da35f5f118e1cfd322feb7e8eea48b413ee7eaa9811f71c36a1b3452880af8694a08b4d5dd2d39a1da6e0c2230881b1a2dea113e8f59b0684f42b60f5533a7bb40b0dcb071c9e923347768d4b34bc8382e2019e7d9c3a9b539d7d9d46d809221f80ea5b2938a4642abe159771801b72e418a4e1aa58370f291bbf2a4f5e161c45db2e25fb69df57ea4097b7e941ae7790510e5e387fa758adbef8e1b3b40ec18a2ce67f4677188d0367e6a5ee8eca3a5753546cd7baba9d0cfdc4dfabf76b57e8af7761b109f7149dc34bbb04c87b39f947860c836671eef0548e3569dac3554522c85f5186a357b33bf762b8e15ef11d52c52c410085a1da528e07ebec84db7e8b72b2b74494e68913ab5889f06d8bd410dbc0adc2a3c17fa97ac8e3a7430423da74453e5149d4a966cae3cbd635e4cedba19c2cc5dac00a4b08dc5cb431c623ce5e088b5f779f3aaaeac5efb22f444b4fb44b3a2164043fc7d5be196dc84cc31766e0deacc8311859d4a05a1eae8e5ac3099ca3564ef86b0e32cc8b5943df71d6a0364acc48093c20c372c76e20d975585ec758b8e07cefc47debf90a75cc695c391c69b265923df44c4fc2aab80f96f48cd764422b9ff5532d17aa2af8fa7d2e0830c7d6da8976ed1689d3a39b8440a742cc8ff25e199e21a18da5914f84928df31eb1130d53a743901f2ccdde17c8c5d89288a1dc62fdf752a4c5aecf7e4bde6befc6f1af9b5cb360b0e39331e77fccf3edea9c03c16bab3af54c952cc41b62789e9ed7fd2ee2c9d4c158054b68479a42d51e6e216fb47585174bc463a0c9dedbb416adedc7ac287e35b029458b304617ac41fc80cc785a832d486c3f6cf79aaec5d9571ea6241b4654986221dc3b31b20ef2d5c90ee2dbaefd210995332ed600677f76f06c9f5bd055d50d1af6ae22fa893be5d2dcfd5791c8c5f1d9d4d4731365d3f74b23c46651c910b59df8be6afab6b8a44db93fbb919327dbccc790815fb61008b6465e1afaaea7c5addd03121fb2990ed60395361765d7e9cfd16f6ecd3e365f4a485a25e98adf5408efe590ec2b8e586bab12902553c33b9f6834af352f09a12edfdad4ad41239fe916d1904b439a718ebc8921931ca84efb1a96e73eb4f7e1a09194b7564fbdc7cf161b917f0c0510b6ed73710f4e9c2b5a908b0ff9a45bc1c5e49babe84df89ab570f39efb2cc4ac4fc81a2a306a2234f4c416b2f8def0e6e309e023b31d1da5f8137dd36b4c987d289e5faee42a0beb7645b6bf86f0504cba6265adcf6ad366fe641ec0623d2d4a470aa7a8282d1a06d33eb4fc2b85e8a3851d87e82d718ae546252498ce5d8747fb7aeb9a147b26e9025110154bd96380d56613045bfba1c65a179aaa1e030c6ef1114480e785f7eb951fb3a3586a8ee108122468a8dec408c33539be2615e716dc3a1cd811d2854510624c2ebd45dde3faa9af5eeff7fe7b3b366cc186a9612541242307fc476c2c8a5644e9d1131a750af5a9afab76b033d34bb1d9b3cea745fb3eb336450bd10d4c51940eb0201f12746e3113802c0c7a332356639272463824b3ebfe50adfcb819015f5f7ec21e6437ac8b8aeb23fd542c64911a90e36af4b84eb51b18ffa23a7a0385f6620a24859c0b5834703c2f4743bde00984955e81bc6ee7fac51b3f3707b832fa8488db1b01e33325ddd8466f921384dca87d82697ffd780b1575edca423dcfc35e97a4a5fe2f9631febcdd58c54d92c2144eaf2c8fc831c2018d05370988fd9b018d79fccb907d24e6bc9302d24342be3c844051ce0579b6316ed0addd97b85d240a0d224a90907e913298233dcecd46d565ea2bad2a6540f207d3cb42dbb7bc77a6a2277b9f3f2da6941d1a098d78549c6a21f078903bb1058360701532aa7f07ea1df19e55649cb1146fd9fd31f2702a3e888acd86fe66674357abe267d29b92ac237507ff98894f843dd5deea91aa9319439d20c0de1e979362f86eb35bcfcf88c51b864d061b5ad6b7614085a50502771aeb731f8c57730c6789d7debdd9ade0572476481ac048cdb5e4b7fb473e1759251ad32c1d638ff01d4b23b8c68dab9954657350112b18231bd5ddc0012b0ff714cd344dde7a5bfa98439e8bfd19b2749b599ef566013cd4e3f3ab18595fc83ec7c1077338954200c36641974f6e441537c57f45fda737bc5426d2f23076aaab5208ad363aa4e9c82baa744de4191048f6cf81b03ec13c93de3de2dd75d5bf8415a348c02026a39e8fb239bd20c0cf1b5b2a02ad08d49fd98c23b55ef0d094ef00fa2bab2d867f4659704c4950afc6082273347ce5de6e55ce92d24f39693503d164a93af784d0aba0b83c23c472bdbd8e4e92ca70798547c73634208d1f8e76dec05a49734b273be403c2e494552521898f49a4230c738f869abd3e42505bf4187be852466b6e3585cef6075ac60035cd6cc75eb6f8878d5439bfb4c36771169e0cb4286b3a2aba6d85e963b67325347ca0d88c824eb68b41ec018e9581af110647c876e03b1c6c1bfbbbee12ede8a349d9a43aa9167d98605579c673f7dbd68ea7c2e741031d2586a65492b58f1e5f51402833682951c710e0e807100857cf657697c382305e31dae7b6d07877533980e133b5e516e3369162057c7b5d550f7d193f8c634a43708769bb6dac14ea92114b8abc19beb91769974f19803615b023df9da9bdd7e63221116e8a0ba10fe72b5d03e8589e28fdc5aa45a48850dcdfae06eece8b860ce5c7ec78ee9f9509ac687d15bee6346f8715d145b564ce93bdac5716380a8a5fdb2b69028fd9d50c7f79107b70eb85efac1b54a997a1fddf43d2ee2d956d4e8bfa85c2ed0b8482f036221449ca33c600e22bbe1b8e68c8ea401fefc054e3f55b1e1529cabf58336206457c9fd33728f8c240c3e6f31c2a370dbe1d05b19e39169ad3840e40442f81203bf1f7d4126936290b546665bdc576232c859e06adb423fa1abf7cd520d28cf319046c0dc4bf15422575f0103040b62afa88647c4b3717a6ace30944dacf728cd4ec5f2d239b0697975a6bfbe446c03c9ace71b5610376d4b1ede53322a07f0c8fa58fdc7afa6bc46003eee45fcb35258a741d340f0c3cb8afff677665477c2809b0a3e7a31b5f99097d3b69cf24840a9694283335657ac8f7521aa6552ac6b620e0c3fc1668e02e6e0da83be90ee8ddd4125b62f5bc31906457887e0a6fab5d8265a8ae1ef2965330c9e37a2b1309df067c6dcd055af1e4f5ee92bfd39dea73cf5993f3615784d1b8c2580d1fb4377a722dded63ea56e7e9146db41c91c5ff46a856bccba25c66ac48348d1a7c5362f3cf01a630e4d2393bee4c82ce8e2f9f2d405121045643f75d61c3e0266cff3833ad18b5c38e11b313de154030e18e3f004aeb30d82c8cf780c26a97d3cb695f12497c3a03030b08d3dfbed117af296118cc2f1e9eec2da87c599f4f53b8a6fe4831779120cd92c46ac26e4575bb2f4b616be2a024ae242de1aa56be2c3ca56e931493d0731e68be6f2c4ead78ea9c69556214031e1fe7ce450466baaec7aeafa85ce9a71d40cab113fcc97a3ecf8f6042ad80aa4012ea9f73aa9fc10dee74f5954613434241be86e4fa9a8830f24bf624c1c3b43f174d207c64ba3f77e674b96cad581ae8db132b04abb4231e21c33b09afd9eba6c2e5189d34ade7d4f986022e2981ad91b46204c2db19ecd64a80b683376ba5e391f3f4f41da7320e5c32309e2a459f6159072449f90db9645c8d638ffcaa4c27521b36bf524d4703d3526920d1a6051469953a30c1a66fd9ccdd6d1e32c7be6096669cbe1a461aae6f125c2a71ac9af9e12bce547427f15d7b87d88f8ff254dc1221b51bcac37249801edff3e7b2a75396298ffb113fa36a246472bc5907660a2388e23315ec0cf2e4ee66163d7e6b14568d33ec235799e4b6b876aa0159b056c4fc11b152ea0f76f121e7078480c09b03dd759e6a21061584b1f591a0858e74f73a4f1eb7b1377b7932f55f6644f70a97c3dd969e0e1f922452d7c878ed1a8177def90cde2f73b30cafa07d2e6509476adbeb5d15bb8d8dceaf5e2989b3629cbb1995106013bb9d06e7701e4a143cfb92b04253de48a46ced046f2638697cb5daa722b06f79dfb4a7d434856dea0e367e3a044a2c066ad9c9d39912768d71a870cf4282644ec1eb2d2ed13c20d8f8a233d0a28a0a9c14a9de0f3f9c7b93b1f03dd8883017544d5e5cb4bb86a745b5e2edc53493310bf454d7c01f29df188bd3e08ea95165a9136fd38376bc39930a6a152b5bc1f2e703bc1c460632465b1c5741ff0a8c8b73ab528ab400a821927a7de98867d3209760cba63d8353ea25a56fc030bf20f5284e42bbf245092570f8adddb6aa7c6c652a2117e38857746a6316f16508e2fc58bde741d3fb34b1200a5a4b28f1f5d5596e42436df24efdd9a51b320a4e96fdd7c97b02c445a43dccf5a45b41fd90abe944ade9fc0b31e1fe535349b32ca70d1ec08be1a6711c7f525258c805abce6592980077e3dee35f5891d01c96d739f714da645fcb01c293231e250a75921d9b51240b6be3b208a8c6bb899527c5bf313dab71dc0fad6ae21bf50b", "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"}) r4 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000100)={0x6, 0x35315258, 0x9, 0x7fff, 0x1, @stepwise={{0x0, 0x4}, {0x5, 0x80}, {0x3}}}) modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x20201000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x335d, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c040000280007050000781e23d6000000130000", @ANYRES32=r8, @ANYBLOB="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"], 0x45c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002540)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x805121}, 0xc, &(0x7f0000002500)={&(0x7f0000002400)=@newtclass={0xf0, 0x28, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, r8, {0x9, 0x7}, {0xffff, 0xd}, {0x6, 0xd}}, [@tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0x34, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0xed, 0xfb3b, 0x10001}}, @TCA_HFSC_FSC={0x10, 0x2, {0xff0, 0x2, 0x8}}, @TCA_HFSC_FSC={0x10, 0x2, {0x901b, 0x7, 0x800}}]}}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x45}}}, @TCA_RATE={0x8, 0x5, {0x2, 0x8}}, @TCA_RATE={0x8, 0x5, {0x5, 0x1}}, @tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0x54, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x722f, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0xeb, 0x1}}, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x6be, 0x8}}, @TCA_HFSC_FSC={0x10, 0x2, {0xca85, 0x7, 0x1}}, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0xffff2fd3, 0xed1}}]}}, @TCA_RATE={0x8, 0x5, {0x7f}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24814}, 0x0) r9 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000180)={0xd23b, 0x3, 0x2}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002380)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002340)='/dev/dlm-control\x00', 0xa42b02, 0x0) 23:47:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x800100a, 0xffff8001, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:42 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1531.346769][ T26] audit: type=1326 audit(1570837662.911:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22103 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x335d, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x335d, 0x0) ioctl$KVM_GET_IRQCHIP(r6, 0xc208ae62, &(0x7f0000000100)={0x0, 0x0, @ioapic}) 23:47:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000080)={0x5, "d9b7b5c30dbf1f6f539c07a571610de7752977b789e31efd084d0ac7546fd8a2", 0x908, 0x200, 0x0, 0x4, 0x2}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) 23:47:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xdd, 0x80, 0x21, 0x3, 0x0, 0xff, 0x80a0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp, 0x600, 0xffffffffffffffc1, 0x7ff, 0x3d4bace26c012d2f, 0x20930a31, 0xffff8001, 0xfcef}, r3, 0x10, r2, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:43 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:43 executing program 5: unshare(0x8020000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000100)=0x64, 0x2ac) prctl$PR_SET_FPEXC(0xc, 0x80) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') socket$rds(0x15, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) setns(r1, 0x52000000) [ 1532.147565][ T26] audit: type=1326 audit(1570837663.711:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22103 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:43 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x225, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:43 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0x448140) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) 23:47:43 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:43 executing program 5: unshare(0x8020000) setns(0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_\x83df_ctl\x00', 0x563c42, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) 23:47:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1210c1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003300000000000000000000ad857eac030000"], 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2004a810}, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20020000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x7c, 0x0, 0x4a129e8ec8cc4b88, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x4}}}}]}]}, 0x7c}}, 0x40000) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r10, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r11 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x800, 0x0) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0x4) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='SS\b\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r11, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b1ba343d4cc39e040a1b6c00000053ffb0c476a3dc954fb2d683006b98205e2dbddc28dd62e89e318b71d7943edaef193dca8fbf1bbb38a99af7d7266fd4b934c40f0446e6159356f50643c8a974605ad5c8ce80a7ef3440ac3b4169d7bd1d8b3e8cc843d08cb6aaddf0778cb0fbcd1d740e9f053ae440828405c56f1ecd6d02d025f426bf810e4ffcedee9ca9e37ba246942a1086e90412dfcbb47d4d2769eb043f38e823621c88775effc936a43ca1417954db70111a963c", @ANYRES16=r12, @ANYBLOB="f0c32abd7000fcdbdf250300000014000200080004000800000008000400000000003c000200080004000000000008000400ff03000008000b0002000000080006000600000008000900070000000800080005000020080009000a3500000800050003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8b38c1f1781768e9) sendmsg$IPVS_CMD_NEW_DEST(r9, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r12, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x49010}, 0x20000000) r13 = openat(r8, &(0x7f0000001800)='./file0\x00', 0x8200, 0x80) getsockopt$IP6T_SO_GET_ENTRIES(r13, 0x29, 0x41, &(0x7f0000001840)={'security\x00', 0x7a, "093a6cea7a1248766e071d67401890e26d0d1b6d437127e77b1bdfb64a2ba4505521ca613f186fc6cc1144a932fc6c02642ea7653d31eb45138da62c2eb1c07e92517f662319ac68610e5c3c38e8ac3b63f222b8aa56b37cd234d47f8138773337e7a5bab2e3beadaa6e3951866e2413f0e00397456398c3e021"}, &(0x7f0000001900)=0x9e) [ 1532.313834][T22742] Enabling not permitted [ 1532.340847][ T26] audit: type=1326 audit(1570837663.901:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22843 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 [ 1532.351586][T22742] Enabling of bearer rejected, failed to enable media 23:47:43 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:44 executing program 5: unshare(0x8020000) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/net\x00') setns(r3, 0x20000000) 23:47:44 executing program 4: socketpair(0x9, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x82000) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40030, r1, 0x36) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x7fff, 0x4) 23:47:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.nlink\x00') ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x800, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000100)=@usbdevfs_disconnect={0x5}) 23:47:44 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:44 executing program 5: unshare(0x8020000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0x14, &(0x7f0000000040)='(vboxnet1-procyppp1\x00', 0xffffffffffffffff}, 0x30) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/net\x00') r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) fgetxattr(r3, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000180)=""/36, 0x24) setns(r2, 0x0) 23:47:44 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x2, 0x1000, 0xbb, &(0x7f0000000000)="e90398c288be31b1c0baa7894e0f19a8c99dd655f2e1516ea15327c25f1ad09673a53b0e1e06f9e8f46c74f8139322c8e6fd5b94bcfcd24c46dcbc86f0e121ce7c3d44b32d853f1a335f363266d2e3df134203428401fb2e525cf54f16dcec5fd586a110e2923b7cb1639c1299d0a8f4f3c7df5f5f94a4f3aecb5ca4a59fb988a3f472112d79faba935c223e622f78e8c6c5e701af2f3c37be8207ca5f1462142ffbf9e47a7fafa230aeee78accebd79d5df47d486539a2d4193cc", 0xa5, 0x0, &(0x7f00000002c0)="42d75c314e41bacd7de6bd2f1f145008dec46f12a9a55daff95643f8a28508b309430a69f6905aa4b16ff5cba9d3592532ffc797ecc5de295c0707e91feb3b5045e090705657f1e8bb7a4bf81779d0dfb9654da0bda189290dcfaa1d2a8e253839091ff58154d9f9fc176251110e528108f96f2b5aff1bdd25693c9174196a75a0093d1074131da01bcf5594e684da5fb9c4e6953b3fbfbf705c139cf062198d1b2a80716c"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x242, 0x0) ioctl$KDDISABIO(r1, 0x4b37) [ 1533.140468][ T26] audit: type=1326 audit(1570837664.701:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22843 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:44 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x226, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:44 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:44 executing program 4: socketpair(0x18, 0x0, 0x5, &(0x7f0000000280)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 23:47:44 executing program 5: unshare(0x8020000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="095adbcfc5f39ccbdce44539c54cb611000000000000000001000000fa00bf0001410000001400170000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) pidfd_send_signal(r2, 0xf, &(0x7f00000001c0)={0x10, 0xfffffff7, 0x4}, 0x0) fdatasync(0xffffffffffffffff) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x114}, 0x4008000) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x200, 0x24080) ioctl$KIOCSOUND(r4, 0x4b2f, 0x2) setns(r4, 0x28000000) 23:47:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000000)="6fcca8522f56cabbe7516ef61accc14d18f618247dc1241386f7f175522b7269249247753f9a86d4a5c7281d3028b1ff3f6e0295f9f228e2229954f8eeb243bf7ef3b7f3c68f434ef1d161a05177f4eeb92fd52d256076da35460ca958685fb8eb", 0x61}, {&(0x7f0000000100)="c99b92a1e4769f7f240d8d923ac0076380394d067e6fa3171c6d277a4e47ad1bcb608c2780d3db4f3144c2c4bcf0280f5e223e83da4b5f064cf227a55b8c02f24f85f021083a4cdfd43d8843ad0439e55e8e360da1f7c501d9d22e174046de4d948c6c0a3a3d1f862be6b4754cad79c96def78f8bdf2912c529433e5a8d61d76c3ed9911bf863d4b8211d7ad935ae91d37af194c3998c635d2a5c9cdac3d49d90f419659afad0bfa5007703a46be0380b4951d4f5c9909221671bb15decc51ed3302716c034a893aa217fc3ea25ea737ccc9a53e32f4db3bdfe61c4f885fcf392e6e672e8d2b90f165835f8c43559cd8696454d7c4cc", 0xf6}, {&(0x7f0000000200)="9ace33b0668bb0969ec90033a76ee1c5cb0f41dd4b0bd409f30b9574e557b4cba7012149a2fa460ce9f1923044640115b388c09b6406d18f70af51e12528551e3377973c452294c80d8bc1ebb2f958b1050c10065b", 0x55}, {&(0x7f0000000300)="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", 0xff}, {&(0x7f0000000400)="c107f75b51c110bef888a852525892ffb161b2288852bc02cee5d1e0574209cdd0c3e04bf4261dd4856571e558502a0861fdbe6991288b0062e41333733e2f60e6c8904f2a786bdc24304f06ce76aef0879ba11b7be7049b863e2fc7a1963fdd08b698260e29e08904f9ebe83a92db3aa526782c78fb1a8f532753d28b43e57f54a2406dbc6751a532e5d6fb9e4dd04b8abf04a980776d544b5d0b262c4698e80bb5f839bf5f23b0a51632f0fa7adfcd1376a5be5227832a2b8c5c6b5c624c837cd53356da2f1b2cc6b47bb6be0be228b59a815fbfd80975d8927a5c8d1414cdfaa438d8e26ef9cb", 0xe8}, {&(0x7f0000000080)}, {&(0x7f0000000500)="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", 0x1000}], 0x7, 0x2) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) syz_open_pts(r3, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000001580)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1533.292449][ T26] audit: type=1326 audit(1570837664.861:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23391 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:45 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:45 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x2, 0x50000000}) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) 23:47:45 executing program 5: unshare(0x8020000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0)={0x97c}, 0x4) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '\"\xae\x86\xadG\xaa\r\x94\x95\xe6\xd8\x0f{\xde-\x18\xff\xb3l\xae\xd2\xd4\b\xfbX\xe3\x05\xfc\x8e//}\x91\xf8\x1bb\x1c\xc4!MJ$\xe1aO\xbe\xe0\xbe\xac\x8fJ\x04Pr\xb7p!