T={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x368, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x54, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x42, 0x1, "ee1cd60887597ae9c11ce4931112781bbdbea25ccf4ec1607d297e930b2307c2c0360d939e15932cde77a68608a83f35bc36b9dc0bcc48288d95b2c814c1"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x2f8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "9f486a7c44e8a04f0b858d11ed2f8f88309bcb294d99"}, @NFTA_DATA_VALUE={0x81, 0x1, "cc424d134c87d685de444398bf3572ca4df8a5ae54186e15324cd36cd294c3cdb05afd9c31a711635ee874728854db8135da6bcf718d6b5afdfab59007f5297e13d3fea2f0a0e03757f463e51b85af12af7a9badcd1587905a87f0e13f1b9946dcb21dba11476f4eda1c80c1e76c9477c8263eb605a21e48aae7911a08"}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x3d, 0x1, "7e47aa22538a40cfa50e696337d85396a775d04b029a20a791e469418d87fff9f6b940ad67e0410c2c35fc7690ee490b377c339a2b68b83cde"}, @NFTA_DATA_VALUE={0xc3, 0x1, "4bb7580173f7ac01c88a6baf61674aae458c93fde32a249b9576702d24b5663181f101aecb19b4fd45fb07160db7736265ed0a89c5260284b9e918749df7a536c0aa33a21450d03d50b248a836da104a826f3a95215e37c6c3f969b10ef6f9741fcaaa6f95177e02dc895cadbd482aaae0b1a5a7453aeffd21e5cdc935cfa19b02802b6ae70e4c7348b7f000160e684286354930fe4d4925e9fc7095a40dfdedcd3c2aac04ca8dca1f36f9fafe2d10c57b9416115629be582b2d921894ab5f"}]}]}, {0x286c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_ELEM_USERDATA={0x65, 0x6, 0x1, 0x0, "6e2486ac572b24747f48a271c3f592326f2e9870b8221f462fa547a4de4b5bb5c4d568d06b2f1a8b863c4e54b66c85962cb40d3f80b0bf68ee0b5b7fd4e8d86f33c08200e4c00411b1522a1ff071f9117ea03a61807737c4c8b8555a1ee80e1bc1"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x13e4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf4, 0x1, "c178da771574fa8739d635483469323185499588f8f13442c3cd90bef1e7903e60a213e95b5de132e44c613a68e4acecd67161b36057e966d10de9224d3f13172bc454d0c63e6deaac5c5d8c2cbaab989c36123a37b1dc500098a3e3b8b3269ec70fa253f3c746aeb082af9c8236a6799529f83c6b1189dce575d11c800f023ecdd7e2a74f15325929012753853d84464bee2f111a497e200947a152257feded7eb93a1eb4338100de5c8adb03042e81d06f4e279f74a67967c6c2a36aff138a63de9382c227ee7a80653658b5696a0d392fc99fdd4bdfdbcd2889a229f63b63af0365916a47f8dc6548fa9ff03b7393"}, @NFTA_DATA_VALUE={0xc6, 0x1, "04bfc4c2ae0e9bcb50ef5dce5eadf5d61604f432a893442a2d23a8fd57528f81be9c46848d8e4aa860df334ed4013859587ff0095924bbd411b4daf518831780134763653e63e833fe60e91c6c69ca6d0e5dc937fbf3ab1365159be5ad6d45643513206c07912f400a7cd6ece95be36d8bec9b8207de79da125e658b090b0402bd4023cf4c590b184d247b72b354e92959b387c62776c3c549f13ceebcb07085e5d3f52c8153bd6c4cd0ba93a620123058e6628f7deb8323cd371368b5abb358407e"}, @NFTA_DATA_VALUE={0xb, 0x1, "cfbc4befa54721"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xe6, 0x1, "8e0c259b56d24dbaac9b24c5fb37ee44f0e159cd2ae42380c2bc8fdab458a98736afbdbc8ebc772507b9bd95826ee2c2c997ea41ea0934650c668c59f68114c4c69ec9dd0f619c4042865f00c9c159d8b53dd7034fe9ada7a10362762218939fb54fb8c13c6b0ad21b284a95b5e59055145799fa4f45db00b8c05d4cf64fbf926015cceedf1835cee1478cf66603278e755dc3e13feb6fe956b43cfa617290c56c75e24c17b04fb92b40f9c50918720078756469e534a18c8509b53eb8042496dc2514acd38f2bc170e875b5d7dc75b691be83efde6f913053b8ae0d6905e807ccce"}, @NFTA_DATA_VALUE={0x82, 0x1, "0672359fa9c29446b5bba972fa06f1019e481bea2e8065e6432c1158aa7a872c0fffdce7b6fff5a9c5365b3bceb0fc4ee1ff2161494283dd7402fca34b4aed6a2215e10fc7a2d663c25463f13e8f9bd4afe3bcc2c4043e5110f0375fe76370fb27afd18c6d80e4f2584861f1cb8ae101769b3bc96bd7fa89a1551a23e32a"}, @NFTA_DATA_VALUE={0x5c, 0x1, "b186c7970546b900b919d052ccbb1985094916b78733225cff0e099daec75c299ce6ad8df00e0aa304e40d6777748bb7238aac24e5c8ed44a0db32f477e4fee55a40a5de9a6dae3ba596a1581350fccdd7bef36819fb8ce5"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x11c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "f5b63c6f63d6a4d09534358baf727ded1b5b0e9ecb7e2cf893e82e54cf92cfab910d889c326b2f116b7730b1ebd0981e09274b9169bd5540193db1a969159d9cf1025e3480a607db6eb654fcfd8a0c5b8eac9dc5f19127c1f13aad4959f1c13f7252dc33c4116d4e62728a80edcfe74705c40184ded9c3d860b83521524d42e0ac9475f5da982c90c224775a1efc0c6add2469bd87bbef0a09ee560249da8f4efa4fcfb5033bdcdec2337bda8460f1a2b2c1686837307d800779db53f348bdd6462f1cd81d75f6b531886c8f71915104c76a1814b18257f19f3bf9b72b885488dc61d4a231be7db7a71f3578f01518814f"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x88, 0x1, "b08a6ed598f2ca9e51e375d749426313e2feb7a7941bf782cdbfa3b36d48e6bca504a5e6c7f947648007a6827271c769bda2a58781dde332e0b8eb3185f3c05954481b33c840e06312c19d7091e5100b66b3db4bebbc550309c7f32d8f0983723f58dcd2dc6e3dc19ca7c0abb358df070431a76beeafad5091702da7985474555b8f872c"}]}, @NFTA_SET_ELEM_KEY={0x248, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6e, 0x1, "8a7976401f366f0a0f110cd5945e92ef9d69e19f7a47143b587b382535a6229784520be917d95653f1afd3a5a7be5e90db40cae83be54388e7473d5e8831062f4c7e131886167658432e9ff792ed52a56ce3878270bd54cf2e91c14762f42585cb480c2fb109009c132c"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x96, 0x1, "9bfb50f5ccc1404131f9b5fc92ffa4c4da05a8489e1912763a6039b78dc304b2b0988ebd3c74568be24530fee1961e98ef324f517d3c8204ff043fe1b43850ca683ed192f6591bd34f1053db28ed5cb314b884362f21e9b76c4213bf36d2ccc650c04c18b2f8c6b6e1c8dd64d752a52b80e963ce1d56a59d5827533e06360480232bd90be98bb8b15b8809fce96603610545"}, @NFTA_DATA_VALUE={0xc3, 0x1, "4b695abce77a20b93d63e193ff6f5783db6cb823dedb11a9c8d2ee14428dcf309816dacafd230c761fe40bd2e8c032887d0a1da76cc5a44147610ab42bcb8fe780e4d8dd2e1ed3b1110ff801f844eda9091cb0835993f5268181e704ba507877eb5bce27325dc8831d375c45f556c8eb1fce3c64bb9ee1da422569258dbe8cde92146f8d46d463b8a7d9bd4fdcb9109544f904ed24d6a9c057b43e758536bcba0be9ebb370525e885691d8d7d25b1fb4e5b8f07167a7f8a91eb15a045b3639"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x35fc}, 0x1, 0x0, 0x0, 0x4}, 0x8804) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:42:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x600000000000000) [ 677.260602][ T29] audit: type=1800 audit(1593891737.967:341): pid=26186 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16193 res=0 19:42:18 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x149842, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="3e64c4"], 0x5) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) 19:42:18 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x400000000039604, 0x0) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000140)=""/194) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) 19:42:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x6612, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) fcntl$dupfd(r3, 0x0, r0) 19:42:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x700000000000000) 19:42:18 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0), 0x0, &(0x7f0000000900), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000100)={0xcd, &(0x7f0000000000)=""/205}) 19:42:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x800000000000000) 19:42:18 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r3, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305839, &(0x7f0000000000)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x400000000039604, 0xb) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000240)=@generic={0x2, 0x803f, 0x10001}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L+', 0x18}, 0x16, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x6612, 0x0) 19:42:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x4000000000, 0x2, &(0x7f0000002280)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000280)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0xa040e3, 0x0) pipe(0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) keyctl$session_to_parent(0x12) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x400000000039604, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0xc) dup(r0) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) bind$netlink(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0x4}, 0x4000, 0xffffffffffffffff, 0x1, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 19:42:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0xff00000000000000) 19:42:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1706255e}, 0x4030, 0x0, 0x0, 0x7, 0xfffffffffffffffe, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x140e, 0x2, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x190) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r4, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r4, 0x0, 0x80001d00c0d0) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000040)) [ 677.963313][ T29] audit: type=1800 audit(1593891738.687:342): pid=26196 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15933 res=0 19:42:18 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x400000000039604, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0xa4, 0x32, 0xd0e, 0x70bd2b, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040000}, 0x48000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b073b31000000000000000000000000000000000000000000000000000000720000000000000238000000000000000000000000000000000000002d5c9ffe3dd46ee5c44ab7d69fb0b300"/106], 0x78) ftruncate(r8, 0x2048002) sendfile(r0, r4, 0x0, 0x200fff) 19:42:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640)='/dev/bsg\x00', 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000680)=0x498b3889, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x20000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x44}}, 0x0) 19:42:18 executing program 5: perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0xa483, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 678.201190][T26249] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 678.291356][ T29] audit: type=1800 audit(1593891739.017:343): pid=26250 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16097 res=0 19:42:19 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400000000039604, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480), r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000002b80)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {r6, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r6, 0x4}}, 0x10) sendfile(r0, r3, 0x0, 0x200fff) 19:42:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:42:19 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000340)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637a41ca09ebc4df14b8b7e656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d57b7ba4167f17600b58767db91e29eb92a20f86dddfb0d7dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598b54336a99790d3b77dcda45483c1fb1194c56dfb0c5b887da27caa", 0x9c, 0x9}], 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480)='/dev/input/mice\x00', 0x30000) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4}, [{}]}, 0x78) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f00000004c0)=0x1) splice(r0, 0x0, r3, 0x0, 