-F\xd4\xa2\xdf\tky\x1f*K\xa2\x18\xe1,\b!\xb8\xd1\xf8\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xed\xea\xc5+Z\x87os\xcf\xbef7\x1ar\xfd!\xe1\x83\b\x8a\x1eM\x9b\x8a\xecK\xf1\x1f=\x95D\xd6\xb5\x9bJU\xb2\xab\xee\\\xbf\x11*\xa4\x80\xbdM\xde\xf2r\xf9\v\x8c\x10\x1f\x8c\x1b\\\x8f\xe4\x1e\x17\x0f\xd0\xc7u\xdb\xc5\xbe\vm:\xea\xbe`(\xa4|d\xaf\xb6%\xabp.[\x1d\xc1_\x9cK=\t\xbe\x81/4\x0eh\x1e\x86\x94\xf5\xba\xdfd\r\xa3\xfd\xfc/\x92\x9b\xb6\xa8\xeb\x9aY,Wr\x87\xb6\x02,\xfe\xec$\x14l\x7f\x95`\x8b\xb6\xdd\xe5|\xde\xfd\x15\xf2[\x82-.\xaf\xd2\xe1F\x93K0\xef\xb5\x18\n\xe5\"\x06\xdf\rkq\xb6>\xe0\x84\x15\xda\xea\t\xaf6\x985x\xf6\xf4\x19\x8a\bC\xcc\x1b\x1b\xd7\x80\x01'}, 0x11c) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r3, 0x0) setns(0xffffffffffffffff, 0xbb91cc0bab39c4d1) 23:47:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x2a9}, {0x0, 0xfd2a}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109a9cce8d7986f5f3a2518643b128710500"/98, 0x62}], 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x591000, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:45 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:45 executing program 4: socketpair(0x2, 0x80000, 0x20, &(0x7f0000000000)) socketpair(0x9, 0x8db24ec43df3fdc1, 0x5, &(0x7f0000000080)) socketpair(0xa, 0x3, 0x1, &(0x7f0000000040)) [ 1533.720493][ T26] audit: type=1400 audit(1570837665.281:1428): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=22AE86AD47AA0D9495E6D80F7BDE2D18FFB36CAED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A24E1614FBEE0BEAC8F4A045072B770212D46D4A2DF096B791F2A4BA218E12C0821B8D1F8 pid=23613 comm="syz-executor.5" 23:47:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x1ff}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={r6, 0x5311195f}, &(0x7f0000000100)=0x8) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0xa, 0x4) [ 1534.092067][ T26] audit: type=1326 audit(1570837665.661:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23391 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:45 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x227, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:45 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:45 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)=""/164) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x2) unshare(0x8020000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) recvfrom$inet6(r3, &(0x7f0000000180)=""/46, 0x2e, 0x2000, &(0x7f00000001c0)={0xa, 0x4e22, 0x3, @loopback, 0x8}, 0x1c) setns(r2, 0x0) 23:47:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) getsockopt$inet_buf(r3, 0x0, 0x2a, &(0x7f0000000000)=""/178, &(0x7f0000000100)=0xb2) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:45 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}, [@mark={0xc}]}, 0x5c}}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e23, @broadcast}}) 23:47:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getown(r1, 0x9) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) r7 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) poll(&(0x7f0000000080)=[{r1, 0x2000}, {r7, 0x4000}, {r1, 0x1079}], 0x3, 0x9) ioctl$TUNSETGROUP(r3, 0x400454ce, r6) r8 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r8, 0x1, &(0x7f0000000680)={{0x0, 0x0, r6, r5, r6, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r4, r4, 0x9}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) write$FUSE_ENTRY(r2, &(0x7f0000000100)={0x90, 0xfffffffffffffff5, 0x2, {0x4, 0x0, 0x80a7, 0x3, 0x0, 0x0, {0x0, 0x8eb, 0x5, 0xebc, 0x5, 0x1, 0x2, 0x8, 0x8, 0x1, 0x8001, r5, r9, 0xfffffffd, 0x1}}}, 0x90) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:45 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:46 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) open(&(0x7f0000000040)='./file0\x00', 0x8100, 0x60) openat$audio(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/audio\x00', 0x80000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x13000, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000800)={'TPROXY\x00'}, &(0x7f0000000000)=0x2) 23:47:46 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c040000280007050000781e23d6000000130000", @ANYRES32=r3, @ANYBLOB="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"], 0x45c}}, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x19, 0x20, 0x1, 0xa3, 0x224, r4, 0x0, [], r3, 0xffffffffffffffff, 0x5}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20) fcntl$getflags(r5, 0x3) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r5, &(0x7f0000000180), 0x0}, 0x20) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/255) 23:47:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x3) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:46 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:46 executing program 4: socketpair(0x18, 0x800, 0x2, &(0x7f0000000000)) 23:47:46 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x228, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) wait4(r3, &(0x7f0000000000), 0x1, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:46 executing program 5: unshare(0x8020000) setns(0xffffffffffffffff, 0x0) 23:47:46 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}, [@mark={0xc}]}, 0x5c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}, [@mark={0xc}]}, 0x5c}}, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000000c0)) accept(r0, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80) 23:47:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1535.335024][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1535.335038][ T26] audit: type=1326 audit(1570837666.901:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24595 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:47 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(r1, 0x0, 0x80000000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xffffffffffffff22}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0xffffffffffffffbd}], 0x4, 0xa) ptrace$setopts(0x4206, r1, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x8000, 0x0) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080), 0x4) tkill(r1, 0x1) ptrace$cont(0x18, r1, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x335d, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r5, 0x40045730, &(0x7f0000000040)=0x1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:47:47 executing program 5: unshare(0x8020000) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40441, 0x0) setns(r0, 0x1a000000) 23:47:47 executing program 4: 23:47:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:47 executing program 4: socketpair(0x18, 0x0, 0x6, &(0x7f0000000000)) 23:47:47 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1536.135517][ T26] audit: type=1326 audit(1570837667.701:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24595 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:47 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x229, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:47 executing program 5: unshare(0x8020000) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\b') 23:47:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x50000, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x5, 0x40) fcntl$getflags(r3, 0xa0f) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x800, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa0000000}, 0xffffffffffffff55, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYRES16, @ANYRES16=r6, @ANYBLOB="f0c32abd7000fcdbdf250300000014000200080004000800000008000400000000003c000200080004000000000008000400ff03000008000b0002000000080006000600000008000900070000000800080005000020080009000a3500000800050003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8b38c1f1781768e9) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd8, r6, 0x404, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1c90}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000804}, 0x6004) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:47 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)={0xffffffffffffffff}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.stat\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @sliced={0x8001, [0x7f, 0x5, 0x2, 0x3b8, 0x3, 0x6, 0x101, 0x1, 0x0, 0x5, 0x400, 0xfffc, 0x7, 0x9, 0x0, 0x8, 0x5, 0x400, 0x7f, 0x7f, 0x0, 0x6, 0x0, 0x5, 0x1, 0x4, 0x100, 0x6, 0xd3, 0x0, 0x3f, 0x9, 0x0, 0x2e, 0x7fff, 0xff, 0x1, 0x7, 0xffff, 0x0, 0x5, 0x6, 0x0, 0x9, 0x3ff, 0x7, 0x45f, 0x7c], 0x3}}) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000080)={0x9, @pix_mp={0x37, 0xd, 0x42323151, 0x0, 0x4, [{0xa274, 0x8a}, {0x2, 0x5}, {0x8001, 0x9}, {0x3, 0x6}, {0xd57e, 0xa76}, {0x2, 0x2}, {0x15, 0x300000}, {0x2, 0x3}], 0x80, 0x6, 0x0, 0x0, 0x7}}) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x1) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000000)='ppp0\x00', 0x5) 23:47:47 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r4}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x41, @local, 0xfffffffe}, r4}}, 0x30) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x335d, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x335d, 0x0) ftruncate(r0, 0x400) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x8002, 0x3ff}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f00000000c0)={r7, 0x40}) 23:47:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) times(&(0x7f0000000000)) [ 1536.266075][ T26] audit: type=1326 audit(1570837667.831:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24952 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:47 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:47 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4143, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7f, 0x101201) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1000000, 0xaf1f) 23:47:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) fremovexattr(r3, &(0x7f0000000000)=@random={'os2.', 'procmime_typevmnet0#\\selfem0nodev\x00'}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:48 executing program 4: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) socketpair(0x10, 0x3, 0x86, &(0x7f0000000080)) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 23:47:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r2 = dup(r1) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000000)={@rand_addr="faa2fc3f7b7ce021ec1289a4c7d31eb5"}, 0x14) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) [ 1537.066028][ T26] audit: type=1326 audit(1570837668.631:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24952 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:48 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x22a, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:48 executing program 3: perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x40, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:48 executing program 5: unshare(0x8020000) r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000380)) sched_setparam(r0, &(0x7f0000000000)=0x1f) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r1, 0x0) 23:47:48 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x2, 0x4) openat$cgroup_ro(r0, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) socketpair(0x8, 0x6, 0x6, &(0x7f0000000000)) 23:47:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x10000, 0x602000) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000080)={0x2, 0x0, [{}, {}]}) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x1000, 0x80000000, 0x80000000}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r3, 0x5, 0xa562}, 0xc) r4 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) getpgid(r0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000001c0)='exec\x00', 0x2, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:48 executing program 3: perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1537.245489][ T26] audit: type=1326 audit(1570837668.811:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25666 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:48 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) write$P9_RREADLINK(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="256916a0692169b9106bd702b8a7f8e11ef44d8d6718c178fdcd26d62a32043dcb346a8c9492590d"], 0x10) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xec, 0x424800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ppoll(&(0x7f0000000080)=[{r1}, {r2, 0x6040}, {r0, 0x9008}, {r4, 0x400}, {0xffffffffffffffff, 0x4}, {r5, 0x40}, {r6, 0x5c0}, {r0, 0x1508}], 0x8, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={0x3}, 0x8) 23:47:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xc, @vbi}) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) pread64(r2, &(0x7f0000000100)=""/225, 0xe60e00c3, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000002c0)={0xb41a, 0x0, 0x10001, 0x11759cd3}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000300)={0x1f, r6, 0x0, 0x10001}) r7 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x3, 0x200) readv(r7, &(0x7f0000001380)=[{&(0x7f0000000380)=""/4096}], 0xf0) 23:47:49 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x80000) fcntl$setflags(r1, 0x2, 0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) write$uinput_user_dev(r2, &(0x7f0000000180)={'syz0\x00', {0xd18, 0x2, 0x0, 0x1}, 0x28, [0x1000, 0xffffffe1, 0x511, 0x7, 0x1ff, 0x4e3, 0x6, 0x293c14c3, 0x7ff, 0x101, 0xfffffff7, 0xfffffffe, 0x7, 0x10a, 0x5, 0x5, 0xffffffe0, 0x7, 0x7, 0x7, 0x1ff, 0x40, 0x9, 0xffffffe1, 0x9, 0x3, 0x5c1, 0xcda, 0x80, 0x4, 0x3f, 0x4, 0x0, 0x6, 0x8, 0x5, 0x1000, 0x40, 0x5, 0xfffff000, 0x1, 0xd3, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x73f7b9c3, 0xfffffff7, 0x7, 0xcca, 0x10001, 0xc3a, 0xee, 0xff4, 0x1ff, 0xfcd, 0x0, 0x5, 0x7a655e91, 0x29c28baf, 0xfffffc00, 0x4, 0x2], [0x9, 0x7fffffff, 0x6, 0x5, 0x1, 0x2, 0x10001, 0x80000000, 0x7, 0x8, 0x2, 0x9, 0x1, 0x188a, 0x82, 0x0, 0x9, 0x8, 0x9, 0x800, 0xfffffffd, 0xe7c, 0x34d100, 0x6, 0x4, 0x5, 0x6, 0xe4, 0x80000000, 0x40, 0x6, 0x68dd942e, 0x6, 0x7, 0x40, 0x1, 0x4, 0x100, 0xd8, 0x3, 0x9da0, 0xd873, 0x8843, 0x7, 0xff, 0x3, 0x1, 0xfffffffa, 0xfffffff8, 0x2, 0x2, 0xfff, 0x0, 0x8, 0xffff0000, 0xffffffff, 0x6, 0xff, 0x3ff, 0xef6d, 0x265d, 0x5, 0x1, 0xffffffff], [0x0, 0x0, 0x1, 0x0, 0x2, 0x4, 0x4e2, 0x99, 0xc49, 0x4, 0x3, 0x0, 0x4, 0x10001, 0x6, 0x83b0, 0x1, 0x5, 0x9, 0x91f00000, 0xfff, 0xffff0518, 0x3, 0x80000001, 0x4057, 0x1f, 0x0, 0xfffffffd, 0x0, 0x5c000000, 0xfffffff7, 0x3, 0x1000, 0x4, 0x1, 0x40, 0x4, 0x9, 0x7, 0x3f, 0x7, 0x0, 0x80000000, 0x80000000, 0x2, 0x6, 0x7, 0x8000, 0xff, 0x8dd, 0xd8, 0x1, 0x0, 0x9, 0x0, 0x9, 0x5, 0x3, 0x9, 0x0, 0x3ff, 0xfffffffd, 0x4, 0x6], [0x0, 0x9, 0x3, 0x400, 0x40, 0x5, 0x2, 0x80000001, 0x800, 0x5, 0x2, 0x6, 0x40, 0x3, 0x7, 0x7, 0x1f, 0x6, 0xbaa, 0x5, 0x0, 0x1ff, 0x5, 0x8001, 0x5, 0x0, 0x3, 0x5, 0x3, 0xf41, 0x800, 0x5, 0x1, 0x7, 0xda6b, 0x5, 0x7, 0x6c92, 0x81, 0x8, 0x0, 0x494, 0x2, 0x9, 0x3, 0xffffffff, 0x7, 0x2, 0x7fffffff, 0x5, 0xd2, 0x2, 0x7414b9de, 0x4, 0x8, 0x1, 0xffff, 0x3, 0x9, 0x800, 0x9, 0x2, 0x7, 0x480]}, 0x45c) 23:47:49 executing program 3: perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1538.030235][ T26] audit: type=1326 audit(1570837669.591:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25666 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:49 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x22b, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffffffffffe1, 0x81) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bb8474dc5a26738afa6209f63ccd2e6587014de9e89f7a742916fc7f515178bf90986cd0008b9785054aa664940216207610f69425cc69a4b056c9e4b06dd4fc273e4c4aa185cd139ff8b6e98e98f06d8c8f21742f30b3c2b2f84956f137633d2f3e1cfea036267a0bc6935526be5a31feef7bfaa65561f8a36ad23200c123c47a6c446a7f677ec00c000000000000000388ee6745fd7bc7edddd9d3610961474b1b8990349014ecd2ff58168265bbeb5a9c359ecdf0615efb899372e6d89ee976a56d73c12b29e11afcb89f67b89b6827271a9926e8de55ca"], &(0x7f000095dffc)=0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x23, &(0x7f0000000000)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xfffd, 0x9, 0x4, 0x1, 0x8042}, &(0x7f0000000100)=0x14) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:49 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@ethernet={0x306, @random="9868250ad939"}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="7745c97f4e477ca3118bf982c5414ecc15eb8d2fb239c443e96059a173b73fe1abd765f73a126050ef20e085c6b2e8a00525a50beaa46b1f7de759d834143dccfe1be9b4443e936c69b5d4708a837b4a891001aa54671cb139a651742b33a2d615716666a80ae8e33c5e24be5f2b2d3d5433e2a1ffa9a6f9", 0x78}, {&(0x7f0000000100)="72ca6aa5fc9350df32280a5940482f1ba3ae4360e4e69f08613fea170c5a879bb06a0fba5d622a8a83d6e002fe330098873a6f4b208487625b8b723a7e450cfc4c6a69006dcb693e35314d56b2e0405892b3b036b5b17d17c066b220f9df3dfed62e8165eb57030e36cfdbb9f836451f78582a0be3c4cc3fe86c9b59fe", 0x7d}, {&(0x7f0000000180)="27660ec73151aad5dad1ed400b9aee4716536b90b8808e1bcf28d268f5d4a729595325e578732a54319b5a4d3c60dd07f59df26f231d1c39350aa7276f12e9124ad7b5570af75b26f761101e4871bacc7a1935a4c72b0cb7d2c8e266d05c083e30722b7030eba223c7c5ebe8c23436875128fe1ab000ff23460ceabaa9ae071244197aef14e7114586fa81fdb6c59bbf0a928626e2defd6dec293ba6ec62bc68595d9d102d77c4b8576c15082a8f771fe6079ffb621c40df335632102626dd", 0xbf}], 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="80000000000000000100000001000000732ee082219a4aa4b724f7331ebaadf85ba10a2b99071817c33a5e7bf26cdcf2766c165569d66807d05544077d4f79dd24d4e28a2a5f44fe16f8b4f011242c476ccbd5cbf66265992f4ab1a3cf8bd46dd6a89350a8afb28769e523be25fcf6453700b673b92712ee7000000000000000"], 0x80}, 0x4000081) 23:47:49 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:49 