0x400000000039604, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40502000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x108, 0x12, 0x400, 0x70bd2c, 0x25dfdbfd, {0xa, 0xff, 0x81, 0x3, {0x4e21, 0x4e22, [0x80, 0x10000, 0x8, 0x40], [0xffffff82, 0xc, 0x7, 0x100], r8, [0x5, 0xffffffff]}, 0xff, 0xae5c}, [@INET_DIAG_REQ_BYTECODE={0xba, 0x1, "66837c66a03bcd084ccd8721ced5d60fd52b575792db896683470a536caa0aeacfaa50bb60f37da1d3889679e22ea3e1a2ace838a11f90e77b65c790e1164e6c8f6691cedb89790429502f3c9fc2a56a8ba80b22fa67be476c797c7699ace1e9091d904d6d18a1a3c9ad7fe333f7e86ca3104151ee2dba4e8360427b66d5303e408dc68091954fc700bdfeb20fed1ad971720277a70c7106f845244bcb21c9b5c422ff9955efa1ed5ae484da312d7a703df136cb9f2c"}]}, 0x108}, 0x1, 0x0, 0x0, 0x20040020}, 0x804) [ 678.425194][ T29] audit: type=1800 audit(1593891739.147:344): pid=26204 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16193 res=0 19:42:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)=0x1000) 19:42:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x5, 0xf989, "83"}]}}}}}}}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 19:42:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x5, 0x4) 19:42:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x3, 0x10b000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000440)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000000)={@none, 0x401, 0x1ff, 0x2, 0x81, 0x3f, "d17800bfc1cd65d1699632ce3858dc956c3542b19b1b58294071e9c7dfeea6f45eacd09673f09f365b37622170f74ee47263d47e700ab9b5964ff010272535d57546df6b73457bf1514335d25aeb452ac1a1a7b2b2b04e05f6b06fd56328bfc4c4628dcd94472e436c51ff7c6661ecea35677e7ea607ee6d68c90db37f01a881"}) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) [ 678.681970][T26262] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 678.702640][T26271] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 19:42:19 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d27880648c63940d0424fc6004", 0x15}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x8800, 0x0) prctl$PR_GET_KEEPCAPS(0x7) getsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl(r0, 0x8b22, &(0x7f0000000040)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x400000000039604, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x4000084) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000300)=0xfffffffffffffebb) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000080)={r6, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e22, 0x1, @mcast1, 0x5}}}, 0x84) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xfffffffffffef7ff) 19:42:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2cc09, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10480, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f00000000c0)={0x703, 0x7fff, @name="b53466befea836246e3ec4d3f43c395f4cd01f68f4fd92ef3520451dedf27524"}) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r2, 0x0, r5, 0x0, 0x400000000039604, 0x0) getpeername$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x10) fcntl$setstatus(r3, 0x4, 0x2000) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) [ 678.798671][T26262] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 678.843246][T26262] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 678.900646][T26262] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 678.919629][T26262] EXT4-fs (loop2): mount failed 19:42:20 executing program 4: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) accept4$alg(r1, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', r5}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x630, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000000040)={r9, 0x7ff, 0xc13, "fdd49c04992c19c1239d4da686cb852fd4d6bdcda45304f8529279b4ee2e5a2f4ded1eba77994689c7ab6438ec8b0560cc2773d8a5fcd2dfc205c28782ac5ec19373cb6f2c505825"}) ppoll(&(0x7f00000008c0)=[{r7}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) ioctl$RTC_UIE_ON(r8, 0x7003) 19:42:20 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d27880648c63940d0424fc6004", 0x15}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x8800, 0x0) prctl$PR_GET_KEEPCAPS(0x7) getsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl(r0, 0x8b22, &(0x7f0000000040)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x400000000039604, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x4000084) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000300)=0xfffffffffffffebb) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000080)={r6, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e22, 0x1, @mcast1, 0x5}}}, 0x84) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xfffffffffffef7ff) 19:42:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x4e20, @local}}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a00178000000000d1bd", 0x2e}], 0x1}, 0x0) [ 679.305953][T26310] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 679.338386][T26314] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 679.366271][ T29] audit: type=1800 audit(1593891740.077:345): pid=26270 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15960 res=0 19:42:20 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$KDSKBLED(r5, 0x4b65, 0x3) ftruncate(r4, 0x2008002) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x501000, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000140)={'security\x00'}, &(0x7f00000001c0)=0x54) sendfile(r0, r4, 0x0, 0x200fff) 19:42:20 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) bind(0xffffffffffffffff, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000001ec0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRES64], 0x4) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x2, @any, 0x81}, 0xe) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000001b80), &(0x7f0000001bc0)=0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000001c40)) recvmmsg(r0, &(0x7f0000001a80)=[{{&(0x7f0000000280)=@ax25={{0x3, @null}, [@remote, @null, @bcast, @bcast, @remote, @rose, @null, @netrom]}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/210, 0xdf}, {&(0x7f00000004c0)=""/172, 0xfffffffffffffd1f}], 0x3}, 0xffffffff}, {{&(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000640)=[{&(0x7f0000001e00)=""/144, 0x79}, {&(0x7f00000006c0)=""/134, 0x86}], 0x2, &(0x7f00000007c0)=""/75, 0x4b}, 0x3ff}, {{&(0x7f0000000840)=@x25={0x9, @remote}, 0x80, &(0x7f0000000580)=[{&(0x7f00000008c0)=""/124, 0x7c}, {&(0x7f0000001f40)=""/122, 0x83}, {&(0x7f0000000a00)=""/4089, 0xff9}], 0x3, &(0x7f0000001a40)=""/14, 0xf}, 0xfffffffe}], 0x40000000000001f, 0x0, &(0x7f0000001b40)={0x77359400}) openat$md(0xffffffffffffff9c, &(0x7f0000000200)='/dev/md0\x00', 0x4a000, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000001c00), &(0x7f0000001dc0)=0x8) readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000140)=""/187, 0xbb) sendfile(r0, r4, 0x0, 0x200fff) 19:42:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x4e20, @local}}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a00178000000000d1bd", 0x2e}], 0x1}, 0x0) [ 679.418309][T26318] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:42:20 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) dup3(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb66, 0x0, @perf_config_ext}, 0x0, 0x5, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='GPLppp1%\x00', 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000240)={0x6, 0x7, 0x4, 0x40, 0x2, {}, {0x1, 0x8, 0x0, 0x7, 0x1, 0x8, "b2078459"}, 0x0, 0x4, @offset=0x7fffffff, 0x2, 0x0, r4}) r5 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r2) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x4) keyctl$invalidate(0x15, r2) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="46ac5128da090e4899c34a28efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c1805c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f061a1b67f6c3d7605eab3b675b6c061e6ef32b7ea8847b6f84da1334d35322b94447bfaca74b152eb64cfa54cb63126c2cc662e7898e6459ed40c4566403f303d341c9c34c6049d9f8e1c2a9483f003c20e66886d0e1629f498668c202f183de294d03da07c9f5feb65bc196554a79a2f255828c1f1cf9a09654f9df849443e8d290debcc78efbdca391a348b33f18ef618011273faa1f095298dd71db08a90e177a1e9a0c771deca3b51670a26850b89d4439574328c19d9e91766dd52169e0ad5011e4acc005861b3b3146d67445e6f6c75ce4af9d8db6963887d79113613267c5bc42fb0aca828590fb291ce8836d3cd391d364efdbb7015d8ec643d83b623380c21c6ebbf774498c94e60838a45d4692bfe73aaea2bbcecb6dcec20e5aa48a950428e2372009212f2f6be608cdec5ff84108f3f3d2e42c99a6d4cd4577ec9f39a51533efe71d494ccadb66eddd4cc0e56b33eefb0ada68ae36c905a977d9042a63299d2130f4e85357b0078c31bc45b00f5ccd879a6735d85882bfddbc6f2cff4a2b976b29e5a8adc74893c748b297a660ba0f64ad8a6ac6fcf180b6a4357ad6733cb75035cd58631142bd720cf52bcd1438647cbe1058e32d33c38f1327bef3f6b1c815ab4f2d47366473ae37c65a2d1df88823dd4c326d640c50e5bddfa976f04cd034331b632cd7a8bbc838081f28f6e24ed646721cea36e56501f9085e428a6c94b7ba5431f59651f36c8f715e4547ffed53c03cc58d2d4382193625cf69c197c4eb3c3c86c291d693837ab7eb23d61d2518379f0c61acf67425afa1ff8d1fac196a7ef9f6f9b514a2028ae010d1bf10833940294c400401ec706ce366dc4c62f6c55c6985a31592360cc7e6cc30a90cae1891b4cffb882b0329457503055db6a8e3b651b3302c24e6d149e8368ee6d3bafbc417256d042b4b87cb1bf46169ad1a593da66b2c6f453180f2c51be35c431e1af07e54c1251334415135422fa81b015a7a746c1979827e3d32057d408016cdc2b641a42626bbf8b7970a5638e9e48783ff80ded5b5184b69d41e60ba9e2ff7ef3e85b4419db2b064d64f833dc2035a6cc3ea28335ad94eb5ba974d9799ce94565559e6a7636b725c4c3dc1702af3c0f3d9dc77f6d404b7c8ff2cec1b4e703451a1d2750d9a22e9f4b5e27da765d228f09bbd30088ac9dff793ec759161849cf4217f5684bff8eddd65be61d3ed2dcc7bae8ab5e1260c3a90cdb37626c4871098802b34f271d8a091b0517bd1588b43cf21b2e3fe676e34d115a56d450d50a97ac7e2ea5904f9695dbde822dba41ac3a1190d63ef486a1829d38b005f9458a82533a555a2f674eea95af7ef7f0cf9654e0ed8d2ab722ca065fd97e6518b76a39cc1b04dc49c395f3aad5e05c76c1881f6a85fee6c6fba8340692eb0b7f3f948350e6947dac635cfef9e4ff4d3f756802cbd97e8c5845b25bc5a021d9875277f197d1bce55661e6961dd788a444962e33fa582a01d0bd61aaa22a76adf68b3169d3f0b49", 0x1001, r5) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 679.510630][T26325] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 679.562675][T26328] netlink: 'syz-executor.2': attribute type 23 has an invalid length. 19:42:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000740)='/dev/sequencer\x00', 0x101600, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0x1cd, 0x8, &(0x7f0000000040)}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ocfs2_control\x00', 0x113280, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) write$FUSE_OPEN(r3, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x0, 0x4}}, 0x20) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48010000000000008000"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', r6}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nvram\x00', 0x200000, 0x0) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f00000004c0)={0x4, 0x7, 0x7, 0x3, 0x1, "3a3590c0940157fe276abebbffa3d997f0b748"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5805000000000000000000000000000000bd0000", @ANYRES32=0x0, @ANYBLOB="00000000f1ffffff000000000a0001006e6574656d000000280002000000000000000000000000000000000000000000000000000c0004000000000000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000002d0004002bbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03004b260b0002000f28bad84d5e96cc11080000"], 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x4008001) 19:42:20 executing program 3: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x90692, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x400000000039604, 0x0) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f00000000c0)=0xe4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000000)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r7 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r8, 0x208200) sendfile(r0, r7, 0x0, 0x800000000017) 19:42:20 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) 19:42:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x6840, 0x0) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:20 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) getsockname$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c) lgetxattr(&(0x7f0000000000)='.\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/184, 0xb8) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x50, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x40}, 0x1, 0x0, 0x0, 0x95}, 0x4008001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) getsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f00000001c0)={@initdev, @remote}, &(0x7f0000000180)=0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x4) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x100c0}, 0xc005) 19:42:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) getsockname$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) 19:42:20 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x9}, 0x0, 0x20000000000000}, 0x0, 0xfffffffffffffffc, r0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r3, 0x540e, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f0000000000)=""/3) 19:42:20 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x410202) r2 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x3c, r4, 0x90d, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x188, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x9}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3ef}, {0xc, 0x90, 0x60c}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xc0}, {0xc, 0x90, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7f}, {0xc, 0x90, 0x7ff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x9}}]}, 0x188}, 0x1, 0x0, 0x0, 0x1044}, 0x8881) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r7 = open(&(0x7f0000000040)='./file0\x00', 0x143042, 0x1a4) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) [ 680.172920][T26361] IPVS: Error joining to the multicast group [ 680.184282][ T29] audit: type=1800 audit(1593891740.908:346): pid=26355 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15964 res=0 19:42:20 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000080)=0x1) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x4a043, 0x8c) ioctl$SIOCX25SCAUSEDIAG(r5, 0x89ec, &(0x7f0000000140)={0x7, 0x6}) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) [ 680.242888][T26366] IPVS: Error joining to the multicast group 19:42:21 executing program 2: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x4b0200, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={0x0, 0xfffffffe}, &(0x7f00000001c0)=0x8) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[0x1]}) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c2634927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 19:42:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6}, [{}]}, 0x78) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000140)={0x980000, 0x4, 0xd1, r3, 0x0, &(0x7f0000000100)={0x990a64, 0xfff, [], @p_u32=&(0x7f00000000c0)=0x8001}}) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000200)={0x44, 0x80, 0x9}) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=r6) 19:42:21 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x0, 0x7, &(0x7f0000000000)='/].\\!\'\x00'}, 0x30) sched_getaffinity(r3, 0x8, &(0x7f0000000080)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r4}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) [ 680.663915][ T29] audit: type=1800 audit(1593891741.388:347): pid=26346 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16097 res=0 19:42:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000100)=0x4500008) 19:42:21 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b5b073b310000000000000000000000000000000000000000000000000000007200000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000476d697983c7b9b40753310753b5115f6fa58b963efd15f78cd3f7dc589e3eff06c4f3c99368959b55fd3e12d544bf0c0999b2f16016b24c240c73e7b40000000000"], 0x78) write$binfmt_elf64(r2, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x80, 0xd6, 0x80, 0x7fff, 0x3, 0x691d7a49d61113e8, 0x40, 0x373, 0x40, 0x163, 0x9a6f, 0x8, 0x38, 0x2, 0x20, 0xfff8, 0x6}, [{0x4, 0x3f, 0x43, 0x7d4018c1, 0x7, 0xabef, 0x6, 0x8001}], "589622fd3e34680ecd392375e41adb749955fdef5010397385281c861f9566214abf371b6c580c97fd8695b20c2e8f35b184397a2c2489f8e4d4f7a7877a468fea2956410b43d7e6e25262ae23986314e4a5d256f267400f6692b74730792e521041ee2e7f10b06d9f98714c294d6b0d20681eaa2f87e71648477d005b5a283118f3f3dcf3fcc8962ebf0502c0ed4a30c6dee38d4745c5d900f5a47ffdfecd288da4a607e00445d15bc0b8ca87482b60bf85c96e15da8ed662013c661243603d0537fd01a2a8d08a4893af37391acd65", [[], [], [], [], [], [], [], []]}, 0x948) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) [ 680.821570][ T29] audit: type=1800 audit(1593891741.548:348): pid=26368 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="sda1" ino=15974 res=0 19:42:21 executing program 1: r0 = socket$inet6(0xa, 0x80000, 0x20000) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000080)=[0x80000000, 0x7, 0x1, 0x7], 0x4, 0x80400, r7}) r8 = accept4$alg(r6, 0x0, 0x0, 0x0) splice(r5, 0x0, r8, 0x0, 0x400000000039604, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @empty, 0xfff}, 0x1c) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:42:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) accept4$alg(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='team0\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x1, 0x81, 0x6}) splice(r2, 0x0, r4, 0x0, 0x400000000039604, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000040)=ANY=[], 0x4) accept$alg(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x28, r7, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000001200)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x99}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x4000) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000200)) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:42:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01ca0f01c966b8020000000f23d00f21f866352000000d0f23f8260f090f20d8080000000f22d8260f09dd3e64f6e10f20c06635000000402280", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x140d, 0x8, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x40000) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) ioctl$CAPI_CLR_FLAGS(r3, 0x80044325, &(0x7f0000000040)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udplite(0x2, 0x2, 0x88) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r4) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="3ff0ffffff000000000001000000000000000c4100000014001462726f6164636173742d6c69"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) 19:42:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r3 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, r2, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) syz_open_procfs(r3, &(0x7f0000000000)='net/if_inet6\x00') setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="2865a10600000200", 0x8) socket$alg(0x26, 0x5, 0x0) [ 681.467211][ T29] audit: type=1800 audit(1593891742.188:349): pid=26393 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15980 res=0 [ 681.517521][T26476] kvm: emulating exchange as write 19:42:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x90840, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000100)={0x40}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x4) write$P9_RLOPEN(r2, &(0x7f0000000500)={0x18, 0xd, 0x1, {{0x40, 0x4, 0x4}, 0x4}}, 0x18) read(r5, &(0x7f0000000440)=""/135, 0x87) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000280)=""/36, 0x24}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000300)=""/96, 0x60}], 0x7}, 0x100) r7 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r1, 0x0, r7, 0x0, 0x400000000039604, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x8, 0x4) ppoll(&(0x7f00000008c0)=[{r0, 0x8000}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:22 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x2}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x353040, 0x19c) ftruncate(r4, 0x2008002) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x400000000039604, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000402cb000000000000010000000500070000000000080009000008000a000000000008001700", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team0\x00'}]}, 0x44}}, 0x8000) getsockname(r7, &(0x7f0000000040)=@tipc, &(0x7f0000000140)=0x80) sendfile(r0, r4, 0x0, 0x200fff) [ 681.957791][ T29] audit: type=1800 audit(1593891742.678:350): pid=26456 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16066 res=0 19:42:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x99, 0x440002) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x20, 0x5, 0x2}, 0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='ns\x00') getpid() ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x602, 0x0) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f00000000c0)={0x2, 0xffffffff, 0x4}) [ 682.157727][T26469] debugfs: Directory '26469-4' with parent 'kvm' already present! 