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r0, &(0x7f0000000100)=""/225, 0xe1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x80010, r1, 0x8000000) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:49 executing program 5: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) 23:47:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x100, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:49 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1538.191934][ T26] audit: type=1326 audit(1570837669.761:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26382 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:49 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x8, @win={{0x6, 0x101, 0x2, 0x400}, 0x4, 0x8001, &(0x7f0000000140)={{0x2, 0xe0000000, 0x2}, &(0x7f0000000100)={{0x9, 0x5, 0x0, 0x7ff}, &(0x7f00000000c0)={{0x3, 0x1, 0x3, 0x7}}}}, 0x3, &(0x7f0000000180)="bdaedadd67fcfd6342bfbbdc83e94cfe07c7bf7990c569fae0c7de5e527711246d69c599ab65829d5a0f7b835fab8c78c821355f62d3659988e6d41de1864d160025fe59e56838e6fde324d81df02475fe8ca23a8dfd4573bb4bcf39c350ddc2f867a529fbec67c8f87889f24967f5aec4c3a1d8e0d56f98232bba8cd1d5d01769c1cbaa74c22eaa28c3b4", 0xff}}) socketpair(0x5, 0x0, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) open$dir(&(0x7f0000000340)='./file0\x00', 0x8040, 0x124) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 23:47:49 executing program 5: unshare(0x8020000) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)=0x0) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000100)='\th\xcd0V#\xac\xed\x9f\x02') setns(r3, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x40000, 0x0) 23:47:50 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) [ 1538.987605][ T26] audit: type=1326 audit(1570837670.551:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26382 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:50 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x22c, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:50 executing program 2: lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0), 0x1, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:50 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x3, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000040)={0x1ffffffffffffc54, &(0x7f0000000000)=[{}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000080)={r4, 0x1}) 23:47:50 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:50 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)={0xffffffffffffffff}) r1 = shmget(0x3, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:47:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:50 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/de\x03\xcbT6\xcc\x00\x00\x00ot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000040)={0xac, 0x6}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffef1}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) ptrace$cont(0x7, r1, 0x0, 0x0) setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x0) 23:47:50 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1539.146435][ T26] audit: type=1326 audit(1570837670.711:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26893 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:50 executing program 4: socketpair(0x18, 0xd, 0x2, &(0x7f0000000280)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000100)={@ethernet={0x6, @broadcast}, {&(0x7f0000000000)=""/188, 0xbc}, &(0x7f00000000c0), 0x4}, 0xa0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000240)=0x4) 23:47:50 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x280000) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x23, &(0x7f0000000080)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000000)={r4, 0x8001}, 0x8) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:50 executing program 5: unshare(0x8020000) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') [ 1539.945072][ T26] audit: type=1326 audit(1570837671.511:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26893 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:51 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x22d, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000000)=0x8, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) capget(&(0x7f0000000080)={0x13380342, r0}, &(0x7f0000000180)={0x10000, 0x8, 0x1, 0x100000, 0x7, 0xffffffff}) tkill(r0, 0x1) r4 = shmget$private(0x0, 0x1000, 0x728, &(0x7f0000ffd000/0x1000)=nil) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x335d, 0x0) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000200)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x18, 0x32, 0x2e}, 0x2c) shmctl$SHM_UNLOCK(r4, 0xc) ptrace$cont(0x18, r0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) ptrace$setregs(0xf, r6, 0x40, &(0x7f0000000100)="d68cfedb09e9590b9399450572e0ea8dd73f0000000c9889406e79952e9b765d6dfb296dc9eb2818aaca4df2d64d8dce6b08aa04df861ee56737a95398d32e80fe647d30e3d1623129c8fdc617665b7189615d8ee03bf5d5b487d2907a0a3003ab173601c38e2b627d6454") ptrace$cont(0x7, r0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') keyctl$clear(0x7, 0xfffffffffffffff8) 23:47:51 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:51 executing program 5: unshare(0x8020000) getuid() syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80040) setns(r1, 0x10000000) 23:47:51 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) write$P9_RSTAT(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x62) accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x1, @mcast1, 0x5}, @in={0x2, 0x4e21, @empty}], 0x2c) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x335d, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000080)=0xfff) 23:47:51 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x1) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x401, 0x1, "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", 0xb0, 0x3, 0x3f, 0x1, 0x5, 0x7f, 0xb1}}}, 0x120) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) epoll_wait(r2, &(0x7f0000000400)=[{}, {}, {}], 0x3, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4101, 0x0) read$rfkill(r3, &(0x7f00000000c0), 0x8) r4 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r4, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/34, 0x22}], 0x2) 23:47:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x50) tkill(r0, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000000)={{0x2f, @rand_addr=0x5, 0x4e20, 0x4, 'sh\x00', 0x7, 0x13f44000, 0x54}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0x2, 0x3, 0x1004}}, 0x44) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:51 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:51 executing program 4: socketpair(0x10, 0x80004, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_to_team\x00', 0x8}) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(r1, 0x409, 0x2baf81ac6f5beff5) 23:47:51 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x12, 0x80, 0x0, 0x219, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_x_sa2={0x2, 0x13, 0x20, 0x0, 0x0, 0x70bd26, 0x34ff}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x5, {0x6, 0x101, 0x6, 0x9, 0x0, 0x2, 0x0, @in=@multicast2, @in=@broadcast}}, @sadb_lifetime={0x4, 0x2, 0x10000, 0x7, 0x2, 0xafe}, @sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_sa={0x2, 0x1, 0x4d2, 0x20, 0x99, 0x60, 0x1, 0x40000000}, @sadb_lifetime={0x4, 0x3, 0xae38, 0x2, 0xfffffffffffffffd, 0x4}]}, 0x10c8}}, 0x10840) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001280)='/dev/autofs\x00', 0x40, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000012c0)={0x10001, 0x1, 0x0, [{0x3, 0x8001, 0x1, 0x8, 0xfe, 0x8a}]}) setns(r0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x88000, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000040)={0x0, 0x8, [0x4, 0x10000]}) 23:47:51 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) socket(0xa, 0x2, 0x2f) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) [ 1540.885258][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1540.885271][ T26] audit: type=1326 audit(1570837672.451:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27574 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:52 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x22e, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x4000, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d00)=ANY=[@ANYBLOB="5c040000280007050000781e23d6000000130000", @ANYRES32=r7, @ANYBLOB="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"], 0x45c}}, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) accept$packet(r8, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r10, &(0x7f0000000640)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c040000280007050000781e23d6000000130000", @ANYRES32=r12, @ANYBLOB="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"], 0x45c}}, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r13, &(0x7f0000000640)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c040000280007050000781e23d6000000130000", @ANYRES32=r15, @ANYBLOB="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"], 0x45c}}, 0x0) r16 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r16, 0x335d, 0x0) r17 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r17, 0x335d, 0x0) getsockopt$inet_mreqn(r17, 0x0, 0x20, &(0x7f00000001c0)={@multicast2, @initdev, 0x0}, &(0x7f00000003c0)=0xc) accept4$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14, 0x800) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) r21 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r21, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r21, &(0x7f0000000640)={0x11, 0x0, r22, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) recvmsg(r1, &(0x7f00000016c0)={&(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, &(0x7f0000001640)=""/107, 0x6b}, 0x40000000) r26 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r26, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r26, &(0x7f0000000640)={0x11, 0x0, r27, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r26, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c00000028fe07050000781e23d6010000130000", @ANYRES32=r28, @ANYBLOB="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"], 0x3}}, 0x40004) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000001cc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001700)={0x560, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x258, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xdc}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xe7}}, {0x8}}}]}}, {{0x8, 0x1, r18}, {0x1e0, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r19}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r23}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x100}}}]}}, {{0x8, 0x1, r24}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r25}, {0xb8, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r28}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}]}, 0x560}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), &(0x7f0000000080)=0x4) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:52 executing program 5: unshare(0x8020000) r0 = gettid() r1 = syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/ipc\x00') setns(r1, 0x0) 23:47:52 executing program 4: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000a639181e18db894068bebbdb00"], &(0x7f0000000040)=0xfffffffffffffee5) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) 23:47:52 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x18200) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:52 executing program 4: socketpair(0x8, 0x6, 0x20, &(0x7f00000000c0)) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x111400, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x60) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000100)=0x4) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x8, {0x20, 0x1, 0x5, 0x5, 0xf5f3, 0x6}}) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x8, 0x480100) [ 1541.045760][ T26] audit: type=1326 audit(1570837672.611:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28347 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000000)={0x4, 0x3, 0x637}, 0xc) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x1) 23:47:52 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) pwritev(r1, &(0x7f0000000740)=[{&(0x7f00000002c0)="4308dba336d60f2d57b842e102b3cee57b7cd57997f49c982ee0af5ea4b90690403bb4dad89d9fc11ee63451939a119df362bf7d3ebbd797eeb3757291b7fcb0b792cca5ad32cdf88657ab6cf0a7d68a7157df00bfbb272a4eb5d2755959f9a9e92bfe0b7c91754ef22b7a4dff12daa6f9968d74dd5bfb0c9104dda3bdf487e8c234000ef5c1231c06c908547e7de8b8f594b175b8ce82226bcd282f26580f0915856db6839987cb1eb87af741b1e959077295ac5f94e4d95ca1de5668e3769322544014b3e5649711acb8de2746fddea2a07880e2ad660e71a27c8797b83ab5f4b30775a957d7fe", 0xe8}, {&(0x7f0000000080)="3bd656924f1f9b585a4adc028ee9f143889fe4f654944e65dbc618e9db3fc32770bbdda6f155eba4db244ecda15e707e670593b0fe79a03402e7de799665ebabdc3a383d4fce51228517b509691a6521606c747e451bd34b784e8a3fc9b6fb680795ccac1f22b04381a9c6c2e9148fee492a15afeea874201031452aef2b", 0x7e}, {&(0x7f0000000000)="f28bef6437347d9bce4063865152c4e5ca23f4d7b3f2b3af5ab1b1090385e6fb42b7981765e9c7bb520c6dd50163dc5dae587eec947a", 0x36}, {&(0x7f00000003c0)="51fe2e079908703dfbc5e41b6760f112a4c09f5d8343aed28c430dbf9b307945d64b9858b0e5ce2491e3df61a19a0a6d30dc5297ee25e784c6b6c0a4b1fd1019debfbeb6683cc9dfaa0d7a4071368ee50a5b10028c3514ecc859eb6e74b0a0606bca57a6e208007ebec4ba09de2f3afe3529bb575e97e18ca89a8dd190dd5f549274e0130cf3e0b22f624fecc0cac5b1bf9e22e4a3bf9009ec9044ff50e8d1a51c21748bd4315b6b0886ed2a7446d6f67aaebc204136", 0xb6}, {&(0x7f0000000480)="b5f027fd547a57b8f41aa15771f1fdf9fa2a6a7dedb805cdde58d0dbec91f0f81b2f9feb0e55396e01816c86a35780dcc1e7397370f26a31489fbc78f778b23f684faa318e75ee1f05f42dacd0cc0484e3", 0x51}, {&(0x7f0000000500)="7a866fde7b4de3da0f62c936a5af0f1973dc8287f2b2cbd8d043c1ac333ca34d100dd541e2dc9d3653a3c3ac7aa51362b090cc904ce31ba043a3646d7fab545626b6de9b002a8cdf976322efb42300ad27b9276cd57ac97c8377c6d622605e03210f35444527f9853971e4f551e60e4af2e31f63", 0x74}, {&(0x7f0000000580)="103dbe2789873c2e4910c00dbba0e6828f948a99ece55703f435741d88bd3eb562df96e69b3bb0e058aa32aea7ab0a66cf5cd13f625c1a3c90500defe055ed8048b1f2580b420adcccd879c9255a538a20be7784aef774ca9e80d5967f6343437cb726c92d48e981", 0x68}, {&(0x7f0000000600)="0b42d71be78de610cbfe21dcba85ebbe7caafafe9b24808d455e5e8a00edb2373cb0081a841b", 0x26}, {&(0x7f0000000640)="b3738c656484abcb9acea6dad01001edb99adce38db5411ce60d44058fbd9b66b683e62f57fd6abe874ae6628431965a5bc3df8edb1d029c39654e47f7fef1fce35913251b0bdd07ddc908c4954fd45fe7d3d08b609e3a5de70b33fd0d2b560309e3e2fc8e7d66e580dd9ed7df545e03c7d4b388a9545f14fcb5642a8df7c285dd4a2cee2b5a299ecc7a564ebe587434a76625c939821b7e7899c0cbeb77cc5e4087a92590f80b9d78ff52ed6ecfdb8f031c66f96bcb4f42189bad4b17293e9af298149aba2b2d0b3e056d5f7e0171a6e7fee4359464319435a147e7030cc0125a71", 0xe2}], 0x9, 0x0) r2 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r2, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r2, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:52 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x1, 0x1}, 0x8) 23:47:52 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1541.847189][ T26] audit: type=1326 audit(1570837673.411:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28347 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:53 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x204000) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) dup(r1) 23:47:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000000)={0xf5e7, 0x5, 0xfffffffffffffffb}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="080095055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000240)=""/225, 0xe1, 0x0) socket$pppoe(0x18, 0x1, 0x0) readv(r1, &(0x7f0000002740)=[{&(0x7f0000000080)=""/214, 0xd6}, {&(0x7f0000000180)=""/110, 0x6e}, {&(0x7f0000000340)=""/80, 0x50}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/250, 0xfa}, {&(0x7f0000000000)=""/3, 0x3}, {&(0x7f00000014c0)=""/212, 0xfffffffffffffea5}, {&(0x7f00000015c0)=""/159, 0x9f}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/173, 0xad}], 0xa) 23:47:53 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:53 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x22f, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:53 executing program 5: r0 = socket$inet6(0xa, 0x800, 0x7) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r2, 0x400454ce, r5) r6 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r8, 0x400454ce, r11) r12 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r12, 0x1, &(0x7f0000000680)={{0x0, 0x0, r11, r10, r11, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r9, r9, 0x9}) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000680)={{0x0, 0x0, r7, r10, r5, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0x100000e99c, r3, r3, 0x5}) r13 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r13, 0x400454ce, r16) r17 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r17, 0x1, &(0x7f0000000680)={{0x0, 0x0, r16, r15, r16, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r14, r14, 0x9}) r18 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r18, 0x335d, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r18, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) r20 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r20, 0x400454ce, r23) r24 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r24, 0x1, &(0x7f0000000680)={{0x0, 0x0, r23, r22, r23, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r21, r21, 0x9}) r25 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r25, 0x400454ce, r28) r29 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r29, 0x1, &(0x7f0000000680)={{0x0, 0x0, r28, r27, r28, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r26, r26, 0x9}) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) r33 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r33, 0x1, &(0x7f0000000680)={{0x0, 0x0, r32, r31, r32, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r30, r30, 0x9}) r34 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r34, 0x400454ce, r37) r38 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r38, 0x1, &(0x7f0000000680)={{0x0, 0x0, r37, r36, r37, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r35, r35, 0x9}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) r41 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r41, 0x400454ce, r44) r45 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r45, 0x1, &(0x7f0000000680)={{0x0, 0x0, r44, r43, r44, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r42, r42, 0x9}) r46 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r46, 0x400454ce, r49) r50 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r50, 0x1, &(0x7f0000000680)={{0x0, 0x0, r49, r48, r49, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r47, r47, 0x9}) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="02000000010000000000000002000200", @ANYRES32=r1, @ANYBLOB="0a000400", @ANYRES32=r4, @ANYBLOB="02000700", @ANYRES32=r15, @ANYBLOB="02000200", @ANYRES32=r19, @ANYBLOB="040004000000000008000600", @ANYRES32=r23, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="08000100ebd76338f68b15857d915315b5ded6919d52c15beff1d777a4b656537a92ce79d174daf3275ca1e8eb2ad1c08f34269396c0c329147140e1858b5295f539e675777f53213eff03f15a12824790442be9b5c33617b7ef362ff521a4da73cd37a372a077000a0e1856ac473ef36ff9695b434ac7373c75eaec936b2a9f05b6486c4e4c8c26e4cc4430ba7217fb1e8342947d09f65014cc78afec6984d2a150e2aad46930009ab99fe6af8adde88c2a86612c89ed25b31fc52a8cc23dce6c", @ANYRES32=r28, @ANYBLOB="08000100", @ANYRES32=r32, @ANYBLOB="08000400", @ANYRES32=r37, @ANYBLOB="08000100", @ANYRES32=r39, @ANYBLOB="08000100", @ANYRES32=r40, @ANYBLOB="08000400", @ANYRES32=r44, @ANYBLOB="08000400", @ANYRES32=r49, @ANYBLOB="10000200000000002000020000000000"], 0x8c, 0x7) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) unshare(0x8020000) r51 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r51, 0x2000000) r52 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r52, 0x335d, 0x0) r53 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r53, 0x335d, 0x0) setsockopt$CAIFSO_REQ_PARAM(r52, 0x116, 0x80, &(0x7f0000000000)="c4fabbc710051c81606725049cc18674dbf57ec949b2bb8ee21ba0c800412ac9ccac6926969582b3cdc3", 0x2a) ioctl$USBDEVFS_REAPURBNDELAY(r52, 0x4008550d, &(0x7f00000000c0)) [ 1542.009176][ T26] audit: type=1326 audit(1570837673.571:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28992 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0x153}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x9, 0x18000) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x2, 0x1, &(0x7f0000000400)=""/68, &(0x7f0000000480)=""/68, &(0x7f0000000500)=""/214, 0x4}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x0, {0x2, 0x4, 0x6f49}}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000600), &(0x7f0000000640)=0x40) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r4, &(0x7f0000000000)="0d6802d8e22bccd690c23c69cc5e79fc1b33984a34dd3c5abc2202e92ca466221a6ccb5e09f90b80b934994842f5b4f3907f03210677"}, 0x20) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000001c0)={0xb2, 0x2f5, &(0x7f0000000180)="5998f5dc997d0ce22c3b4f7ce549c3c6192731dd4c8dc1c5", &(0x7f0000000300)="735f41c2f44e97389d71d2adf3f3561ee2b83b188f9dc212b289aaa5d150e892c26d43fb23f9bb97e14794a73f4af61027f440d8e48e9870e9ce8522b64247a9258c305473cef867957476fe774174e0c365fd0830c889434e3d3557441a7bbc79a2f7b4d4293978d4a6c001eda5a7a6c68559cdec5fa84748b15ee1c0b7a0dac61fd0da2ecf1f032f7f255c99b7eefff2a9cf9bec73c6432833735b628331fbbf0c14a391159ad718eab711ad22223800278e9e6210ce3b7e7a5e06e2b41bd25139e7918e99b2d39967fa9f3513ecad28ac9b3e", 0x18, 0xd4}) ptrace$setopts(0x4206, r0, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x335d, 0x0) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000680), &(0x7f00000006c0)=0x2) ioctl$VHOST_SET_VRING_KICK(r5, 0x335d, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000140)={0x7, 0x21, 0x2}, 0x7) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:53 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:53 executing program 5: unshare(0xa030900) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x800, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000020", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x23, &(0x7f0000000100)=@sack_info={r2, 0xfffffffc, 0x3}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={r2, @in6={{0xa, 0x4e22, 0xfff, @rand_addr="c21ecb1146d394014c2232a1fde3c3ca", 0x9}}, 0x0, 0x8}, 0x90) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r3, 0x0) 23:47:53 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000000c0)) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000080)=0xffffff7f) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 23:47:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c040000280007050000781e23d6000000130000", @ANYRES32=r5, @ANYBLOB="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"], 0x45c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', r5}) sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="77ff6c96574f6daffbd10942c8c1abd1650b7063132cf303de0feae4fa1b56e6902ff9719b17ae2faa76935080f2bd4674fdd24bdab18bf1947fa907518c3972718b7e7ee3f76d63baae554e42d65c1b6bba74e03e58a3de1f2d7601", 0x5c}, {&(0x7f0000000380)="ec2d2af4c69dd0c3e635d8a6ff542224cd5031be2e5b689205bcbccb8bd09837f35821f07685fe7ad82a468ca6e6a0440aafbbd50b835868e933556bb9efe441a9b2010f06c7f289ae014f5f36f804637501cf8f96cff9c3a26325ec0f25f38bdfcdcc2fcc9452cacafdfbe8ef56eac6d44f745bd518f2273c93c657be05318a1f6bfc02b9f26a1c281a9a3f72a5183df82df6bf70023a1379a2a458445417d4ef2ea18973164b398bfb685dc7d5", 0xae}], 0x2, &(0x7f00000004c0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r6}}}, @rthdr={{0x58, 0x29, 0x39, {0x2f, 0x8, 0x0, 0x0, 0x0, [@ipv4={[], [], @loopback}, @mcast1, @loopback, @empty]}}}, @hopopts_2292={{0x1b0, 0x29, 0x36, {0x21, 0x32, [], [@hao={0xc9, 0x10, @remote}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0xec, 0x3a, "62a2185331fa68f1ccfab5be8772548320324eabaf511cb892c4936fdf24d8307f285465d4fbce3de25cdef40097df5a631c9c2d22dc469e6e5e"}, @calipso={0x7, 0x28, {0x5, 0x8, 0x9, 0xfffd, [0x7, 0x4, 0xfff, 0x3]}}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0xb0, 0xf3, "cb510a6fbe8a58de2cc6803424348afa0c5bdd873369da3a2134f4cb7b2c901f44b16672db47e5e364ebecf35542c4065f100a47176286ccf4b1b0593f6a9f34e99526fd6edfaaea3cd89b5d61a1caeb6da231d9b12e0bbc1304e53252a1a0e29dc661dab489ce2a7a9bef6f410707f0b5345f0d4ce6a32b3cba6538c6c5154eb152c1dd3891b4fa55fd136fd9cd811e2a51adc70948cbf84d8ac526f6017634b738a63bad53e6f70d8eca67dc62282a4180ef4098c9eb8649885cc2fdd4433a0a0068d492e9a39f04599201f047c6cfe804508b07061d3372fbee5ed506c6a7c05d010780cdc7165ea6aa1c96d1f6b7b491c4"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfff}}, @rthdrdstopts={{0xb0, 0x29, 0x37, {0x4, 0x12, [], [@hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x26}}, @pad1, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x5d}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x10, {0x25, 0x2, 0x9, 0x7, [0x4]}}, @calipso={0x7, 0x48, {0x0, 0x10, 0x40, 0x3, [0x2, 0x5, 0x1, 0x7f, 0x0, 0x74, 0x6, 0x0]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7f}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @dstopts={{0x38, 0x29, 0x37, {0x60, 0x3, [], [@enc_lim={0x4, 0x1, 0x7f}, @enc_lim, @jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x32}}}, @dstopts={{0x70, 0x29, 0x37, {0x16, 0xa, [], [@calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0x7, [0x0, 0x0]}}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x28, {0x2, 0x8, 0x4, 0xfa, [0x3ff, 0x80000001, 0x8, 0x9]}}]}}}], 0x3e8}}], 0x1, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) r7 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x0) accept4$inet(r7, &(0x7f0000000300)={0x2, 0x0, @empty}, &(0x7f0000000340)=0x10, 0x400) 23:47:53 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) ioctl$KDDISABIO(r4, 0x4b37) ptrace$cont(0x18, r0, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x335d, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c040000280007050000781e23d6000000130000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000800010063627100300402000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000047157dacf0c5958e00bf1ef67ab33f479a000000000000000000000000000000da3f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005529000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000000000010018000100fb0000000000000000000000000000000000000053b924c54543555f8659fa144e7702b8a3408fbec253762bce1cc1b551aabf62bdc59ac1889e448c5a2ae7fc0c8f2825b4935eee610a18b43f1063c5b4eaf1e62f9ff6d3f3693ad036aef5cf96b3ab9ad9f9e0d4d9a44aa52b0a910f8c9ae5d75efb88cdc974b83fc891c8e944c135dc8fac681c461460e2068eb5748fed84dc610498aa7dab4e3dfcd2d62c36a30b76af5e03aa4b09b95f5cb46b543550a0eb07854cdf330299067c1b491778278a48d70bb30d4b0877904a34d1f0b6c61cba4ec5450708bca16b2a291bc6c8648ab8877d3b535373df3cad64f7de42cd48d7571c356b4c830bc287dfd6ce79a4d17af6f5a69d9e68d39cfabdc6e48f786f4d063c4a063027406f90f9920163f8f72235302fb827d08d4e9ca043e70f"], 0x45c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_deladdr={0x4c, 0x15, 0x20, 0x70bd2a, 0x25dfdbfe, {0x2, 0x3f, 0x0, 0x0, r8}, [@IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_FLAGS={0x8, 0x8, 0x8ce}, @IFA_FLAGS={0x8, 0x8, 0x80}, @IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x5bc, 0x2, 0x3c57}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x90) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x1f07, 0x3, 0x0, 0x1, 0x3f, 0x4, 0x10}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:54 executing program 5: unshare(0x8020000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r1, 0x20000) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x440, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000080)) 23:47:54 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:54 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000000c0)={0x0, 0x4, 0x3, 0x0, 0x4, 0x4, 0xc, 0xe0, 0x80, 0x5, 0x55, 0x76, 0x0, 0x9, 0x1, 0xff, 0x1, 0x2f, 0x9}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x10000) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) write$9p(r2, &(0x7f0000000100)="4a2e647d8caaff6192fd58c9e912fcce5732c7255b0cbc109dd4aae0ab81f3a29ecd62f47df1bc6783994fd6a7df0bba941e2570d736dfae4141d3cad8dbfba49708426c00ff0a30749293c66484eb65f69cd30c677a48fdeb395e0b3edd9ac4d174c501334c38c9e6c58f3606d127e5cde526d81aa8510786c83c03bde19a5d13e4715590deab741c", 0x89) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f00000001c0)={{0x2, 0x0, @identifier="019d3ca8f32c9092dba28510e3d575fe"}}) socketpair(0x8, 0x6, 0x3d, &(0x7f0000000280)) [ 1542.799433][ T26] audit: type=1326 audit(1570837674.361:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28992 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:54 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x230, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f00000000c0)) ioctl(r0, 0x1, &(0x7f0000000080)="34d0c205cb99355599eec2") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="095a00000000000000000100000000000000014100000014001700000000000000006574683a6c6f0000"], 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r4, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000000}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x48}, 0x4000000) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0), 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x6, 0x4, 0xa, 0x5}, {0x8, 0x20, 0x57, 0x6}, {0x101, 0xea, 0x7, 0x1}, {0x74b, 0x8, 0x8, 0x3}, {0x2c6, 0x7, 0xfe, 0x200}, {0x931, 0xb0, 0x4, 0x8}, {0x5, 0x4, 0x1, 0x6}, {0x1, 0x1b, 0x9, 0x81}]}, 0x10) 23:47:54 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000100)={0x4, 0x15, 0x8, 0x9, "4c7bb4b9d6dac942ba610fea7e2258a84e19accb9d7b38a2bfa972a3d9bae188"}) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) splice(r1, &(0x7f0000000000), r3, &(0x7f0000000040), 0x0, 0x5) 23:47:54 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1) ptrace$cont(0x18, r1, 0x0, 0xfffffffffffffffc) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:47:54 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0xb5) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="1eb7ca84b8d8bbee3a0cafac24a76e99", 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) 23:47:54 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:54 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) tkill(r1, 0x20) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000100)=0xf70c) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) rt_sigqueueinfo(r6, 0x30, &(0x7f0000000000)={0x36, 0xfffffffe, 0x3}) tkill(r3, 0x1) ptrace$cont(0x18, r3, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) ptrace$setregs(0xd, r7, 0x7, &(0x7f0000000140)="0e8f0038e7040063181dc8e10000732f40862ab7a2b0092966010000b35ae088755885b1335737") ptrace$cont(0x7, r3, 0x0, 0x0) [ 1542.953714][ T26] audit: type=1326 audit(1570837674.521:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29962 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:54 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:54 executing program 5: unshare(0x8020000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snap{hot\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000180)={0x5, 0x3ff, 0x2, 0x41f, 0xfffffffd}) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)={0x1000, 0xfd, "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"}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000200)={{0x9}, {0xa9}, 0x8, 0xa}) setns(r1, 0x0) 23:47:54 executing program 4: socketpair(0x8, 0x5, 0xff, &(0x7f0000000280)) 23:47:54 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:54 executing program 4: socketpair(0x0, 0x0, 0x2, &(0x7f0000000000)) [ 1543.754327][ T26] audit: type=1326 audit(1570837675.321:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29962 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:55 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x231, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() r0 = gettid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r3 = inotify_init() kcmp(r1, 0x0, 0x5, r2, r3) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$setregs(0xd, 0xffffffffffffffff, 0xc1, &(0x7f0000000100)="8f7f5c2f239fae00eb93ae4e45cb54b060a053cc3a960982e012dfa75955983fc81d9a42fa6029cbb4647b8cb2231033ee4c71ee45dd17b6e92a71130cefe5e5091e8d6de55f53748b89c29492abaf65c109677d443cf15d42d538f83e7e72e39f6c6bb38670d4444f3f7eb988b2645af365f5066085add43e659c2bd32abd76ec3c90a4f757adc73cc900dd76cc4253d104328fb02e632e23aaca2c5d1920e5a7eab914cae09e9a314ab006dc82c7e806fc8c091b9c0283bc901f77bda98d9cc2fac70111e3c7855ea38d6640054895874dc89dcfda5c1874486abbb883") ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$int_out(r0, 0x5460, &(0x7f00000002c0)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video\"\xee', 0x5, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x60200, 0x0) modify_ldt$read(0x0, &(0x7f00000000c0)=""/3, 0x3) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000300)=""/164) 23:47:55 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:55 executing program 5: unshare(0x42020900) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) setns(r0, 0x28000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) preadv(r2, &(0x7f0000001480)=[{&(0x7f0000001580)=""/108, 0x6c}, {&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000300)=""/87, 0xffffffffffffff76}, {&(0x7f00000003c0)=""/45, 0x2d}, {&(0x7f0000001600)=""/134, 0x79}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x6, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) bind$rds(r4, &(0x7f0000001540)={0x2, 0x3, @broadcast}, 0x10) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000001500)="7910") ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x43200) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4c, &(0x7f0000000000)=0x2000000, 0x4) r8 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x12, r8, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r5, 0x10f, 0x85) ioctl$VHOST_SET_VRING_KICK(r6, 0x335d, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x608005, 0x0) ioctl$RTC_RD_TIME(r6, 0x80247009, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0xfffffffe, 0x4) sched_getscheduler(0x0) 23:47:55 executing program 4: socketpair(0x18, 0x0, 0x3f, &(0x7f0000000280)) 23:47:55 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1543.911107][ T26] audit: type=1326 audit(1570837675.471:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:55 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) socket$can_bcm(0x1d, 0x2, 0x2) 23:47:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) clone3(&(0x7f0000000200)={0xf5b7abd87ea280f8, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, 0x1d, 0x0, &(0x7f0000000100)=""/128, 0x80, &(0x7f0000000180)=""/66}, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000300)="d06f91ef063e26a3ae8ce5125ad3c62297048eb8eac405000cb48f58cc08df0c6e33ebef1523557fafe69480c3ed62c9bbe3ec331b869a2f5ecf3759b223a4b6ae618141d3fbcfbdbdd28b318eab8c004c8fbc7c7f3dcd15fd5f4569c60e8799eb909d2b718bb41e2ed5806e5884ec62c044ba7f9fe6c8727cc8f0dcc18d130bad167b97d2ee49606ec657eeab0cb36010a7162791df6da17de5e9845013cdd9d7d0dad0067b05587a176437cd85943eb8c3fcc3607750104e0664485716767faff88c242717e7582c4239687518d781b57405324328946776ca56e919c71683f10c94ac47") ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0xe6121a7eb3684713) bind$can_raw(r0, &(0x7f0000000000), 0x10) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x26) ioctl$TIOCGPTPEER(r2, 0x5441, 0x5) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f00000002c0)={"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"}) pread64(r1, &(0x7f0000000100)=""/221, 0xfffffe74, 0x0) readv(r1, &(0x7f00000014c0), 0x0) r4 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f00000000c0)={0x2, [0x0, 0x0]}) 23:47:55 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:55 executing program 5: unshare(0x8020000) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000380)='asymmetric\x00i\x8dRT\xcc|\rO\xe2\xbe\x95\xe2\x80}5y\xd6\xda1\xbd\x15\xddH_\xed\xe3\xae\x0e\x14\xc1\x87$\xae&\x90cPh\xb1,\x93[D\xd7\x88\x9dI^AD\xf4[3\xe17\xfa\x05\xc7\x16\x1c\x02G\xa8z\xd3\xda\xc1\xd01\x87\xbf\xdf\xe6)\\=\xc2\x15\x7fu\xf1n\xba\xb8\xdc\x80\x0f\xf8m@\xb2\x88\xce+\vXKa\xaeK\xed\x89<\x84_a\x8e\x82\x15\x9d\x9d^\x99\xa6\xbd\xbd\v\xd6\x1d\x80%#}\xaeDZa\xb9\x01\xff\xca\xf5\xc5\\F)F]\xc0\xfe\xd9\xff\xc79\x86\x01\xf9\xf1\x00\x80\x00\x00\x00\x00\x00\x00\x19@\xd7\x1ds\b4\x98U\x17Od\xaa\x98\x1cu\x13\x1c<\x01 \xe5\xf6\x8b\xe6C\x99\xe4\xc5\xf5v\x98{\xce\xc40N\x03\xcb\xffh\xf2h0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r2, 0x400454ce, r5) r6 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000680)={{0x0, 0x0, r5, r4, r5, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r3, r3, 0x9}) r7 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r7, 0x400454ce, r10) r11 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r11, 0x1, &(0x7f0000000680)={{0x0, 0x0, r10, r9, r10, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r8, r8, 0x9}) keyctl$chown(0x4, r1, r4, r10) r12 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) clone(0x2000000, &(0x7f00000000c0)="513d08b9e76c88b0bb7eef325d1a33", &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000004c0)="27fe228d2ceed3ad5d4d37447273be748303943038a965ceba0de0ec84f8a126462513f16255b1085ece89e723709bd59012729262b9a85019c531f7914c186a5df01540d5f127ead4a12b7473b9e53312ccef87cbb90186937e3b723a69de04e1b4f51b6dae6e97b4de6785a6d22db31498106ddc1fe38be2cb45a45df06c8a33f48dd2f584d1fa7620a0b4aba0803327f57e6a2baa29a0d3bb1566a257b5bc00000000000000000000000000002400000000") ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f00000001c0)={0x3, 0x1}) r13 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8000, 0x58b800) ioctl$VHOST_NET_SET_BACKEND(r12, 0x4008af30, &(0x7f0000000080)={0x2, r13}) r14 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r14, 0x0) [ 1544.710063][ T26] audit: type=1326 audit(1570837676.271:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:56 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x232, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:56 executing program 4: ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000040)={0x5, "5a007b9758d43aa55bc0df785d64dc8cfbe0e075399986d4e0473fc053b1e406", 0x1000, 0x9, 0x8001, 0xb57798ed9adda7c3, 0x3}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0) 23:47:56 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:56 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x20000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:56 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000000)) unshare(0x8020000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r1, 0x0) 23:47:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") pread64(0xffffffffffffffff, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0xfffb}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0x4e20, 0xd2, @local, 0x6}}}, 0x88) r2 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt(r2, 0x1f38, 0x8, &(0x7f0000000380)=""/213, &(0x7f0000000480)=0xd5) r3 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x6, 0x52ce3585c3ff5c3b) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000080)={{0x0, 0x0, @descriptor="f566fd71039ab4f3"}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}, [@mark={0xc}]}, 0x5c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}, [@mark={0xc}]}, 0x5c}}, 0x0) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f00000004c0)) 23:47:56 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0], 0x3}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1544.883418][ T26] audit: type=1326 audit(1570837676.441:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31219 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:56 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000000)={{0x1, @addr=0x9}, 0x8, 0x4, 0x81}) 23:47:56 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r6, 0x400454ce, r9) r10 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r10, 0x1, &(0x7f0000000680)={{0x0, 0x0, r9, r8, r9, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r7, r7, 0x9}) r11 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x200, 0x40000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r11, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000300)=0x4) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480100001200000026bd7000fcdbdf2500000000000000000000ffffac1e0101000004d20a003200080018000900000014000d00e00000010000000000000000000000000c001000000000000000000024001700c602000027bd700026bd70002abd70002abd7000090000000500000009000000200017000100000026bd70002dbd70002bbd70002abd700004000000ffffff7fac000700ffffffe100000000000000000000000091e40b18c998513b028d85a3873d60864e2100044e210009020080200d000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="2e000000000000000100000000000000ffffffffffff09ffff7f000000000000060000000000000005000000000000000600000000000000010000000000000002000000000000001ee5af7e00000000000000000000000000000080000000007f000000bd6b6e00000003010000000008000b007f000000"], 0x148}}, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) fcntl$getown(r4, 0x9) r12 = getpid() sched_setscheduler(r12, 0x5, &(0x7f0000000380)) ptrace$cont(0x9, r12, 0x5, 0x1ff) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:56 executing program 5: unshare(0x8020000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1b8, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x571}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x825b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x54ee}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x67c0780f}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x1000}, 0x120c8007) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x1b1000) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000180)={0xefc8, 0x1ff}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) name_to_handle_at(r5, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0xcc, 0x4, "ba9016605bd8f4d55a354c61c235b3a0b840769f72bea7f24e951f4ade94257ce251cdc21db992f4cd15c9e963e7d4dd79892a4596184e3fc2699fc6b3e6ec5a4933d73b9abce66ff812558da0324a2cb1c5800210a79ff3c0453c3632bfde0860b495322ae5ca544f0147e7167db8bb8dbbd2cd47fb2aa9754a9f114b86fba041c3dbd63ef25400af9a0ab85e0c2786be151b1b0207d3f7ccb4583879860b6fbd3b5fdde7d9439ce7b8dba051f351ab4f2694fbb12dfed439c5e9af798fa8d60f8dd264"}, &(0x7f0000000640), 0x800) ioctl$VHOST_SET_VRING_KICK(r5, 0x335d, 0x0) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000040), &(0x7f0000000080)=""/125, 0xfffffffffffffe98}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-control\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r6, 0x5) setns(r3, 0x0) 23:47:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x2, &(0x7f0000000040)="0800b5055e0bcfe87b0071") prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1c020a20}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x118, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1a}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x80) 23:47:56 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0], 0x3}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1545.162064][T31509] Enabling not permitted [ 1545.171458][T31509] Enabling of bearer rejected, failed to enable media [ 1545.231687][T31528] Enabling not permitted [ 1545.237804][T31528] Enabling of bearer rejected, failed to enable media 23:47:57 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x233, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:57 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) prctl$PR_SET_UNALIGN(0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xffffffffffffff60) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x28, &(0x7f0000000040)}, 0x10) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="5c04000028080705150000f7ffffff010000b88a9130c7339fbf7ba3130000", @ANYRES32=r7, @ANYBLOB="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"], 0x45c}}, 0x0) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={r7, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1}, 0xc) 23:47:57 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000000)) 23:47:57 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0], 0x3}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) mknodat(r2, &(0x7f00000002c0)='./file0\x00', 0x9181, 0x4000000) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) r4 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi={0x0, 0x0, 0x0, 0x7c751c00, [], [0xfffffffc]}}) fremovexattr(r3, &(0x7f0000000000)=@random={'user.', '/dev/video#\x00'}) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:57 executing program 5: unshare(0x8020000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/r\x00') setns(r1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x1, 0x7, 0x4, 0x8001, 0x1ff}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x1, 0x9, 0x4, 0xff, 0x0, 0xfffffffffffffff9, 0x4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x500000000000, 0x2}, 0x17030, 0x2, 0x3ff, 0x6, 0x10001, 0x8, 0x62}, 0xffffffffffffffff, 0x0, r3, 0x2) 23:47:57 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:57 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) ptrace$cont(0x7, r3, 0x5, 0x20008) 23:47:57 executing program 5: unshare(0x18020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) 23:47:57 executing program 4: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0xdcc3) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4d0480, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000100)={{0x0, 0x3, 0x1f, 0x3, 0x7fd}, 0x1ff, 0x1ff, 0x4}) 23:47:57 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:57 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x404000, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x335d, 0x0) ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f0000000140)={0x1, 0x9}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1546.660738][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1546.660751][ T26] audit: type=1326 audit(1570837678.221:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31980 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:58 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x234, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x64703b6c3850b583) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r2, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r2, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:47:58 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:58 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x400, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x7787) fcntl$getflags(r2, 0x0) 23:47:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x78) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1546.857919][ T26] audit: type=1326 audit(1570837678.421:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=32516 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:58 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) r3 = socket$inet(0x2, 0x800, 0x8) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}, [@mark={0xc}]}, 0x5c}}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:58 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x9323cf7b73b1bfd8, 0x24) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000140)={0x6, 0x5346, 0x7f, 0x2, 0x5, 0x6, 0x400, 0x3, 0x8, 0x8, 0x81, 0xff, 0xf3, 0xffff, &(0x7f0000000040)=""/243, 0x5, 0x3, 0x7}) socketpair(0x18, 0x0, 0x2, &(0x7f0000000200)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000001c0)={0xffff, 0x7f, 0x8000}) 23:47:58 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1946, 0x640080) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x200) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:47:58 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:58 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x408100, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000180)=0x1, 0x4) r2 = dup2(r0, 0xffffffffffffffff) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x7) [ 1547.658384][ T26] audit: type=1326 audit(1570837679.221:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=32516 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:59 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x235, &(0x7f00000011c0)}}], 0x249, 0x0) 23:47:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7ff, 0x900) faccessat(r2, &(0x7f0000000080)='./file0\x00', 0x1c0, 0x400) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="018dd3f0", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x10000}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300)={r6, 0x7427}, 0x8) 23:47:59 executing program 4: delete_module(&(0x7f0000000000)='nodev@procGPLsystem\x00', 0x1400) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) 23:47:59 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080002"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:59 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) fstat(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f0000000380)={0x78, 0x0, 0x2, {0x2, 0x6, 0x0, {0x0, 0x1, 0x7f, 0x100, 0xe08, 0x800, 0x4, 0x80000000, 0x5, 0x7, 0x100, r2, r4, 0x1, 0x200}}}, 0x78) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/83, 0x53}, {&(0x7f0000000500)=""/84, 0x54}], 0x3, 0x0) r8 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) vmsplice(r8, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) 23:47:59 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080002"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1547.824631][ T26] audit: type=1326 audit(1570837679.391:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=590 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:47:59 executing program 4: socketpair(0x3, 0x5, 0x2, &(0x7f0000000000)) 23:47:59 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000080)={0x3, 0x3ff}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000040)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x8800, 0x0) ioctl$EVIOCGMTSLOTS(r6, 0x8040450a, &(0x7f00000001c0)=""/117) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r5}, 0x8) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="889ad6dc5b97fffe370000f8ed5283808b142e4b74f00000000000000000712de813750e132ee675c4db5a36fd5a062c4bda5deb71bd958b7400000000000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000480)={r5, 0x101, 0x74ca4995f568e283}, &(0x7f00000004c0)=0xc) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r9, 0x335d, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000100)={r5, 0x6}, &(0x7f0000000140)=0x8) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r10, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x9c, r11, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x0, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x9c}, 0x1, 0x0, 0x0, 0xa0}, 0x851) ioctl$VHOST_SET_VRING_KICK(r10, 0x335d, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r10, 0x7, 0x0, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000340)) 23:47:59 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080002"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:47:59 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8400, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000080)) socketpair(0x1c, 0x0, 0x82, &(0x7f0000000000)) 23:47:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x5, 0x2) ioctl$RTC_AIE_ON(r2, 0x7001) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/25, 0x19}], 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)='/dev/video#\x00'}, 0x30) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r4 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r5 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) socket$alg(0x26, 0x5, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x420200, 0x0) fcntl$getflags(r2, 0x3) 23:47:59 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r1, 0x400454ce, r4) r5 = shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) r6 = syz_open_dev$mouse(&(0x7f0000000180)='/\x00eouse\"\x00', 0x7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffff5) ioctl$TUNSETGROUP(r6, 0x400454ce, r9) r10 = shmget(0x2, 0x1000, 0x0, &(0x7f000096d000/0x1000)=nil) shmctl$IPC_SET(r10, 0x1, &(0x7f0000000680)={{0x0, 0x0, r9, r8, r9, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r7, r7, 0x9}) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x0, r8, r4, r3, r4, 0xa, 0x80000000}, 0x7fff, 0x4, 0x4, 0xe99c, r2, r2, 0x9}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x6, 0x8, r0, 0x0, r3, 0x0, 0x3, 0x8}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r11 = gettid() r12 = getpid() sched_setscheduler(r12, 0x5, &(0x7f0000000380)) wait4(r12, 0x0, 0x80000000, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup2(r13, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000080)=[0x9]) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) tkill(r11, 0x1) ptrace$cont(0x18, r11, 0x0, 0x0) ptrace$setregs(0xd, r11, 0x0, &(0x7f0000000080)) setsockopt$inet_int(r14, 0x0, 0xf, &(0x7f0000000000)=0x5, 0x4) ptrace$cont(0x7, r11, 0x0, 0x0) [ 1548.624393][ T26] audit: type=1326 audit(1570837680.191:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=590 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:00 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x236, &(0x7f00000011c0)}}], 0x249, 0x0) 23:48:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400000, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x5}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000340)={r4, 0x2, 0x1, 0x3, 0x4575, 0x36b, 0x1, 0x3f, {r5, @in6={{0xa, 0x4e24, 0x2, @empty, 0x3}}, 0x1, 0xe640, 0x401, 0xffff, 0xffffffe0}}, &(0x7f0000000400)=0xb0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000440)={0x0, @dev, @remote}, &(0x7f0000000480)=0xc) pread64(r1, &(0x7f0000000100)=""/223, 0xdf, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:48:00 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x3}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:00 