19:42:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x90840, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000100)={0x40}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x4) write$P9_RLOPEN(r2, &(0x7f0000000500)={0x18, 0xd, 0x1, {{0x40, 0x4, 0x4}, 0x4}}, 0x18) read(r5, &(0x7f0000000440)=""/135, 0x87) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000280)=""/36, 0x24}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000300)=""/96, 0x60}], 0x7}, 0x100) r7 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r1, 0x0, r7, 0x0, 0x400000000039604, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x8, 0x4) ppoll(&(0x7f00000008c0)=[{r0, 0x8000}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x402b00, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r4, 0xd, 0x0) shmctl$SHM_UNLOCK(r4, 0xc) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyprintk\x00', 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:dlm_control_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x3e}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008850}, 0x20) 19:42:24 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r2, 0x0, r5, 0x0, 0x400000000039604, 0x0) r6 = accept4$netrom(r3, &(0x7f0000000240)={{0x3, @netrom}, [@null, @default, @netrom, @bcast, @null, @rose, @remote, @rose]}, &(0x7f0000001680)=0x48, 0x100800) bind(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x2, 0x1, 0x1, {0xa, 0x4e23, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xce7}}}, 0x80) r7 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000016c0)='./bus\x00', 0x1, 0x6, &(0x7f0000001500)=[{&(0x7f0000002040)="691c362189d825f72b193870cead0a2e3fdfe3b3d8004b23bbf72223b162aad16f8c17a5a73ae477866217eff543daafec163852114f9db787ce39483a0942704ccea10a2538c01165f3b97ecb20a1e08855f68e0bb3ce48cc052222b303d813a7b18dbaa81f2ea1841ee12256888da4e6a8b6866e6a620e7826c2ba9f30aebc58cebbe1e9b86ad697b6c9d41cc334b674ff5bf2549be5e5ea299eb04beef0392661cfe40417906e36cceb46e499a891c00ff380380d23c900f1bd18cf473c693008113bc6b939ba6db9681bcfe4e74df6d56809d67d15c24ce81285e14c677c31895f6bff770c3bdfad2fd838c939da95c1d8917f8fdb78e7b96b31e9ccf1ed38f1a1abc47cc043ef69656672be77f53130c31e852a7311def265e2e5754874524c0300075c26a01b14bede6c9cbb82eceeb57eaaa7dd22ba98460e1735197e915cb4ce9f45327137796fddd05be1af425040b25e5957e7dcf4fb71a3887190f71389124bc8824b6f2f229f56389887f68e9c4faae9f9e8b8e24ba778307c9735d507bdd32475fc85d2e7d7bf5b4785aa06090dd48c565ec456ab118410fb04d6ab97aa40d146770ebe2d6ae4334b97c648d1e20b4914e528c43825c90fb5a8fb1f85f841fd8ea817da754f49f2eef790ef564c7d6fb93c940c4cac2f1963e604ac5bec79cec673ac20a5bbc6ad62d2d36a3fc32e2e22f85c5d543c28cc0d69ebf520f1cd701fb2b8e29d2e9f94e91be91fc0ee2dd5f6e05081e49cab2e878a6a52884336d77df7e26c8c4845ed0265737cb3b59735e076bebd60fc4f466047c4171da1f441b0bc800b29627c6b25ba1073b6c728036af464be052ac302c34bcc7871c98b845082011464ca1eadb7b16fdac6611297ec3e429153d302000a08130e34438a8e617f4acfd241ea52e069ae6e28180d71dbfccbbf1b22e001cc94534b112e45959dbc527dd5773125f08459bc46f348530279023aeb980309e68fae57b49b51b1a6f463a30b07ceda95147ff8ae47c54bd04005e84651f25ee1697063cfd8e6609fb0875eb4b09c4ad0f0a9b7e78834a24e43dabe9c58c448a439d6d15dcd78df7558fff13920a376fb6c75dcfe1a24fa5b87a7669063a86f80ca0820ac2cb83399b99cb381937b7e60d25c5ec14b9acae0f4f16d95ad6a34efd3e7b22ca371bf24ee9698c58920f5089da89d30d0b99775ec3c132e6d585dacb21e7a44e9465a5eca2478e93bf8f47c9097f7f3fe952e7566f64a3f67220afe73dbcebd393807520070bf6fbd83f6f6c98cdeeb67b11c1890dde97603d172c5633cc75d40e313763a9ceb7dc2b10ee493fe70889d7d79b04eee7800a3b5e897e2df866be05988429fd0371906433d82e4a2ad63fb22a37b4eb05ec02aeeea71596e7918d8a091d9b5b1546fc77d584dcf58a5cc5c470aa79e6f65796b67a6847d0bdf81ced5c26ecab5b523f54eadd105855a8deea3c51dfd6e6d488c7a58edfdd8b7558e9951fb18c6445f64d38e097a47d9f761a22470e665cbcde479802abbbed52d87be46eb85b0b71bf77f3d9f2f9615e04f9bce1d792bbf65d3f20ceb288e760d5082727a121adca81889417c6da04c503ac996db4266d0a671c6624704d3cdcf71f6789a01af3c3842cd9686b12872039daff6c5b3fdbf05d004480d146b80209b23322742f35a549bbee1e57b2b65cbc83447d17b6560ed410e7e87565d89f5d8207e8e15180d26b75425c25e44f21e571e9c1a9573d338230f574bb6282d3bc57b6d734e8f9bb1a0939d5899717cebf4d56b50f4d892563c5bd0a45ffe9e3b6a1899877d16a18a6af0c173bf2069ee9ae252f34fab22716ae89600d47f87947887a7cf048c1cc4fd27cc0993f13b5a6195682b902d453c0dab98d9dabb4cc13db29582524fd62f9cbd5fe0c96b4633e1375b91bc75596f0280b4e0ed7271d37da86016c1b20290c2a06aeb61818d67467026e9757e90b8a632ad3cd8f448b3e09e634f78f6e76321ef2634a3639419693cd66d8c6e44e9a277bd6a6d645515745dd4e45b4cc24826c60de5b5b29b51da33981e645522c8adf96a9304f66f4e11229211f6f34f9be6368b0e1e4e51888b0695e58460577548c253989e2c012c565e719c8a55e391bb1a0621d7951495ece294fe5138069f821258019560cfbcce084ba6ede05555074a4064a2cf863bb8e4c9e776f616453f5288a452468b4a482324f1c387c429b5a76a7ba381e383b71b03f680634c46b3e79825780d0a14faf26f1edce49d0db966f968328087a808485a33f2b7c941964242ddeca9ed1408a4a6254671994fbdb052b96547ff607743c55d852ffb8e0a1b8e68c418ce1c01976b3fafbaddf48c353b2784b1eba956050f49b544c3ccdda219e1f378901cd8b0285b1d448a3c69df16ec008245a4b0427b4d0f1ab1953a33b135732cbfecd34dadab3941fe3a51ef76d7345146aa18a8fed578c699c062487d8fe2ec1dc27f03a09695c1989942df4804c010309fdc4c23259a495bb39503271b8c58b5b0b81e09d6f2ab8da15d64f8d42cfa2c97f116d9c70c4dce966385d197c12cc45e5c3772dfff831cce9a6415e6e84564e369e43dba6597bfe8380df221a4d1bca8ff248e52861b14edda513f3196f5f8ffe9664364f66f3bd9698a0a5866d0bbf2c1a2d0d7499442333257b501fd559787f65a97f6d069e3033754b02639eddb77e71e12c9eaa1f4f9b6d624215a007238b269c3fb6cf5f6eba0250e16e3d073285ceb8861988b73608a3d83e24d39ac71533341e4d177b38cbd1dc0035f7256c24d10593d0011ab7436a41f12b70193065cfa36232ac9faa46dfe2b4ecc7d0427487bf876cc602abbaf887d21f2760687ff55712d05daaa3b100049b5681626a5fdb0317f715c918179a3e9ddcd28a98fe3513d6e2c14743a9bc8f8fdca9b493dba8427d0ba5be9b4ccee94f0e512b44f65f11df73f57f86590edfdb313ea72ba42db81c71048287b023e2ec9b6b866a98a9323df8a8cba97003252d59266b1c707350c30454bc44324aaeead28ec0c74d68a8a46cd60d98185bafc0848899fdfaa1b4c5b7d959398aaa2d054a81c7133a29e5e80cdfd80a8e04efc9d2f64146d2a2287a0e00a03b0529a8d41966a797b71b61e7a1861cd09a3cc1a6f8c3a4eb416fa5988556ac6703d0fd7264b5ed2cd06136edf6cfca0b58fc50de32a8e1e959ec839e6dd08be86d9a926afffb7275a2d57c4aebb902c075ec86a719a8392de3727b18e718f17131b26ec4a38aebbd6e878fe419a22f2ccb42bd95d098c147ddc91fd76af2a4fc62911a02d4f114661e6b95aa097541b4bfd4a7e76dd03d534530688b2b8d8f03b44d8f1bdc4448a4e0766001b116bfcbe7f2a5abb216c681fc89469168b172e17fcf9067ecfbffda3dde1fc197d13e228c9f541b0d9ed4b68ac49698acaea2e73e69ba1e44eac6c09c4e8d6b1f33d7dcba69cc4742564c570b7223d9aad4124c2fa208092922763fed36d867d0f1ce36c3b5df3f411525d3a1e418e680f5a95006159ce18c523c2450faef12af2396efec5ed35101426d6baec18dd588161f5568cb4e767e39dc6d0fe61c4a6dbd4f35fabe8bf098072e08345b5b85d392ef0b744e1abb8ab46f5e611790c8206241cd431db2a4bbc8e7008e741b5fe5345962971d33d905f9d93717713b42740a9cfbdc5555f6caa53388edcde302600c110cbd37a6b71ede38bd589c5338d8d6313013b8e8e5ad4eae987ff38e57178a3ec7561680727e3cbfb4c710502952a0051c9dfb354839425eeb83b48e3f4f6d11a18fcb82705b1b77467c7af175de627c28e3db05ac941a9e1c24fbf60e34eb5cfc066afe445b0e6fa1bb8800ad4667b2d8c0e5004db02c72768d924f54cf513f944ee6b34e09ecbc9d45f07162a0a1be11ec633c5a9875bc8e8dc1aba5e6216a164036d615b0a6fbf85d218a19542dd2c85b96aa500ab0a8f6909d5a5895216cbf80bf1f28601a4b0de8446f939295574faee513a6430d1bf073894835f51e16b0261edcd9559e3080175aa8e5c771b552122faf3fb26ee7eb7681e7d323139b0f9912ffe30a866eb045e24d1ae66e6a18cebb62dc96f933eec06f480c1c3fd3a53a41da4772e2828d8c7088fc1d100fd797f946a6fa1a03ac511b4f848d8dd6e7bb2c07ac67bda7f2146e26079e27182a5490b90b2c4fa96d4c32b98c291b6e27cf981d2fe949852a112f9590f6d15e460c252f6d937aa648f88e796abd7e46df18edf5580d51efccbc5d2f6e8cc4c30f91cdfacfc29fd58dae4092c87727c2f335145f75cc3b65b42b0c20e6ec756370dfdac3d5178b5660a6842f2f6718de39b584bb42c04f5251ce43e2ff6de5f790411c1944bc0a3ec2d3ba8d1350d92c8cc3f2c54079aed5177165bb53f0bb9d295f49b5bcb5b471818159c8148488ff8aea283ef4988dad5e59a06e54d3193fd57d565235edc9126f585d10454f41b9ffec619a7e40e503ff6974dea66d33d09bd5ac93a78a809527394557997a813b5fcccc52a93e075deca24ae4769bfeb9295bb5b8f388cd039eccb991bef56c1a1a9a60a1c5b863f6608c1a6b76d4c56ea70095d94d33a2226ad75fde2e10ea6fb56d8653e6b3a9fb28c7353e3e21cdce6031c8e301e5fca15cde6decfaf10d1fee76e83a65b1387e4809c7246dde13bbdd8141495b6bca70411127129bd520c061e071864be5c4c1ce137f45142fa4d90aac3c125d82150eb3915292c9a2abffd45cee5219c62eaae080e5a6e05fab61a249528096fc2f84f68197b5e23a067c34155796d746df08af6459b55eced493a023e0b8dc5ee112cebb09211d73fb795a208b3ea695815bb7c6a7fbf568f594c71bece513b686da277e99148f5483e3f6baa275e935bb00bc71e22b2f0b3fe34d8f6c0c051825e2c47e9a1e179a270e523c5ba8c389e77d598109d4881d6f74e8c5fd3d48befc42b6cfd41687a6a86aa8e8eadd4c2fb62faeeb504beb4e10b207bea43d5e00c7565c3406c9bbcc08a5898c39755acf8dfec5baf4757b220927747f3ff366b56aa5ba8ac3435d794c3b8b759e7122a4f0f49170a6b8097d3376dc870fdf29c68c0dca4c9cd9f2826683e1e891841fbf71d1cb00c0c11f9e75bb91a247ae14a9abac492113ae1e18229e96b6a8c84cd251e3b002b27e92579d874c1ee93cae52ad3fbf2393791c779d0e5934ef23891bb142d1129e089ef37b8bba6639cffaa0d4442f7243cb5cce957258c9d12d6eb29bae4b8d29ed054af1bd4340605f3b9db74c92063a06afa80acadd65c0000482b5744c64dcfee120da0c7ba89e81968c9c46d5b6914f23c9d75f614a507b8e2dc2ebac3b9e7a83bb873440458c8267dcc4ed68f442f9c66c89707ec4015d7b655eb40897288d55ba8522014f453cfe17c32cbb8f5cb36ae73c13b1d52105abcabbcb21d4e63a1812e7e34c115eebb4c4c76bcbe14ed4c8e3dce8d462eaf692d3c1b4d50f8acb0bb050d6b5badba37a1c50cea028edbbb22cae542279dcbd6f5d17e3b60055818c21d4002fe7fff4341742a2f4d7154e53c3180f67cda5352263146b532e78a798c140a7ba85474cb59e2a64e423b567ab4af34fd898c84396195bb4d51519242af82037bbbb4a78298e37822fd3330c270bb735c2aad737a61aa656a0ebcb98d5844baaeebe2e9acf9595743f4595ea62ecaa242d06e7352717d8540d8da296b8195e9e6b4e3f74320507ea6a35402dcf07af8deee2cb65c812dd716f5b1f6205065fd6ffead00665914813229fe091c36db991d0f6c5fea8b3b457be6b7e5000cf7ad449cb2fd8c299d53302dc9b3a2a31b40e29cc1b36aaf14996f4d69e6bf69b814fb079a6807518b8ead6483e15304bba5dc", 0x104a, 0xffffffff}, {&(0x7f0000001140)="818b6d5951cbdc553d4c0da6c14e9bf1269b4a81d628af5eb7de0c08d80cc26fe9b1b7af476472c3d3a12e9a5d497789038f76a2a1de8dbc948270465da62ff203663080b2679a49e68ddbb4412c3626d3362ca02d26e7953a30ac86d5f85ce5922a9350be4239b8f2ebb9739f496779ccefbae70eeb7e0086b2a0f4532805c1956fc276ff575a4e4d4f620f684e22046eced31c594e5f8c3273c4d96c6ee5483874a7b61e784d251d553b4930344bbe7858a434a658a3464e800629294efddd1a7b670d87696cd5e2323ce8969eff", 0xcf}, {&(0x7f0000001240)="641590f654d8bb7684c7b9e26cda3536784224568b0b4e2ce4f41f7037f6f7f879951cf1a0fc12d4cbe5b74991b058487ff91a660e189347ffcee8e95532c7ac34f0477aea839cd6f3a3a90978793c9ae29607f296804cdd648a95667d0585d6a8a1603a6ac5a14a898c60b9e461e22b501591ef10c366729b82c1e4", 0x7c, 0x5}, {&(0x7f00000012c0)="95019df05e7e468190e1e8524a754b37bc5e2aba960d4aa1df76090c7c56260581288700e57716e3f92bd5345ee42bb042b7ad5faed5c0f83735ce6101e635096f1a475290ecedda64a05257ba53b8a4f59104db6aeee58c79e9d2e66ceaa10b5987bc3fac0e9e109f8aeaead83f2ec0da9511a4d2a271a8745e0e5bc9a4c350", 0x80, 0xfff}, {&(0x7f0000001340)="b41c0311cdf7573f795754772a2b4951c6e4fc336aa9049511ff6879d9576e801b9d6106b4332274355baafeb6b591b0a2e9f34da1de9f4830b15a63b673205967da73a0875e5cc810d46951b9ebe6c959f61fe0eee472f76d8e5e3b091be71794541b7a889fc2b09f67359ff78af2bace66930c56a41709ba9e394b411c0e2f3e352d28bf9ab28e3bc3eb8b50a5e2cc12b81101a82c2a44c437377d06f7fb588ebe6d7f4029c8331b86d1776e7aa5599bccb4c21b7893218815548fa1d92728b7e736fc4bcdc3e5235b7489b6c023", 0xcf, 0x9}, {&(0x7f0000001440)="e9507c66fd3750810f1fcaa7142024dd8dc4cc2605a626db8dcb8798d668d9c6e060cee839a99338e16beb5d65b518f113b2a76661071443f87aeb0d6a639d006b1c18e5c63abf63a0f108e55d4a5888ff40df4133b33752b012b5c1f6054c02b4299d5fa9a8dcd131f8be2a526022842d7d2fb6fa00d02392810f2756d8b51754b0a0cc4aee1973ce53a48e2d98", 0x8e, 0x2c}], 0x802000, &(0x7f0000000180)=ANY=[@ANYBLOB="75a0c933fc7466383d312c636f64657061676501000000a20000ed50c63a406637342c6e6f6e756d7461696c3d302c73686f72746e616d2b52653de5746578743d73746162665f750000000000000000000000000000a9098a927cdedf5985f285e16c2e65b09e6ed85b128bd6e8820fadc887fbb3abf69541afde529abfd78a582de74d5181f667e4394c09a994b42c7dd2ebcdff2bc0768e12e60ba2d0b36b48b3650e7bd8c00fc78d502efe5f91cd7b2d00"/189]) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r9 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r9, 0x2008002) sendfile(r0, r9, 0x0, 0x200fff) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000001780)=""/241) 19:42:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x90840, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000100)={0x40}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x4) write$P9_RLOPEN(r2, &(0x7f0000000500)={0x18, 0xd, 0x1, {{0x40, 0x4, 0x4}, 0x4}}, 0x18) read(r5, &(0x7f0000000440)=""/135, 0x87) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000280)=""/36, 0x24}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000300)=""/96, 0x60}], 0x7}, 0x100) r7 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r1, 0x0, r7, 0x0, 0x400000000039604, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x8, 0x4) ppoll(&(0x7f00000008c0)=[{r0, 0x8000}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) [ 683.659019][ T29] audit: type=1800 audit(1593891744.378:351): pid=26492 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15991 res=0 19:42:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x99, 0x440002) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x20, 0x5, 0x2}, 0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='ns\x00') getpid() ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x602, 0x0) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f00000000c0)={0x2, 0xffffffff, 0x4}) 19:42:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x400000000039604, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r6, 0x0, 0x400000000039604, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000000)) 19:42:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpid() pidfd_open(r1, 0x0) memfd_create(&(0x7f0000000200)='\xaaA\xe1\xdc\x84\x9f\xf5$\xcd\xb5\xe0\aV\x9e\xb2\xde\xa5b\x1d\xaaI\n\xfa\n\x8a\xd632\x86\xc0\xbb\x8eZ\x02\xaeB\x9d\xd7\xef\x10B\x95L\xa9\x87\x04\x00\n\xb09:\f\xc7!$2\x85\t$\x128\xa4-\x7f\x90\xe0(US\x00\xd9l\xe3\x88u0\xb5\xa9&\xdd#C\x152ME\xd8\xcd\xff\x92\x18\xeaOQ\x96\xcd\x92\xc8\xb0\xf4\xbd=\xdd\xccp\vE\xe3_\xb1 \xbf\x8b\xe8\x15\xc5\x10\xa9\xa7\f\x91r\xc8\xa1\xbd\x9d\x1b\x90L\x11D]\xac\xaa\xf1c\xc8fz,\x13\x89*VcZ#P\xcf\xa2WT\xa7P\xa6\\\x86*\xe0/\x8fz\xf6\xa0\xce1\x9f\xd0\xfda\xef\xb5\x19\xd9 \xd6\xf2\xaeA\x06\xd6\xbf\xbb\x92\xee??\x99c', 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8000) splice(r3, 0x0, r5, 0x0, 0x400000000039604, 0x0) shutdown(r3, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xc8, 0x2, 0xde, 0x1f, 0x0, 0x6, 0x400, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x40, 0xc0, 0xffff, 0x0, 0x6, 0x40, 0x2}, r1, 0x7, r2, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:42:25 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180033010000000db2ca004e0000000000d461000000000000eb61438e40"], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x110, 0xc}], 0x10}}], 0x2, 0x0) 19:42:25 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x4) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048044}, 0xc0) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f00000001c0)=0x8) 19:42:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x90840, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000100)={0x40}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x4) write$P9_RLOPEN(r2, &(0x7f0000000500)={0x18, 0xd, 0x1, {{0x40, 0x4, 0x4}, 0x4}}, 0x18) read(r5, &(0x7f0000000440)=""/135, 0x87) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000280)=""/36, 0x24}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000300)=""/96, 0x60}], 0x7}, 0x100) r7 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r1, 0x0, r7, 0x0, 0x400000000039604, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x8, 0x4) ppoll(&(0x7f00000008c0)=[{r0, 0x8000}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:25 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x2, 0x1}, 0x10) r3 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000580)={0x0, @reserved}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f0000000100)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') r6 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x1, 0x8200) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, [], [{0x7, 0x101, 0x9, 0x80000000, 0xffffffff, 0x4}, {0x6, 0xfffffffe, 0x2364000000000, 0x0, 0x0, 0x9}], [[], [], [], [], []]}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x100, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x78) sendfile(r5, r7, 0x0, 0x10000007fffffff) 19:42:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) fsetxattr(r0, &(0x7f0000000000)=@known='security.apparmor\x00', &(0x7f0000000040)='\x00', 0x1, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x6f, 0xb3, 0xd, 0x10, 0x7fd, 0x4, 0x3921, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xeb, 0x95}}]}}]}}, 0x0) [ 684.878972][ T2494] usb 2-1: new high-speed USB device number 7 using dummy_hcd 19:42:25 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x43, 0x1, {0xa, 0x4e23, 0x101, @dev={0xfe, 0x80, [], 0xe}, 0x1}}}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x4) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0xa, 0xa, 0x0, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x35}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4000800) sendfile(r0, r4, 0x0, 0x200fff) [ 685.003528][ T29] audit: type=1800 audit(1593891745.728:352): pid=26579 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16380 res=0 [ 685.128731][ T2494] usb 2-1: Using ep0 maxpacket: 16 19:42:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0xffffffffffff65c2, 0x2, 0x2, 0x9}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x400000000039604, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x9}, @multicast2, @empty}, 0xc) ppoll(&(0x7f0000000000)=[{r0, 0x60}, {0xffffffffffffffff, 0x226}, {r0, 0x4100}], 0x3, &(0x7f0000000900)={0x0, 0x3938700}, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r5, 0x4008af14, &(0x7f0000000040)={0x1, 0x1}) 19:42:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 685.248827][ T2494] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=39.21 [ 685.257896][ T2494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:42:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x90840, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000100)={0x40}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x4) write$P9_RLOPEN(r2, &(0x7f0000000500)={0x18, 0xd, 0x1, {{0x40, 0x4, 0x4}, 0x4}}, 0x18) read(r5, &(0x7f0000000440)=""/135, 0x87) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000280)=""/36, 0x24}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000300)=""/96, 0x60}], 0x7}, 0x100) r7 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r1, 0x0, r7, 0x0, 0x400000000039604, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x8, 0x4) [ 685.301370][ T2494] usb 2-1: config 0 descriptor?? [ 685.370490][ T2494] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 685.390662][ T2494] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 19:42:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1412, 0x428, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc005) [ 685.423984][ T2494] snd-usb-audio: probe of 2-1:0.0 failed with error -22 19:42:26 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x7fffffff) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 685.500631][ T29] audit: type=1800 audit(1593891746.228:353): pid=26607 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15993 res=0 19:42:26 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) [ 685.574352][ T2494] usb 2-1: USB disconnect, device number 7 19:42:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x8000, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}]}}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x1c3d0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r5 = pidfd_getfd(r3, r4, 0x0) accept4$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14, 0x80800) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) lseek(r2, 0x5, 0x4) 19:42:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:42:26 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x400000050d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) finit_module(r2, 0x0, 0x3) ftruncate(r2, 0x2007fff) fadvise64(0xffffffffffffffff, 0x1, 0x5, 0x2) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = getpid() ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sched_setscheduler(r5, 0x5, 0x0) pipe(&(0x7f0000000000)) ioprio_set$pid(0x1, r5, 0x9) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 19:42:26 executing program 5: r0 = getpid() r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000080)={0x7, 0x79, 0x1}, 0x7) pidfd_open(r0, 0x0) r2 = getpid() pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x5, 0x0, 0x80, 0x3, 0x0, 0x1, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x3ff, 0x4}, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0xfffffff8}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r3, 0x540e, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x4) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000000)=0x3) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x78) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) 19:42:26 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000000c0)={0x4c08, 0x9, 0x9}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 19:42:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000)) 19:42:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x4000}, {r0, 0x89}, {0xffffffffffffffff, 0x1499}], 0x4, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:26 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000800)=@rc, &(0x7f0000000880)=0x80) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000008c0), &(0x7f0000000900)=0x14) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2a8) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4c22, @multicast1=0xe0000002}, {0x2, 0x0, @remote}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400b}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'ip6gretap0\x00', 0x2}, 0x18) mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xf824b000) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0xc7, 0x1, 0x0, 0x0, 0x296, 0x48a69, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000e72, 0x0, @perf_bp={&(0x7f0000000080)}, 0x4, 0x3, 0x4, 0x0, 0x0, 0x0, 