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xc1c7, 0x1000) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000380)='asymmetric\x00i\x8dRT\xcc|\rO\xe2\xbe\x95\xe2\x80}5y\xd6\xda1\xbd\x15\xddH_\xed\xe3\xae\x0e\x14\xc1\x87$\xae&\x90cPh\xb1,\x93[D\xd7\x88\x9dI^AD\xf4[3\xe17\xfa\x05\xc7\x16\x1c\x02G\xa8z\xd3\xda\xc1\xd01\x87\xbf\xdf\xe6)\\=\xc2\x15\x7fu\xf1n\xba\xb8\xdc\x80\x0f\xf8m@\xb2\x88\xce+\vXKa\xaeK\xed\x89<\x84_a\x8e\x82\x15\x9d\x9d^\x99\xa6\xbd\xbd\v\xd6\x1d\x80%#}\xaeDZa\xb9\x01\xff\xca\xf5\xc5\\F)F]\xc0\xfe\xd9\xff\xc79\x86\x01\xf9\xf1\x00\x80\x00\x00\x00\x00\x00\x00\x19@\xd7\x1ds\b4\x98U\x17Od\xaa\x98\x1cu\x13\x1c<\x01 \xe5\xf6\x8b\xe6C\x99\xe4\xc5\xf5v\x98{\xce\xc40N\x03\xcb\xffh\xf2h0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000600)={0x2, 0x0, 0x201, 0xa8, 0x1f, 0x9, 0x4, 0x2, r4}, &(0x7f0000000640)=0x20) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={r5, 0x80000000, 0xff, 0x80, 0x7, 0x3, 0x1e69, 0x77, {r7, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x90ac12f7, 0x1, 0x5, 0x3f, 0xfffffffb}}, &(0x7f0000000740)=0xb0) r8 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r9 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r10 = dup2(r8, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x604202, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) r11 = open(&(0x7f0000000240)='./file0\x00', 0xa00, 0xc6) setsockopt$IP_VS_SO_SET_TIMEOUT(r11, 0x0, 0x48a, &(0x7f00000004c0)={0x48, 0x7, 0x20}, 0xc) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1550.576292][ T26] audit: type=1326 audit(1570837682.141:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=1707 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:02 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x238, &(0x7f00000011c0)}}], 0x249, 0x0) 23:48:02 executing program 4: socketpair(0x18, 0xa, 0x3, &(0x7f0000000000)) r0 = gettid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00e20002f9137f48fa832b4700"], 0x5c}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video0\x00', 0x2, 0x0) rt_tgsigqueueinfo(r0, r2, 0xa, &(0x7f0000000040)={0x11, 0x6, 0xfffffeff}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x335d, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x24a82, 0x0) ioctl$TCSETX(r3, 0x5433, &(0x7f0000000280)={0x1, 0xffe1, [0x6, 0x9, 0x40, 0x0, 0x3], 0x65}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x335d, 0x0) read$alg(r4, &(0x7f00000000c0)=""/235, 0xeb) timer_create(0x6, &(0x7f0000000340)={0x0, 0x3d, 0x0, @thr={&(0x7f00000002c0)="9d1b54e5a96a35708d3cb5246dd8d365e44f0bf8acf8455f2bf9f86d52a335e4c70e90a08b0142edf67abc9e58ab972b0401a5e591f4f081cf87499ab3a71c40d06be932f13f17f332403aca2d69f18a0663d74cb2f5af898d52d6a3d22441236723e0e74d98b2d110", &(0x7f00000003c0)="dc9f0b7cf965b8177a4a353a970b9ec0fefc6df25ddea80dc86c8e6ecadcd0d33f81215dd6d2bfbd02d24bf889e09a73ce8a982535bb6fd04870fc8335ef0d61802c1e67ee51c5acba3b79a3d9e6d95d98eb326491d2927abbaef623cf8f71318c519769b1b6f547b7a612bd34f907a1a6b488d4d0b07f98459b8253d450df052e50b0312d5940de1fc582929ce3afd5fb33fb06ee5ea862cfc8fe6bc379054fa2a4da38ff3e87c8366dcb21f1af"}}, &(0x7f0000000480)) 23:48:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r4 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r5 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r6 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r7 = dup2(r6, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:48:02 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x3}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x104102, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) r3 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000300)={0x0, 0x2, [{r2, 0x0, 0x1000002005000, 0xffffc000}, {r3, 0x0, 0xa60ec5be8a0938dc, 0x1000000}]}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xffff, 0x200403) r5 = dup2(r0, r4) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x335d, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r6, 0xc0104320, &(0x7f00000003c0)={0x7, &(0x7f0000000340)="3a91b8b96f9cb82b174f74a01c4137ec2e71f29bbc6a3292c8efe9a49e7b80215256e80ddcae3737f1c042f749a9cb52f6298bff9dfef2b9b1218fa4b6985028b242f0092b8c88bc527fc15db45cc85aea33073b602629d95a4d7175b5790214508698110a9b5f9cbb205d28a604e141bb3bf046ac316f"}) write$P9_RVERSION(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="15011c003b6991260000000001000000000000"], 0x15) pread64(r4, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r4, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000080)=""/38, 0xffffffffffffff82}], 0x2) 23:48:02 executing program 5: unshare(0x8020000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1, 0x6d13, 0x10}, 0xc) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r2, 0x0) [ 1550.850542][ T26] audit: type=1326 audit(1570837682.411:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2238 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x1ff, 0x400) vmsplice(r3, &(0x7f00000003c0), 0xffffffffffffd1a, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x40000000, &(0x7f0000000040)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:48:02 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x3}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/102, 0x40}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:48:02 executing program 4: socketpair(0x10, 0xa, 0x2, &(0x7f0000000280)) 23:48:02 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000000040)="ce6c6ca32613fb753211e7f6f76d22cc3047fcad900a51462cffb2c2533638827646f60291565188030806f1e36e180a60d80d02e9de57f665baadc65cfe2890b1dd96f6a6a4799105cd70d3806fbb3ffd104590d38586db2365789a8a35df3742e5a63745c52910eea536dfad6497f7", 0x70, 0xa000000000000}, &(0x7f0000000100)) 23:48:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0xe9db) ptrace$cont(0x7, r0, 0x0, 0x0) 23:48:03 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x239, &(0x7f00000011c0)}}], 0x249, 0x0) 23:48:03 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:03 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x60a040, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x3, 0x2}, 0x10) 23:48:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x3, 0x7f, [], 0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=""/127}, &(0x7f0000000100)=0x78) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) pread64(r2, &(0x7f00000003c0)=""/225, 0xfffffffffffffebe, 0xfffffffffffffffd) readv(r1, &(0x7f00000015c0), 0x0) 23:48:03 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xc63, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x335d, 0x0) r6 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r7 = dup2(r6, r2) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) r9 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r10 = dup3(r9, r0, 0x80000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r11, 0x335d, 0x0) r12 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x80, 0x0) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r13, 0x335d, 0x0) r14 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r14, 0x335d, 0x0) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9e}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa5}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r5}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8, 0x1, r3}, {0x8, 0x1, r14}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:48:03 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:03 executing program 4: socketpair(0x3, 0x5, 0xf3, &(0x7f0000000000)) r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x7, 0x80) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x80) [ 1551.867941][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1551.867994][ T26] audit: type=1326 audit(1570837683.431:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2944 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:03 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) sendmsg$unix(r1, &(0x7f0000000080)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000100)="7a7a5b701195f96797bb2878edeadcb909d1fcbd7dfc99ae54d9ec0417cc309b9f394343eca9a6626b12f84444fb76cd2aff05258a19f3667adcabfd3d47de9a534991538408f21b1e390eb8ec565dadfc01c15efa74576f49feb8", 0x5b}, {&(0x7f0000000180)="ecce218a3d8f3c848b8305142579ecc4f496869bb23a7be0f84e2c2db598b02c444c3d6dcb8369907644d4d82a6548e7aa29bdb43a6e31cca9800a31d42487785e3f6514b35a1336c10fd768b3676680d035d9df755cc1b00154d933756db2e9a3c31559a14bb4dfb4650b336675c8ce80b64c146a598056c0038612aab0bf2c3015a9b5e90fc0d0f983a1abe6d28a4906f864f6db13a1ff3133f5814d3accc40b782c7dc4338e24e8cbbd96052eec35", 0xb0}, {&(0x7f0000000300)="c7bcdbf68146d1c3ddf7f473977295f593e7bfd6fb21f0755561662803346899db06cda3ad3d246ae3433493f1876601d698c90021ce44800d4b5e47705bf246f89b2e7a21bbc5d2bcc88c7909a21c1c0a9645c4b5059324daff509b6e119401ccdf3105f91d23643ad52d07347d5c83ea1ebad8ce2d5fddb86ea05d2f99e2e241b0d24d760b498823008b622761f9edc421be3da36160658edc35e75856e62f599b17074ab9f125f812ea7a5f6430e5ee59c5e8bc64844511d701c53571ea17d8be6e38299b9192acd5121a79e83b3f4a12b5fcc5193aa12f60bcf7ed91b07ed985345a1c43b23cace9a37863143d0a189331d9", 0xf4}, {&(0x7f0000000400)="ef4789882c4bdf660f68fe9dc53d343d1907bdfc7b186458029ef3e99858482d53ee04b6c4010d855080ec8e7a83d737bc7932528c4385c6a01a95f401ff9ed43ea656744185a7f570c38585b9866d1c50901beacca8ccd56ca168adc474895281fb35b67655c2abed18c714425d64596d10df161ccb0ab1ce4510cbdaac5c88355d7e1a297e02a75b8810a9d4cb34a83c89b5abe73cc9ec2c739534da4092", 0x9f}, {&(0x7f00000004c0)="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", 0x1000}], 0x5, 0x0, 0x0, 0x80}, 0x40) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:48:03 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) r3 = geteuid() sendmsg$nl_netfilter(r0, &(0x7f0000000540)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x254, 0x6, 0x7, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x7}, [@nested={0x17c, 0x67, [@generic="b23f51e2", @generic="1bfc1a64b6c091a5fb84c75ae1f3d30a7e9ffbcf5f1a557dd41ff5efe4fc7713c1445e7bd3707419f6e3d07223fafdd62c89d686a922deba9de531ac48354b19a1b1dd06131098a8fcf50cd297fbded2bbdda97d8b14089e70fa371a5417a753644e3d3beca2fdeb50b8f48403b6013895ac20c0deb1d8f948f100a8d6774cca9386aa3d68ff8a85e1ae7a5a39e61221f104e499689b8c1b3ea61271e014193ea2dc11329f3c8b471a7e21549b925f125da871cf9feead6975f4307fc7cf3f9e25d28e6122d38cbebf5a3c8028fad3a22533a9329d87f2ee7d977ba9594c74edebc245ca5094", @generic="8c7aefcce5a03a6369fa72eb99f53ea6c5bd3a855591ac0f7fddaa7f96e5dd5c6584052242c04443036b6874cf3f15eb1e5632c683db8bb571755df16de68eabf509d925fa036c7ada42e8298ec29ebef6de9383d1a876ed17811aa70a5e9ffc1c965afe9d3d246be45a45edad8024f64a6cf2ff0f6f74918f4b051ebc319edc4cafc0", @typed={0x8, 0x6f, @pid=r2}]}, @nested={0x4, 0x34}, @nested={0xc0, 0x26, [@generic="7d533b9906d8329ca8b0eb6e9aafc451aebb1824c557024abf4b7c6d61c9b1584327ceac2425a74cc3dd7466fd5f712d6b94a2c71528e29924bba8285c31a713f1414151836e28642da1ff12cdcaef4cf2fa8b1b7db5636d271476342ad794bedc3394aa91b9993375213897b6d556116081b6123e29a5b3f4e2b0798f76311d7478653a1ddb5929cec6759f99b81552fa4c88870d8a56", @typed={0x4, 0x74}, @typed={0x8, 0x22, @uid=r3}, @generic="475597f94ae721f3440abb85ba60286792e4e4e1fa07"]}]}, 0x254}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r5 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r5, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r5, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:48:03 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:03 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0xfffffe3b}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a019d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3702d42b41dc9d82c0e15a669bc5500"/98, 0x62}], 0x4, 0x0) r4 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) fcntl$getflags(r4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0x2, r0, 0x0, &(0x7f0000000300)="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") ptrace$cont(0x7, r0, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x335d, 0x0) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000100)) 23:48:03 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1552.668461][ T26] audit: type=1326 audit(1570837684.231:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2944 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:04 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x40, 0xd0280) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x3, @vbi}) readahead(r0, 0x7, 0x2ec) 23:48:04 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x23a, &(0x7f00000011c0)}}], 0x249, 0x0) 23:48:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x7, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) getpid() pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/103, 0x67}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:48:04 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r4}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r4, 0x0, 0x0, @in6={0xa, 0x4e22, 0x2, @remote, 0x100}}}, 0x90) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x1c87, 0x4) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1552.883262][ T26] audit: type=1326 audit(1570837684.451:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3435 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:04 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) wait4(r1, 0x0, 0x40000000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:48:04 executing program 4: socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000040)="2162d635db9e3253a5ec226b470a95ee7a83382f5fe05d5e36d9dfefd285a483ae55bce87f388f3df182814f6318bb78f4417d548c01d0e2d19494394b555bb2116bd04e2d74b3710b7294100e68247aaa95c81be15befef7880", 0x5a) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), 0x4) 23:48:04 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r3 = creat(&(0x7f0000000380)='./file0\x00', 0x151) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000080)={0x7, 0x3, "6a6b07c95c548e66f626e023a5fe0441a8dcf5bd0ea2a5b4a37c4e24b08ed108", 0x200, 0x7f, 0xa3, 0x9, 0x104}) pread64(r2, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r2, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:48:04 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4206, r3, 0x0, 0x10) tkill(r0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80820000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r7, 0x400, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0xe9cc, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x4040024) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x4, 0x0) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) 23:48:04 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xff, 0x2, 0x0, 0x4, 0x3}) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) 23:48:04 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1553.650419][ T26] audit: type=1326 audit(1570837685.211:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3435 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:05 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x23b, &(0x7f00000011c0)}}], 0x249, 0x0) 23:48:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100000000, 0x100080) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:48:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:48:05 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:05 executing program 4: 23:48:05 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) syz_open_procfs(r4, &(0x7f0000000000)='fdinfo/3\x00') [ 1553.835638][ T26] audit: type=1326 audit(1570837685.401:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4007 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:05 executing program 4: socketpair(0xa, 0xa, 0x2, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="010000009d955a16c4743edebf7e5f6569d08bdc08fbf82321c980b56152c42d4c9a9fe2930ac55eb912a651f1c0c475edef4c9c73a002e30694e3f8d933f0fb421b55ba6d7f048918ea0509d426b824f2c5ec93c6a994891ae8ce825e0a4f6174f6c1f2aecacb2ca6b520b8c45c2e54e3dcdec26bb416b1bbf2ba1f7997d141716af0acb8b1bf23872506655bf3ca3888befd87c9", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r2}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r2, 0xf800, 0x0, 0x9, 0xc41, 0xda}, &(0x7f0000000100)=0x14) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40, 0x0) pidfd_send_signal(r3, 0x24, &(0x7f0000000040)={0x2d, 0x2e, 0x2}, 0x0) 23:48:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "9e11e877db0322b078e35c7f3e673247b9a1a9e8"}, 0x15, 0xc0cf6c2679b77cda) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:48:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x5, 0x102, 0x1, {0xfffffbff, 0x5bf, 0x2, 0x5}}) tkill(r0, 0x1) setsockopt$inet6_int(r1, 0x29, 0x7e, &(0x7f0000000000)=0x3, 0x4) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:48:05 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:05 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)={0x3}) socketpair(0xa, 0x4, 0x2, &(0x7f0000000000)) [ 1554.633835][ T26] audit: type=1326 audit(1570837686.201:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4007 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:06 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x23c, &(0x7f00000011c0)}}], 0x249, 0x0) 23:48:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x312) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$P9_RSYMLINK(r2, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x34, 0x2, 0x6}}, 0x14) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:48:06 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000003c0)) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/231, 0xffffffc7, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2000, 0x0) readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000100)=0xe0a) ioctl$sock_ifreq(r2, 0x0, &(0x7f00000000c0)={'gretap0\x00', @ifru_mtu=0x7ff}) 23:48:06 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x7fffffff, @remote, 0x5}], 0x4c) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x74000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, r3, 0x5}, 0x10) fsync(r2) [ 1554.838609][ T26] audit: type=1326 