0xa1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="02000000010000000000000004000000000000000800", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRESHEX, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\b', @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="b7eadc609194e099f033d869f91c01a03cf43d577fa232f5878da03fee1e29b18cd96539afeba81ba277d011934294d257", @ANYRES32=0x0, @ANYBLOB, @ANYRESHEX=r2, @ANYBLOB="10000000000000002000000000000000"], 0x74, 0x1) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f6669662f5c8800"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) creat(0x0, 0x0) io_setup(0x83, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44800) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x0, r3, 0xffc) [ 686.169674][ T29] audit: type=1800 audit(1593891746.898:354): pid=26656 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16373 res=0 19:42:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x90840, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000100)={0x40}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x4) write$P9_RLOPEN(r2, &(0x7f0000000500)={0x18, 0xd, 0x1, {{0x40, 0x4, 0x4}, 0x4}}, 0x18) read(r5, &(0x7f0000000440)=""/135, 0x87) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000280)=""/36, 0x24}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000300)=""/96, 0x60}], 0x7}, 0x100) r7 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r1, 0x0, r7, 0x0, 0x400000000039604, 0x0) 19:42:27 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x511c81, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ppoll(&(0x7f0000000080)=[{r1, 0x8090}, {r3, 0x8040}, {r2, 0x405}], 0x3, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) [ 686.300386][T26671] overlayfs: failed to resolve './fif/ˆ': -2 [ 686.329954][T26670] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gretap0, syncid = 2, id = 0 [ 686.397695][T26663] overlayfs: failed to resolve './fif/ˆ': -2 19:42:27 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000180)={0x8, 'syz0\x00'}) r1 = socket$inet(0x2, 0x6, 0xad) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2c0, 0x0) pipe(&(0x7f0000000000)) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000080)=0xffffffff) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f25", 0x1b}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001b40)="6048ce550fb3b26995c145bd0ae6da892b4244d894d14372cbc054cdbd281232cb292864f82755210be8ca8e2f8b782d3866251c259386b4f68545062ac0f3768848ce309fe0a0796f2d6d6b00781a14acf17c0a139e60b7b2c3cd78730b33d6eeb701", 0x63}, {&(0x7f0000002240)="f4c07ffb69b43db58c192ae931fd09e08b0a17a167c9b3416365b25b28196b77d38224f18bc08bb671e7ca417ada124f4ddcfcf686947966db558edbed2d3358485b1862a1134ae2210957feba5265f1f737690f35ccf8ac21fb91421b0aedf685061e50161bd2ee6b84c4d6759a5f15454b377879a01eb7880a7f8a1bc1f0976315a2ef48287332b31e0f35200e530979e127fa8908b4303ac92648ba88b362398bec0211505a9ad5cfe87f64a3e3a05f3156ba190237ec35b6cbf0662caa7dcd2337373af96fbec01bbd708d6a74f52ac099345311609b275d7883d49b0d66913c47860676976a04f4f9acde2ea86586eb4abb8ca5b4eebc25881803a8a50c3fd7c1470d812d6b2b05c658dfe0e2fea1808d33cdbce8633ebd032c92879e3dc844e8516923fb4e69e5bf350ad697dc0511886666b1d642991216acae4c687cb9070eaf6dac60aac2d4032dc5d24b3c1f7a5d5693b24fdf94c9f5858e5a4792fae39d2174629561a3c5690bb75e4424258ddff24aee5a761bfc30888901fa5aeb62bc5e693af019869bdb4c6b6d5b73cf74f2ecb2a2bd45d08f53a72e7df706ca6aca7a77d2ab90531a356546fb9261bac7cb32fcc3875e8edfd0b940797c753c5e23117cc8371d743a7927b048b31febd76fb04a64e6da09430d8642a513b98923f92d26535bef40848e0f08a8bdde222f6f4dd785b8953e448f47a29bc5030e5f5a69810793382fd4b7173b16a3e4920d03d7f29abb04cb48b1a71307d36d07ef5d4ec1513c106c5e4f870323463acef58e9f6d4f7f1235cf836d37111020a39497cf3b696654bb83072eeef91239fa482490ca3617eb524d5974ec756940fc9f75c60bd067dbf9bfb32683973bd39d118505ea27a3f8c75521922522d517a74a7f6bb3d6a4cc5de63eab639c504737e75942f2e3a1cb6e1577c97a9ec5a3cee7d793fffc85de4f278d0dfa946fef3e337900466f7ecd8ce45d516f33f21867d917e14eceb1f3e352b545539f8fc1c074d69db29b80c028f3c595e8a0df16358dc7b7d9bd9799f818792d9595af8d9bb01e8336db8395b867cc4998bc0af6690f31819d321f8d6426c4f3eb853c24356519736bb9f3c9eefac51e44e6947007ca453dd062587b1f89b83e1187fdfe2da123b05f22ec646ee5e124231189d876157c951604b983062f7c629cdf76960cee502474f057237a439c0ad693055110bc8f3212f8a142f019a63855ce740ac189d24283f333a699fdeb45ae21d504188563ee29e5750dde878a2b69bdffdb282fb0e51c89183ddf7493edf7cb180a4e4697c6ee538d64a072423c9bc6dae51d2b3e6a464fdc19a844ad1b67422669d2dc54ee62dbd12193f5f015afb35817a647cc62cfa844cdef13db3f464efa7a247cd240d8a2b4075c033f30024313ae8b2779795a960267294bc0a8ab8d9b7af7662a9556e26cd7b0eecd13442b1dc4bd34422e442590ae6c34e0046c67fb78825877963ca3d7680467227566f7057f48767a8fa1b73c62bf2c10fbe42541872227cf4a03ba112de8fcf4e9cce0efac08e663541ace9af8c895771efd62e285f56657d22b082887f7315bd7217977985f139482cccdfc6d8aa2c0b940293c7bf91ed89494c004a004e985ef68f55ca3f9a624d13da8f7abdd62f5c13d79dda36fc0feec4f83ded4c1e6a281e60904135273d661fd063ee0b2f9e72fb20506d78493f2493bad2bd6d95b6b30b3a315c37b57e23f1506d49977b488163885cbff6125b27f387375a2b42ebe3edb979531627ebfc5237a6e231cd3ccbacfc8e7e29663bb7976df75518eb658ba3c1a7cdaae71667005d5aff8bc0e3f3d473644859dd51690fdf6187300227a34a4fc29bbec59f62931bc64ff5bc9", 0x53a}], 0x2}}], 0x3, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x40008001, 0x0, 0x0) 19:42:27 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400000000039604, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3cdb6a71", @ANYRES16=r1, @ANYBLOB="0d090000000000000000050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030004000000"], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="180100008b2000ab1968f03eb46c1be19aecc7d91466d22b037a4f9df2aefb53916622270fa2d6847e05f39d77b19b2e414c53d9ff15492721896c22db12e3f48908cadbb79505f5a440192b98ca4247cb987b62bdfbb48fe330052e8749d8dfe55203706a73d17375cc575bc91d94c37d8b9869990ddba1b36d8b88e1f3ac79e34a5933f54fbad96856", @ANYRES16=r1, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x94) close(r0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000040)=ANY=[], 0x4) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000080)={0x9a0000, 0x1, 0x7, r0, 0x0, &(0x7f0000000040)={0x980923, 0x10001, [], @ptr=0x4}}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x835, 0x10, 0x8, 0x73}, &(0x7f0000000180)=0x18) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r9 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r9, 0x2008002) sendfile(r6, r9, 0x0, 0x201002) 19:42:27 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000000c0)={0x4c08, 0x9, 0x9}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 19:42:27 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="39000000130009006900000000000000ab008000200000004600010707000014190001001000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0x0) 19:42:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000200012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x68080}}, 0x20}, 0x1, 0x7}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) [ 686.852783][ T29] audit: type=1800 audit(1593891747.578:355): pid=26681 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16009 res=0 19:42:27 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x181b42, 0x0) ftruncate(r4, 0x2008002) clone(0x0, &(0x7f0000000040)="1519319d3028c0305aa3af6a37ec703a5c2332b6cc00e89de576321864d937e7182a71dd748d2d2c8d2186d811add28e58b38fa1570367353984c6d718640f89200e207b5a481682050e6d0095b2", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="4f35c8040530162e3c79efdcd0d69d5d3af480a1e0b5f803d6f844392a1f79b664f782114f3fb3f18aa8cd915638f774c551c0fb3d3b4c7f96439fd51523ca6a556c7b195032cd72fcb7bb63a04705b5293d9d3bc0609052814e95ac2b6c834a646ffbae2e36150500e90624ebc6cde858eb00add49d35f3943ca40134c74d8057861bb2538e9f0c41080d20262b2c0df8b2636057e0e2680b0a0bbadcd2279a650e") sendfile(r0, r4, 0x0, 0x200fff) 19:42:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, [0x401, 0x1, 0x8, 0x3]}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r3, 0x540e, 0x0) 19:42:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x90840, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000100)={0x40}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x4) write$P9_RLOPEN(r1, &(0x7f0000000500)={0x18, 0xd, 0x1, {{0x40, 0x4, 0x4}, 0x4}}, 0x18) read(r4, &(0x7f0000000440)=""/135, 0x87) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000280)=""/36, 0x24}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000300)=""/96, 0x60}], 0x7}, 0x100) accept4$alg(r3, 0x0, 0x0, 0x0) [ 687.179900][T26696] bridge0: port 2(bridge_slave_1) entered disabled state 19:42:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x101}, 0x0) r0 = getpid() r1 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x3f, 0x8000) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000002c0)) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x7, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x0, r4+10000000}, 0x0) 19:42:28 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:28 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1000000}]}, 0x78) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x2) fremovexattr(r2, &(0x7f0000000100)=@random={'security.', 'rmd320\x00'}) socket(0x18, 0x6, 0x7ff) getpeername(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000000c0)=0x80) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b5b073b3100000000000000000000000000000000000000000000000000000072000000000000dcff00000200000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000077516a624c887d2755ff29a9bca6477be529b668aa9380a78e93774d00"/148], 0x78) fsetxattr$security_ima(r6, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000200)=@sha1={0x1, "7a174f10766c732adf92bd678d909b1d8355f74d"}, 0x15, 0x2) splice(r0, 0x0, r5, 0x0, 0x400000000039604, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) ppoll(&(0x7f00000008c0), 0x0, &(0x7f0000000900)={0x77359400}, 0x0, 0x0) [ 687.495479][T26700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 687.515382][T26700] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 687.542238][ T29] audit: type=1800 audit(1593891748.268:356): pid=26710 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16009 res=0 19:42:28 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0x40044145, &(0x7f0000000040)=0x2) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) [ 687.700374][T26707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 687.710241][T26707] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 19:42:28 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020023000535d25a80648c63940d0324fc60100002400a000000051a82c137153e670902018003000000d1bd", 0x33fe0}], 0x1}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x400, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000100)=""/94) [ 687.891458][T26748] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 687.899981][T26748] netlink: 131070 bytes leftover after parsing attributes in process `syz-executor.1'. [ 687.915090][T26748] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 687.928061][T26748] netlink: 131070 bytes leftover after parsing attributes in process `syz-executor.1'. 