audit(1570837686.401:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4558 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:06 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x5) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:48:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x200000, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000500)={0x4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000002c0)={0x0, 0x4, 0x10001, 0x8}) fsetxattr$security_smack_entry(r1, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f0000000080)='/dev/video#\x00', 0xc, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@initdev, @in6=@initdev}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000480)=0xe8) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) r4 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x2, 0x2000) signalfd4(r4, &(0x7f0000000340), 0x8, 0x800) 23:48:06 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) 23:48:06 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x7f, 0x2}, 0x7) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x341b7f9094ee4795) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000001300)={0xa, @vbi}) vmsplice(r3, &(0x7f00000026c0)=[{&(0x7f0000000000)="e7fb0121d2cf576b7e2fe70ec77c6ba6a0b1edab90136ff72edbbf325ce92c3cb37be367a4", 0x25}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000100)="58e59c2e27fc87ae1d2645300e495ea784b6ccf9980c259676f967e174ba530b9013608931fa32c985d07fd9ae2d26f1841680bd0f25646b97bc5be1981835e1548e1cf455245c081ae731c6a979690a88003f531fc04d643767b76199473adbd3bc5b811044a7b155cf6d365065c6f1adc8654e53dc38b92b31309c861699d3385c93b06d48ba1a698a86687fbc5006e22d5d2d1313208d705d48c24aff79aa993c24cfb7b9023e882ea3d360b0b765c3f12258db95688e6923ca280b8c270c0fc25d33de9face591f6828a98f9901f920600df04f6537829ec261c8b6b28730ddce65fcf0a70735935165db6ee8152", 0xf0}, {&(0x7f0000002780)="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", 0x110}, {&(0x7f0000001400)="a56e145b3dc83dd5cf2f77d685222de86ae9c41dda845320cd185c32ab34e81ae04e0183df22939ae528906789be7c725ba50148442285186dfecf4e46607542ebeabd7a68bd6809154d18aea0d52be93b9342082666713fb6ed30ecba64fcdc5dcfaa4c9de53981a4b6222536a05aced0fe7a3f2e72e82fa2fe714628497f48cd75e5b41a61b1f6ba01c6fe144435ab14c5f9375e8024529a72b53e7ef9fb6769a658e10fe1ade20efd2dbad4d6ac53dc881f66bd4910d4fa926404c021cb19d089aee33c2e8ff7e7800c970ad469175f7b0c20fe6507e1a0fde6ac8adbb298e55ff228132c01a81b", 0xe9}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="7e6c29056ed91c2ae106b98fa71ddfcfadf78b5ec7b68e06877407d88a1f37bf69436d68c6e633fb1d067877087ff96e6929e6a40d7690f911ef2ee376b76496dda0e666f6b278355c50d45d79694bc4ed2113b9f4c2b4e07da960a407c2f34a506b2b2c5bd8207f9fac5ae677496c1b0cae4963852125d6d1aeb8674adffe7e61c8297f1b8bcbd86b0bb05511a7a3ba59e9996e24a030742dd9", 0x9a}, {&(0x7f0000000040)="5324b61463353807a8fa444b18213550b7538743461fb944d6784df586eb327d990a5407a0d3aee6dd306fbed5ae7e82cc5433634e5360d5d6ce04bf895cc8781a4c380187865d88a59ef75ce5c205", 0x4f}, {&(0x7f0000000200)="fe", 0x1}, {&(0x7f00000025c0)="478eb8753f66fb9946c1b6ae3b54a1288cd7307770c776f9f398d43405742f005b6e9e2efef18daa151fba715d819da2568ffa284e85ca075299894e5b5b69d1fde6bd1c465fef8421883c52e4d3a7368cbb60fc2ebac2a5386ffefba9e1cb46a960a4b3d09bc4b1a48272f1b85fc5b2e78280efd2341362ec5923881ef31ca17dfd4b06f0c493d79afca769a21ff42e8c178af1e8eff75eac4cf30422ee32dc30bf8b19ae6d619ecc528bde761d511a0b3e91ce3b879dd59645e07dcf69bf32f3a3971d63f74f2638c6d0", 0xcb}], 0xa, 0xe) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x100000001, 0x105000) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:48:06 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1555.635444][ T26] audit: type=1326 audit(1570837687.201:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4558 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:07 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x23d, &(0x7f00000011c0)}}], 0x249, 0x0) 23:48:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000340)="0800b5055e0bcfe87b0071") add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000000)="14", 0x1, 0xfffffffffffffffb) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) pipe(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0) add_key(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) 23:48:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0xfffffd52}, {0x0, 0x42}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:48:07 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) pread64(r0, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:48:07 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:07 executing program 5: unshare(0x8020000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0}) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfffffffffffffffa, 0x210000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={r1, 0x80000, r2}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r3, 0x0) 23:48:07 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1555.796511][ T5095] encrypted_key: insufficient parameters specified [ 1555.798242][ T26] audit: type=1326 audit(1570837687.361:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5103 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:07 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x800fc, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8a7}, 0x0, &(0x7f0000000180)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) bind$packet(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="030400306c00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) 23:48:07 executing program 4: arch_prctl$ARCH_SET_GS(0x1001, 0x5) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) lstat(&(0x7f0000000080)='./control\x00', 0x0) lchown(&(0x7f0000000280)='./control\x00', 0x0, 0x0) r2 = getegid() setregid(0x0, r2) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x0, 0x20}) syz_open_dev$loop(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x1, 0x2, 0x0) semop(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:48:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = open(&(0x7f0000000080)='./file1\x00', 0x240000, 0xd8) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f00000000c0)={0x9, "da6794dc79b97fd74e3fcc71cfeccf4f4dd804f49488a1972f5e2421bd904fb8", 0x0, 0x3753cb783d538fb2}) r2 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r2, &(0x7f0000000100)=""/225, 0xe1, 0x0) gettid() r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x40000, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000640)) r4 = socket$caif_seqpacket(0x25, 0x5, 0x2) readv(r4, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/116, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x4f) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x335d, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f00000005c0)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) ioctl$VHOST_SET_VRING_KICK(r5, 0x335d, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000000000)={0x4, 0x101, 0x7, @remote, 'veth1_to_hsr\x00'}) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0x335d, 0x0) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000000740)=""/244) 23:48:07 executing program 5: unshare(0x8020000) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x3, 0x7}) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000100)=0x4) getuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x88000, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @dev}, &(0x7f0000000100)=0xc) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) r3 = socket(0x0, 0x3, 0x0) r4 = syz_open_procfs(0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000000e6) socket$inet(0x2, 0x4, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x100060, 0xa808) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r6, 0x0, 0xa808) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) 23:48:07 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1556.593027][ T26] audit: type=1326 audit(1570837688.161:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5103 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:08 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x23e, &(0x7f00000011c0)}}], 0x249, 0x0) 23:48:08 executing program 0: arch_prctl$ARCH_SET_GS(0x1001, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) lchown(&(0x7f0000000280)='./control\x00', 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x0, 0x20}) syz_open_dev$loop(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 23:48:08 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x8000000000) readv(r1, &(0x7f00000014c0), 0x0) 23:48:08 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 23:48:08 executing program 5: unshare(0x8020000) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x95) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x420, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/net\x00') setns(r2, 0x0) 23:48:08 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x100000001) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000200)=0x1, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 23:48:08 executing program 2: chdir(&(0x7f0000000000)='./file0\x00') r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) msgget(0x0, 0x421) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000cd00000081c65eeeddb94148996d7f23c8ac71e8a401315fe179bc843657981830e50ea5a9f7d86c93222b56dc25ee6e3886ce2dbd329bdb2343464f9745c30bbd85c7146ef33a680ff3ee0024c264bcd9e58cce7cf0597e67d47c7650563461ee0cb310f37914dec388f937529b416ab369dc0f3ab69c2ef859bb64e4b8be8945c9b92f497535058a2771ae2d8a85bd2ea8b08b489a07d1ebe52d9e8c389bd6958d49128e6a50346aca2db389ab2b777693fe99391d3a17db6752c955f6d5ab6bea86adce604ccd6d7253a357e9000000"], &(0x7f00000004c0)=0xf1) pread64(r2, &(0x7f0000000100)=""/225, 0xe1, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e20, 0x6, @local, 0x10000}}, 0x0, 0xff, 0x0, "81c154eec8e6b2110509a9fdd88d6026d1525a406e47257bc3ffc94f3d919af62bdafa41c8ca5b51fead91be0b644d835631964781a89a402938cd1e01cd191a0457a84e87ebc1f2c95c264b0e314e51"}, 0xd8) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000500)) readv(r2, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) r4 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) signalfd4(r4, &(0x7f0000000080)={0x6}, 0x8, 0x80000) 23:48:08 executing program 5: unshare(0x8020000) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x32001, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0xc00, 0x0) setns(r2, 0x76050000) 23:48:08 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:08 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000600)="0400", 0x2, 0x8002, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xe, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0x38) [ 1557.553323][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1557.553337][ T26] audit: type=1326 audit(1570837689.121:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5999 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:09 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x23f, &(0x7f00000011c0)}}], 0x249, 0x0) 23:48:09 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000300)) 23:48:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000000)=0x8, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r2, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r2, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/107, 0x6b}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:48:09 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:09 executing program 5: unshare(0x8020000) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) setns(r0, 0x0) 23:48:09 executing program 0: r0 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x16, 0x0, r1, 0x0, 0x0) 23:48:09 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) [ 1557.708180][ T26] audit: type=1326 audit(1570837689.271:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6899 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:09 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) 23:48:09 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x4) close(r0) 23:48:09 executing program 5: unshare(0x8020000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000)="2068aa58451e2e4e351e4caecbc9eb0f555c0f0c531af77667b3b11d0cd7c6612a6be245ea20d18342ad51482ff200302366951407544c89931973dc2e5a9bb94ca2a6a03066c396be04181b433b2e04476e0e6fc4674d04cd39b2f2cb5830597ec5cb092ec9d59ba7e603691f981c4a8facf76b2565fe13411356c8967701f8b6e959a63d6a77a07988a78d68859bcafa696e9ad22d3e69ca36fccb", 0x9c) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r1, 0x0) 23:48:09 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 23:48:09 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f00000002c0)=""/384, 0xffffff23) signalfd(r0, &(0x7f0000000100)={0xffffffffffff7ffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) tkill(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f00009fd000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) [ 1558.502950][ T26] audit: type=1326 audit(1570837690.071:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6899 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:10 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x200013c0, &(0x7f00000011c0)}}], 0x249, 0x0) 23:48:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) epoll_create1(0x0) 23:48:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, 0x0, &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 23:48:10 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x23, &(0x7f0000000000)=@assoc_value={r3}, 0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r3, 0x1ff}, 0x8) setns(r0, 0x0) 23:48:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff}) semget$private(0x0, 0x403, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='mem\x00\x01y7swaS.t\x00\xe3\xcb\xe5o\v\xa5\xdc\xc8\x1f\xfar\xce\xdc\nsn\xc6\xda!\xa8\x84\xefR\xffX\xfa\xea\n\xf2\xc5\x90\xe2{\xab\xa0\xbb\xfc#', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x101, 0x7ff, 0x563e, {}, 0x3f, 0x8b}) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000280)) setns(0xffffffffffffffff, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/rt_acct\x00') ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000040)) 23:48:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff}) semget$private(0x0, 0x403, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x10, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000440), 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='mem\x00\x01y7swaS.t\x00\xe3\xcb\xe5o\v\xa5\xdc\xc8\x1f\xfar\xce\xdc\nsn\xc6\xda!\xa8\x84\xefR\xffX\xfa\xea\n\xf2\xc5\x90\xe2{\xab\xa0\xbb\xfc#', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x101, 0x7ff, 0x563e, {}, 0x3f, 0x8b}) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000280)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) [ 1558.620876][ T7734] debugfs: File 'dropped' in directory 'loop0' already present! [ 1558.650839][ T7734] debugfs: File 'msg' in directory 'loop0' already present! [ 1558.664192][ T26] audit: type=1326 audit(1570837690.231:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7745 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 [ 1558.674312][ T7734] debugfs: File 'trace0' in directory 'loop0' already present! [ 1558.702772][ T7736] debugfs: File 'dropped' in directory 'loop0' already present! 23:48:10 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)) [ 1558.745392][ T7736] debugfs: File 'msg' in directory 'loop0' already present! 23:48:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)) r2 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r2, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r2, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:48:10 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r0, 0x0) [ 1558.796842][ T7736] debugfs: File 'trace0' in directory 'loop0' already present! 