19:42:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f00000003c0)={0x1000, [[0x0, 0x8001, 0x3, 0x7, 0x10001, 0x10001, 0xfffffffe, 0xffff], [0x3, 0x1, 0x5, 0x5, 0x0, 0x8, 0x2, 0x3], [0x6, 0x2, 0x4, 0x2, 0x6, 0x8, 0x6, 0x80]], [], [{0xc2, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x19, 0xa, 0x0, 0x0, 0x1, 0x1}, {0x80, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x400, 0x9, 0x0, 0x1, 0x0, 0x1}, {0xd1, 0x0, 0x1, 0x1}, {0x4, 0x1ff, 0x0, 0x1}, {0x7, 0xff, 0x0, 0x1, 0x1, 0x1}, {0x10000, 0x9, 0x1, 0x1, 0x1}, {0x200, 0x42, 0x1, 0x1, 0x1, 0x1}, {0x7fffffff, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x7fffffff, 0x0, 0x0, 0x1}], [], 0x6}) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001180)='cpuacct.usage_user\x00', 0x0, 0x0) listen(r3, 0x10001) r5 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x306, @loopback}], 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000041) 19:42:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:42:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x90840, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000100)={0x40}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x4) write$P9_RLOPEN(r1, &(0x7f0000000500)={0x18, 0xd, 0x1, {{0x40, 0x4, 0x4}, 0x4}}, 0x18) read(r4, &(0x7f0000000440)=""/135, 0x87) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000280)=""/36, 0x24}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000300)=""/96, 0x60}], 0x7}, 0x100) 19:42:28 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0xa, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 688.139626][ T29] audit: type=1800 audit(1593891748.868:357): pid=26746 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16009 res=0 19:42:28 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x7c3040) socket$pppoe(0x18, 0x1, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}, 0x5c}], [], 0x2f}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x400000000039604, 0x0) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f00000002c0)=0xecd) r5 = socket$inet(0x2, 0xa, 0x61) getsockopt$inet_dccp_int(r5, 0x21, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000100)={0x800, 0xff, 0x4}) 19:42:29 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0, 0x46) 19:42:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x78) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000000)={0x7, 0x3, 0x40}) [ 688.539184][ T29] audit: type=1800 audit(1593891749.268:358): pid=26773 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16376 res=0 19:42:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xf000000, 0x3, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990a63, 0x6, [], @p_u16=&(0x7f0000000000)=0xad5d}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000200)) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x400000000039604, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0xc, 0x5, 0x5, 0xf, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @multicast1}}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010101, 0x0, 0x2, 0x10}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e25}]}, 0x78}}, 0x80c1) 19:42:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x90840, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000100)={0x40}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x4) write$P9_RLOPEN(r1, &(0x7f0000000500)={0x18, 0xd, 0x1, {{0x40, 0x4, 0x4}, 0x4}}, 0x18) read(r4, &(0x7f0000000440)=""/135, 0x87) socket$nl_sock_diag(0x10, 0x3, 0x4) 19:42:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$alg(0x26, 0x5, 0x0) write$dsp(r1, &(0x7f0000000040)="963f95", 0x3) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000004c0)="fe", 0x1}]) io_destroy(r3) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) 19:42:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x90840, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000100)={0x40}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x4) write$P9_RLOPEN(r1, &(0x7f0000000500)={0x18, 0xd, 0x1, {{0x40, 0x4, 0x4}, 0x4}}, 0x18) read(r4, &(0x7f0000000440)=""/135, 0x87) 19:42:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x90840, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000100)={0x40}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x4) write$P9_RLOPEN(r1, &(0x7f0000000500)={0x18, 0xd, 0x1, {{0x40, 0x4, 0x4}, 0x4}}, 0x18) [ 689.161021][T26775] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 19:42:30 executing program 1: socket(0x1e, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r1, 0x40087543, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x40000000000, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fb}, 0x0, 0x0) 19:42:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$TIOCSCTTY(r0, 0x540e, 0xfffffffffffffffd) 19:42:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b073b3100000000000000000000000000000000000000000000000000000072000000000000000000000000000000000000000000380000000000000000000600"/120], 0x78) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x0, 0x1f, 0x80}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "655e3d1d41f109b1"}) 19:42:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) pipe(&(0x7f0000000000)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x90840, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000100)={0x40}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x4) 19:42:30 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x680502, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x400000000039604, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, r6, 0x711, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r6, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80d4}, 0x20040000) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r9, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYRES16=r9], 0x4) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x3, r1}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r10}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) pipe(&(0x7f0000000000)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x90840, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000100)={0x40}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) 19:42:30 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$TIOCSCTTY(r2, 0x540e, 0x3) 19:42:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) pipe(&(0x7f0000000000)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x90840, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000100)={0x40}) socket$alg(0x26, 0x5, 0x0) 19:42:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) pipe(&(0x7f0000000000)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x90840, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000100)={0x40}) 19:42:31 executing program 5: perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getrusage(0xffffffffffffffff, &(0x7f0000000000)) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000002c0)={0x80, 0x7}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0x4) sendmsg$AUDIT_USER(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x90, 0x3ed, 0x100, 0x70bd2d, 0x25dfdbfb, "83bd12d68e7a2293da4d4080fc2ce201fe441ab47eefbe532f853f81862f68b16de83b6053b8321810ace152b5c1379957da9e99c0d77e3bd38628f3561f5de54ce743c425c73040683d575ed5114095eee0322545a67301215ef1391a5b1b85aeae5514718922d5a4645bdcc97ab432009d1e114e9d26471da71691ad78", ["", "", "", "", "", "", ""]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) syz_open_dev$ttys(0xc, 0x2, 0x0) 19:42:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b073b3100000000000000000000000000000000000000000000000000000072000000000000000000000000000000000000000000380000000000000000000600"/120], 0x78) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x0, 0x1f, 0x80}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "655e3d1d41f109b1"}) 19:42:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) pipe(&(0x7f0000000000)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x90840, 0x0) 19:42:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b073b3100000000000000000000000000000000000000000000000000000072000000000000000000000000000000000000000000380000000000000000000600"/120], 0x78) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x0, 0x1f, 0x80}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "655e3d1d41f109b1"}) 19:42:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000000)={0x9, [0x2, 0x7], [{0x6, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x200, 0x0, 0x1, 0x1, 0x1}, {0x80000001, 0x0, 0x1, 0x1}, {0x1, 0x9, 0x1, 0x1, 0x1}, {0x5, 0xa112, 0x0, 0x0, 0x0, 0x1}, {0x1000, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x81, 0x1}, {0x9, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x3, 0xffff, 0x1, 0x0, 0x0, 0x1}, {0xc03, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x9, 0xc5d, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x5}], 0x5}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6400}]}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x4044040) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) pipe(&(0x7f0000000000)) 19:42:31 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) sendmsg$sock(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="16310319bd1fbedefeb1a2c0cd93ac7454975a6f232fa6e4deb6c1552e592a9b40d7cc057389fd0580bc64b3197b55302eff67015296349156b06c8f981274a3d6a07472db2221b14d283a283781e9bf41ac0e0abe20899381a863d28e0511402b012a2a7599597c1d06d25010bce7161bbe29fd6bfaf1fff29ca89bd2cc2452b5a38e280759a32be969cc349130be61e5980b1d32d800f813955bf6dc7832771064ca6486c7b1332cf7afa82d785272bf787ed9c38676ef6beec60215", 0xbd}, {&(0x7f0000000400)="cb459adf34d1c456aa2d6b011e", 0xd}, {&(0x7f0000000440)="00d0d1cdb2e1882a29bbc8325be33586f79df08299c7c114160419cdde8d096b286611ceba45ca95dac0fe41d7075226bfde90b3", 0x34}, {&(0x7f0000000480)="9b703f653a44ce9c092770605413f26a5431f9c280c8f18434e75f68c615fbaceeba8b9c9524ec58d5bacec8ce3b0702d15d71de8d74ee5c54f5fe05c7f983f8ebc054ccea2846a0d97373008e2d06f6984e19cdaa0f9027297c6d767b248d278b7b1c008d8bffde7d1ad24570baa997d5051b86ef01419880baef693a29106ba172a193c8330a44464acb5b2a02bd54", 0x90}, {&(0x7f0000000540)="7b78815ddc1ca93f00a733722eb9a6f548dfb5859d46874066254ab67f851ca83d51a779a600ed2014226ff0313856575e3151a3f6e3f486b2cc230011b7ef42aa23fccbe2d76944cf6369795ce41b5ce1246c0abaf4e8be1c613b158661bb5868955f2bcbfb5607aa0b07776054a3bd756809c15ac1d5677eecb36d266c8de707692c023bfdd1e6fba3071f0e29d07d439d25e2090f2922bbe7611c50692991974e386b2b805e884504e720651870d2c470c3741684bf221bd6d26137ac060a52889ea903b70a778cbeaeebe5f54af1da9a3dbc047cc0", 0xd7}], 0x5, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18}}], 0xd8}, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) r4 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x45d2, 