23:48:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0xa0) 23:48:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000003ff8)=0x4) close(r1) 23:48:10 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000100), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r0) wait4(0x0, 0x0, 0x0, &(0x7f0000000200)) [ 1559.463085][ T26] audit: type=1326 audit(1570837691.031:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7745 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:11 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x7ffff000, &(0x7f00000011c0)}}], 0x249, 0x0) 23:48:11 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000080)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/227, 0xe3}) setns(r0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x335d, 0x0) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000000)=0x8) 23:48:11 executing program 4: 23:48:11 executing program 3: 23:48:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x460ac705f87386a0) r2 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r2, &(0x7f0000000100)=""/225, 0xe1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote}}, [@mark={0xc}]}, 0x5c}}, 0x0) recvmmsg(r3, &(0x7f0000004180)=[{{&(0x7f00000002c0)=@nfc, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/112, 0x70}, {&(0x7f00000013c0)=""/233, 0xe9}], 0x3, &(0x7f0000001500)=""/194, 0xc2}, 0x4}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001600)=""/120, 0x78}, {&(0x7f0000001680)=""/137, 0x89}, {&(0x7f0000001740)=""/240, 0xf0}, {&(0x7f0000001840)=""/124, 0x7c}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002940)}, 0x4}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002980)}], 0x1, &(0x7f0000002a00)=""/79, 0x4f}, 0xd8}, {{&(0x7f0000002a80)=@hci, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002b00)=""/25, 0x19}, {&(0x7f0000002b40)=""/151, 0x97}], 0x2, &(0x7f0000002c40)=""/4096, 0x1000}, 0x10000}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000003c40)=""/81, 0x51}, {&(0x7f0000003cc0)=""/248, 0xf8}, {&(0x7f0000003dc0)=""/102, 0x66}, {&(0x7f0000003e40)=""/162, 0xa2}, {&(0x7f0000003f00)=""/19, 0x13}, {&(0x7f0000003f40)=""/70, 0x46}, {&(0x7f0000003fc0)=""/159, 0x9f}], 0x7, &(0x7f0000004100)=""/117, 0x75}, 0xffffffff}], 0x5, 0x40000000, &(0x7f00000042c0)={0x77359400}) readv(r2, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:48:11 executing program 0: 23:48:11 executing program 4: 23:48:11 executing program 0: 23:48:11 executing program 3: [ 1559.703216][ T26] audit: type=1326 audit(1570837691.271:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8941 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:11 executing program 3: 23:48:11 executing program 0: 23:48:11 executing program 4: [ 1560.495414][ T26] audit: type=1326 audit(1570837692.061:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8941 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:12 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0), 0x2}}], 0x249, 0x0) 23:48:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x400000, 0x0) r2 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) r4 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000001c0)={{0x3, 0x0, @reserved="c4aa9d7789458110042453e30e82252085b810997136af38267efe78bad5e185"}}) sendfile(r3, r4, &(0x7f0000000000), 0x7) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) readv(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/55, 0x37}], 0x2) r5 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, &(0x7f0000001300)={0x0, @frame_sync}) r6 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f00000013c0)={0x0, {0x9, 0x7}}) splice(r6, &(0x7f0000000280), r0, &(0x7f00000012c0)=0x45, 0x400, 0x4) 23:48:12 executing program 3: 23:48:12 executing program 0: 23:48:12 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) unshare(0x8020000) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) setns(r0, 0x4000000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x1000}) 23:48:12 executing program 4: 23:48:12 executing program 3: 23:48:12 executing program 0: 23:48:12 executing program 4: [ 1560.655400][ T26] audit: type=1326 audit(1570837692.221:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9265 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:12 executing program 0: 23:48:12 executing program 3: 23:48:12 executing program 4: [ 1561.449901][ T26] audit: type=1326 audit(1570837693.011:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9265 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:13 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0), 0x4}}], 0x249, 0x0) 23:48:13 executing program 0: 23:48:13 executing program 5: unshare(0x8020000) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) setns(r0, 0x0) 23:48:13 executing program 4: 23:48:13 executing program 3: 23:48:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400000, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x1, 0x489485) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f00000000c0)=[0x3, 0xf7]) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x2) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:48:13 executing program 3: 23:48:13 executing program 4: 23:48:13 executing program 0: [ 1561.602316][ T26] audit: type=1326 audit(1570837693.171:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9614 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:13 executing program 4: 23:48:13 executing program 3: 23:48:13 executing program 0: 23:48:14 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0), 0x7}}], 0x249, 0x0) 23:48:14 executing program 4: 23:48:14 executing program 3: 23:48:14 executing program 0: 23:48:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$int_out(r0, 0x2, &(0x7f0000000000)) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:48:14 executing program 5: unshare(0x8020000) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x335d, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x3c, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="5e0000000223a4f84b5ea534c3d4000014b5d7b96b01e8ae7dcec7b544c6f4bf56cd9ac688637151f4342ba5ba2c4f4d2696607ccbba5babcb8b8834dd78b839477b4735570384b5108937f350161be68b0c528b65c7adbc71db5d1811fd996ef4f65cf600"/113, @ANYRES64=r5, @ANYBLOB="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", @ANYRES64, @ANYBLOB="0663044002000000"], 0x73, 0x0, &(0x7f0000000100)="24b1fd9e9c0b698a5539b53ed444f7c1726574d0b82f3674066c6a9d029e9762ff5361b7c4d0ad78870a43f82d3ae2bad9bea056d4c0443cf6209472d90f21451d2d4e1b71d583f9e5eee661a06f5e2c23d9ecd9a33e760254e0ce357a0273ed0fcd5b6bdece8e40754231f5b3d7719016ac83"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0xd0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e630c4000000000000000000000000000634040020000000000000000000000000000000000000010000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/77], @ANYBLOB="4d0000000000000001000000000000001b00000000000000852a646600000000", @ANYRES32, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000018000000000000004000000000000000"], @ANYBLOB="09631040010000000000000000000000000000000063404000000000003d0000000000000000000000463bab31ebc2040a16bbc5ec7d980279000000100000000000000000000000dd5ecca58d362180180000000000000022ebff46f1f1f8a4d9e06f069695ad76af3d38a763f22b6d7bc6b396b67fe61fbabed52c2d7ab1226394674ccb03ff7592ec95dd5fe0fa51323f7599773cc75c40fb4952d996633784074561e2f53b81ff44c70e2965b958cab1a009a2b0fc33677a9b599e815c5674002aede94e530a8d61a97d0a", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/93], @ANYBLOB="5d00000000000000000000000000000037000000000000008561646600000000080000000000000002000000000000000300000000000000852a68770a1100"/80], @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="03630840", @ANYRES64=r5, @ANYBLOB="0b630000046304400200000005630440010000000b630000"], 0xae, 0x0, &(0x7f0000000500)="ef76833182b97b6daa291e0ffdaf17c36e4ce0104151b59bb1111def2c88061df7970c4709a67afe7d0fa6960b2d1061d7e652f64c7b17a625d09aed43a33f052020951e34bfb17b309ff2fdaeb60d2b6540f30d585445d5bf84df2857223f2c446efb66d01f05d1d761e38210b0d9412d146bd12c9e3c44309e342d0032cd71ab39612b5d8d2b1b8563d99178f6f99f2b98cf1873340d6ceed5e60aba1226032aaef1d18b04a6b38bc6af5ca2e9"}) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x3) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) write$binfmt_script(r7, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/eth0+}'}, {0x20, 'mime_typevmnet0#vmnet0,['}], 0xa, "45da7be432c8af301d275d12adca5b35327b9f1f43ba7b0257e92caac18fe7332fac59c5016b60edf5dfb6a31616a1d979feb1bedc9ec154584a004005dbe27a933ddf5a320bb4790f38dcd5640c9d4a7cc3d8101a8629fd73b358dc591d6274c936cc67728c296978c5b8762b0856294a5c0b06ec6bb258ae8a957278f23c580db40a1525ad0353957ee6689f7153518085adae0b576d73c76e539f5afd01f33f51b2cdb126e0a6d35f71b040bb5ccedd95b8e0f6aee6841bbb6a2e6e86d313dfabb40b679c7f83a140473b"}, 0xf8) ioctl$VHOST_SET_VRING_KICK(r6, 0x335d, 0x0) setns(r6, 0x968f179169ff38d4) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000600)) 23:48:14 executing program 3: 23:48:14 executing program 4: 23:48:14 executing program 0: [ 1562.569972][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1562.569985][ T26] audit: type=1326 audit(1570837694.131:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9927 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:14 executing program 4: 23:48:14 executing program 0: 23:48:14 executing program 3: [ 1563.366578][ T26] audit: type=1326 audit(1570837694.931:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9927 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:15 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0), 0x9}}], 0x249, 0x0) 23:48:15 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/devY:\x81\x00\x00\x00\x00\x04\x00', 0x8ea8b75121c0b250, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x9, 0x100}) 23:48:15 executing program 4: 23:48:15 executing program 0: 23:48:15 executing program 3: 23:48:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x335d, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x36236e6ed0b15a09, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8200260}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0xdcbe2d2a46d18941}, 0x4000) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000000)={0x1, 0x1000, 0x1, 0x101, 0xd068f16bd38bc8, 0xb}) r6 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r6, &(0x7f0000000100)=""/225, 0x24e, 0x0) readv(r6, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:48:15 executing program 0: 23:48:15 executing program 3: 23:48:15 executing program 4: [ 1563.508227][T10252] Enabling not permitted [ 1563.518329][ T26] audit: type=1326 audit(1570837695.081:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 [ 1563.540663][T10252] Enabling of bearer rejected, failed to enable media 23:48:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/150, 0x96}], 0x1, 0x7e) 23:48:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x5}}) 23:48:15 executing program 5: unshare(0x40000100) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) [ 1564.318385][ T26] audit: type=1326 audit(1570837695.881:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:15 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0), 0xe}}], 0x249, 0x0) 23:48:15 executing program 4: mknod(0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) gettid() r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/exec\x00', 0x2, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 23:48:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000050000000c00b5000000000000000000"], 0x5c}}, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@in={0x2, 0x4e20, @multicast2}, 0x80}, 0x40011) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r2, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r2, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:48:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) r1 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getuid() r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbcq\x9a\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98q\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00', 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0xfffffe38) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x660c, 0x0) write(r2, &(0x7f0000000200)="dc99e63b6e5e875524d4735ea048b16a00d7e9fd992c37772d643cb5db08c7274a9b9d7e647129fe3fdb8460abcf08c0c879294ed32024202cb57c080e8e41c9035f0429272763b59b5eda96561da1ccde62e07968b1616dbcf2a1a1eb1faa1a2c65ae829e471c56ac72b22f7dc27fa7db2679ffabdc8814eeaef390775fe1d2005558bad73e01cc3d48efb2652bdd9910080a389cba0c587b8c555afcc2bdf44b1e0470cc38bf7bdd8eb2e6139a52fde9", 0xb1) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x5, 0x4, 0xa000}, 0x4) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) 23:48:15 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)='selinux.\x00', r2) keyctl$revoke(0x3, r2) 23:48:15 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x214000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="60f100cdbc6402ed689c4ed92edc9938a2aa19d85d6831c05174ebb590f0a6f3344ac3abdbf0bc59fdb9ce9901187467cef0ec553b8166799aadb41bd3", @ANYRES16=r2, @ANYBLOB="210625bd7000fbdbdf25010000000000000007410000004c00180000000965746800"/98], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x2000a040) setns(r0, 0x0) [ 1564.486793][ T26] audit: type=1326 audit(1570837696.051:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10908 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x200002a6}], 0x2) 23:48:16 executing program 5: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@empty, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={@loopback, 0x35, r2}) 23:48:16 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="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"], 0x184}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x14, r3, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r4 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r4, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r4, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:48:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x20000266}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) [ 1564.735092][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 23:48:16 executing program 5: unshare(0x8020000) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000040)={{0x6, 0xff, 0x4, 0x6, 0x8, 0x40}, 0x3ff}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000000)={0x2}) setns(r0, 0x0) [ 1565.282234][ T26] audit: type=1326 audit(1570837696.851:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10908 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 23:48:16 executing program 1: seccomp(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0), 0x2b}}], 0x249, 0x0) 23:48:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x20000266}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) 23:48:16 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b75a000000000400000000000000014100000014001700000002000000006574683a6c6f0000467fd2fa778517e3e11756ab98244981807f47edc6a4162261ccec3a6155d7b1ddcb5e2f8fac67f98e88d0a9f60b019801ec3566e1ecea0d78b117070baaa463a0293e4972e637936820100560a6a8ef96c24a8b44da327a406cb805d3e42d98714a677542af97fc0062fdb172264ef394713bab53a773fcc78474526b8684978ad6cbb5e0a5eb508752bbbbbb"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001040)={@dev}, &(0x7f0000001080)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000150001000000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000c300)={0xfffffffffffffffe, 0x0, &(0x7f000000c2c0)={0x0}}, 0x2000040) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x335d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 23:48:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x200002a6}], 0x2) 23:48:16 executing program 5: unshare(0x8020000) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/ipc\x00') setns(r1, 0x0) 23:48:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800710400000000000000") r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) pread64(r1, &(0x7f0000000100)=""/225, 0xe1, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/38, 0x26}], 0x2) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x2) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x335d, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000002c0), 0x4) [ 1565.419248][T11833] ------------[ cut here ]------------ [ 1565.425095][T11833] WARNING: CPU: 1 PID: 11833 at drivers/media/common/videobuf2/videobuf2-core.c:1882 __vb2_queue_cancel+0x8b6/0xc80 [ 1565.437247][T11833] Kernel panic - not syncing: panic_on_warn set ... [ 1565.443848][T11833] CPU: 1 PID: 11833 Comm: syz-executor.2 Not tainted 5.4.0-rc2+ #0 [ 1565.451740][T11833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1565.461797][T11833] Call Trace: [ 1565.465080][T11833] dump_stack+0x172/0x1f0 [ 1565.469451][T11833] ? __vb2_queue_cancel+0x840/0xc80 [ 1565.474641][T11833] panic+0x2e3/0x75c [ 1565.478522][T11833] ? add_taint.cold+0x16/0x16 [ 1565.483183][T11833] ? printk+0xba/0xed [ 1565.487189][T11833] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1565.492629][T11833] ? __warn.cold+0x14/0x35 [ 1565.497031][T11833] ? __warn+0xd9/0x1d0 [ 1565.501115][T11833] ? __vb2_queue_cancel+0x8b6/0xc80 [ 1565.506321][T11833] __warn.cold+0x2f/0x35 [ 1565.510571][T11833] ? report_bug.cold+0x63/0xad [ 1565.515346][T11833] ? __vb2_queue_cancel+0x8b6/0xc80 [ 1565.520553][T11833] report_bug+0x289/0x300 [ 1565.524895][T11833] do_error_trap+0x11b/0x200 [ 1565.529506][T11833] do_invalid_op+0x37/0x50 [ 1565.533930][T11833] ? __vb2_queue_cancel+0x8b6/0xc80 [ 1565.539129][T11833] invalid_op+0x23/0x30 [ 1565.543270][T11833] RIP: 0010:__vb2_queue_cancel+0x8b6/0xc80 [ 1565.549053][T11833] Code: 1e fb ff ff 48 89 df e8 78 92 da fc e9 11 fb ff ff e8 9e 37 9f fc 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8a 37 9f fc <0f> 0b 48 8b 45 d0 48 05 28 02 00 00 48 89 c2 48 89 45 88 48 b8 00 [ 1565.568658][T11833] RSP: 0018:ffff88809eebfc18 EFLAGS: 00010293 [ 1565.574711][T11833] RAX: ffff888099e6e280 RBX: 0000000000000001 RCX: ffffffff84d3d2de [ 1565.582778][T11833] RDX: 0000000000000000 RSI: ffffffff84d3da76 RDI: 0000000000000005 [ 1565.590746][T11833] RBP: ffff88809eebfc90 R08: ffff888099e6e280 R09: ffffed1043044e88 [ 1565.598699][T11833] R10: ffffed1043044e87 R11: ffff88821822743f R12: ffff88821822743c [ 1565.606670][T11833] R13: ffff8882182274d0 R14: ffff8882182271f8 R15: ffff8882182213f0 [ 1565.614654][T11833] ? __vb2_queue_cancel+0x11e/0xc80 [ 1565.619847][T11833] ? __vb2_queue_cancel+0x8b6/0xc80 [ 1565.625029][T11833] ? __vb2_queue_cancel+0x8b6/0xc80 [ 1565.630211][T11833] ? refcount_dec_and_test_checked+0x1b/0x20 [ 1565.636188][T11833] vb2_core_streamoff+0x60/0x150 [ 1565.641116][T11833] __vb2_cleanup_fileio+0x78/0x170 [ 1565.646222][T11833] vb2_core_queue_release+0x20/0x80 [ 1565.651398][T11833] _vb2_fop_release+0x1cf/0x2a0 [ 1565.656232][T11833] vb2_fop_release+0x75/0xc0 [ 1565.660818][T11833] vivid_fop_release+0x18e/0x450 [ 1565.665733][T11833] ? vivid_req_validate+0xc0/0xc0 [ 1565.670739][T11833] v4l2_release+0x21f/0x390 [ 1565.675224][T11833] __fput+0x2ff/0x890 [ 1565.679195][T11833] ? dev_debug_store+0x110/0x110 [ 1565.684116][T11833] ____fput+0x16/0x20 [ 1565.688102][T11833] task_work_run+0x145/0x1c0 [ 1565.692680][T11833] exit_to_usermode_loop+0x316/0x380 [ 1565.697962][T11833] do_syscall_64+0x65f/0x760 [ 1565.702535][T11833] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1565.708403][T11833] RIP: 0033:0x413741 [ 1565.712280][T11833] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1565.731867][T11833] RSP: 002b:0000000000a6fbf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1565.740281][T11833] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000413741 [ 1565.748259][T11833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1565.756213][T11833] RBP: 0000000000000001 R08: 00000000011d6d87 R09: 00000000011d6d8b [ 1565.764182][T11833] R10: 0000000000a6fcd0 R11: 0000000000000293 R12: 000000000075bf20 [ 1565.772138][T11833] R13: 000000000017e2dd R14: 00000000007608c0 R15: 000000000075bf2c [ 1565.781853][T11833] Kernel Offset: disabled [ 1565.786342][T11833] Rebooting in 86400 seconds..