0x40000) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0x9, @win={{0x7, 0x1, 0x1, 0x1f}, 0x5, 0x75c9f3dd, &(0x7f0000000240)={{0x7, 0x949, 0x910, 0x1ff}, &(0x7f0000000200)={{0x8000, 0x9, 0xfffff000, 0x4000059c}, &(0x7f0000000140)={{0xfffffffe, 0x24000, 0x5, 0xaa6}}}}, 0x2, &(0x7f0000000280)="d1cb22ae6cf7b247febfa50716d5647edcf644c42b116b969ebb1cef7ff895ce36321dcbc7bf9eca9beee412efc5105defe2eef408e9f14d2443232189ff081af1664b4cdd95e73cd00dbb2022a041c4d273b278ad8f7d220f87f56109be6fa7a5009360a19061639d307199a831d483caa495b05a2088cdad114b7bd010f468e25625ebd05780c40f320634c5161c7041cf68bb33fceab106131af81dcfd46755a532feb768a284399eda85b8b6b7d52e829abb", 0x7}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840)='nl80211\x00') sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x2d}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c090}, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r7, 0x540e, 0x0) 19:42:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b073b3100000000000000000000000000000000000000000000000000000072000000000000000000000000000000000000000000380000000000000000000600"/120], 0x78) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x0, 0x1f, 0x80}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "655e3d1d41f109b1"}) 19:42:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) 19:42:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b073b3100000000000000000000000000000000000000000000000000000072000000000000000000000000000000000000000000380000000000000000000600"/120], 0x78) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x0, 0x1f, 0x80}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "655e3d1d41f109b1"}) 19:42:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b073b3100000000000000000000000000000000000000000000000000000072000000000000000000000000000000000000000000380000000000000000000600"/120], 0x78) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x0, 0x1f, 0x80}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "655e3d1d41f109b1"}) 19:42:32 executing program 2: ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) 19:42:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x80}, {r2}, {r3}, {r4, 0x25b6}, {r0, 0x4701}, {r3, 0x1000}], 0x6, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000040)=ANY=[], 0x4) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xc}}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x4008040) write$binfmt_elf64(r5, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x40, 0x3}, [{0x1, 0x0, 0x40000}]}, 0x78) dup(r5) 19:42:32 executing program 2: ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) 19:42:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b073b3100000000000000000000000000000000000000000000000000000072000000000000000000000000000000000000000000380000000000000000000600"/120], 0x78) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x0, 0x1f, 0x80}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "655e3d1d41f109b1"}) 19:42:32 executing program 2: ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) 19:42:32 executing program 1: socket$inet6(0xa, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b073b310000000000000000000000000000000000000000000000000000007200000000000000000000000000000000000000000038000000000000000000000000000000000000002000"/120], 0x78) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6020920000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='Px\x00\x00'], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x5}]}, 0x78) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, 0x78) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000200)={0x9, 0x1, 0x2, 0x9, 0x7, [{0xe09, 0x6, 0x100000001, [], 0x1089}, {0x1, 0x9, 0x3f, [], 0x3409}, {0x400, 0x6, 0x401, [], 0x808}, {0x20, 0x1, 0x8, [], 0x501}, {0x8001, 0x2, 0x3, [], 0x981}, {0x80000001, 0xf4, 0x9, [], 0x284}, {0x8, 0x4000000000000dea}]}) r3 = dup(r1) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000100)) 19:42:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) 19:42:32 executing program 3: gettid() perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x141042, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[], 0x23) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0x1d4, r3) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r3) add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000240)={0x2, 0x0, "c61a6fa4af340bba6e2e0200e837696c74b8eb18f02a9d1b4bc957cf4c1814ec2a0b7f6f3259453d8a6530d650a1884e96f308330a5eaefa7403b383f6ccd65696fe4f5cfa030e722234c55c18b572eb90a7a9f369c5041058fcf209ba1111d9285b1dbd465f67b8c57c71d53a4b11fa93e99ce9eb5df7f43db8d8f3772aa1e9df4bb7e196fe88ae6b7b91832c826e4227dc9cc386bcd6dce8e975f8389307fafa6af1398833a9066210e9465237f0aa730488a868b7bed7002f034bab8b044d612a4fa33bd6ad0dbf3111b838d7eaf6624516ae09b4a12246299c1fd4560a85a0bfc52bce37f17d093f4cef0d5106db3dc86a"}, 0xfb, r4) sendfile(r1, r2, 0x0, 0x200004) 19:42:32 executing program 1: prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='?\x1f\xb4!\x85\xcb\x10\x1av\xbd\xea\xf4\xbeB\x97\x0f\x91fTS\xe2\xbe\xd5)jX\x7f\xfd\xfc\xa2\xd2hG`\x7fHyPc\xc0\xbb\xac9Rh\x06Ha\xc4%\x0f=\x96H\x88^\xfd\xb3\xddH\rqg\t\xba\xb9\x02\xb9\x1a\x84\xf2\xd6\xc7\xfc\x9e\xee\x9fJ$\x8b\xef1w\x95\xda\xae\x9b\x1725\x17\x9d\xb99\xb8\xc8\xee&<\x04a$\xf7\xcb\xa4\xa0\x04\xa1\xdc\xe4k\xe6\xa1\x8e\x94\xb1\xf0\xd1;\xe5=\xb1:\x02\xf0\xd5\xa0\xf9\xffm\x8c\xc3\xa3\xd6\xbd\x14\xbd\xa2S\x8cm\xcfM\x02\bO=\x13\xc1.Q\xb4\xa1z\\Bk\x8aI\xfa\x1b\x18B\xd7w\xb5\xe2\xb42\x1e8\xef9\xcc\x82%\xd8\t\xcf,\xc1\xb0j\xc3\xb3\xcdW\xd2`\xa7\xe6\x18\xd8.:\xe3f\b\x9a\x981VL\x9e\xa6\xa7\xbe1\xb3\xe7\xffe&c\xd1\xcc\xaa\xe9\xc8\xb8e\xdf\xefmL\xe2}\x02\xbb0}n;\xb8\x8b9\t\x13j2\xcf\x94\xce\x05\x84\xe2dr\xbd\xe7\x94e\x7f\xa7\x92lF\x16\xe0\xa4/?\x0fJ\xb2\"9\xb4m\x85\xeaT\x02U\xefD\x97Fq\xe6\xc6\f\x83\x00'/295) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x30, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0001}]}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) 19:42:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)) 19:42:32 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) [ 692.063748][ T29] audit: type=1800 audit(1593891752.789:359): pid=26897 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15968 res=0 19:42:32 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) [ 692.204421][ T29] audit: type=1326 audit(1593891752.929:360): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26896 comm=3F1FB42185CB101A76BDEAF4BE4297 exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x7ffc0000 [ 692.306360][ T29] audit: type=1326 audit(1593891752.929:361): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26896 comm=3F1FB42185CB101A76BDEAF4BE4297 exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45cb29 code=0x7ffc0000 19:42:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400000000039604, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000080)={r7, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={r7, 0x5, 0x7ff, 0x1}, 0x10) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r8 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r8, 0x0, 0x400000000039604, 0x0) ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f0000000080)=0x2) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000040)=0xe) 19:42:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setparam(0xffffffffffffffff, &(0x7f0000000040)=0x717) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x799400, 0x0) ioctl$KVM_NMI(r3, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@getchain={0x24, 0x66, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0xe}, {0xfff1, 0xa}, {0x4, 0x6}}}, 0x24}}, 0x0) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x4) 19:42:33 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x1, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) [ 692.465718][ T29] audit: type=1326 audit(1593891752.929:362): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26896 comm=3F1FB42185CB101A76BDEAF4BE4297 exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45cb29 code=0x7ffc0000 19:42:33 executing program 4: inotify_init1(0x800) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) [ 692.634563][ T29] audit: type=1326 audit(1593891752.959:363): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26896 comm=3F1FB42185CB101A76BDEAF4BE4297 exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x7ffc0000 [ 692.815617][ T29] audit: type=1326 audit(1593891752.959:364): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26896 comm=3F1FB42185CB101A76BDEAF4BE4297 exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=157 compat=0 ip=0x45cb29 code=0x7ffc0000 19:42:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x200000000000007f, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x5) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@getrule={0x14, 0x22, 0x100, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x0) 19:42:33 executing program 3: gettid() perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x141042, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[], 0x23) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0x1d4, r3) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r3) add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000240)={0x2, 0x0, "c61a6fa4af340bba6e2e0200e837696c74b8eb18f02a9d1b4bc957cf4c1814ec2a0b7f6f3259453d8a6530d650a1884e96f308330a5eaefa7403b383f6ccd65696fe4f5cfa030e722234c55c18b572eb90a7a9f369c5041058fcf209ba1111d9285b1dbd465f67b8c57c71d53a4b11fa93e99ce9eb5df7f43db8d8f3772aa1e9df4bb7e196fe88ae6b7b91832c826e4227dc9cc386bcd6dce8e975f8389307fafa6af1398833a9066210e9465237f0aa730488a868b7bed7002f034bab8b044d612a4fa33bd6ad0dbf3111b838d7eaf6624516ae09b4a12246299c1fd4560a85a0bfc52bce37f17d093f4cef0d5106db3dc86a"}, 0xfb, r4) sendfile(r1, r2, 0x0, 0x200004) 19:42:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) [ 692.955376][ T29] audit: type=1326 audit(1593891752.959:365): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26896 comm=3F1FB42185CB101A76BDEAF4BE4297 exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x7ffc0000 [ 693.066401][ T29] audit: type=1326 audit(1593891752.959:366): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26896 comm=3F1FB42185CB101A76BDEAF4BE4297 exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45cb29 code=0x7ffc0000 19:42:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) 19:42:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x7, {{0x2, 0x4e23, @local}}}, 0x88) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) sendfile(r0, r1, &(0x7f0000000100)=0x8, 0xfffffffffffffff9) clock_gettime(0x0, &(0x7f0000000000)) ppoll(&(0x7f00000008c0), 0x0, &(0x7f0000000900)={0x0, 0x3938700}, 0x0, 0x0) 19:42:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x200000) splice(r4, 0x0, r2, 0x0, 0x400000000039604, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 693.216331][ T29] audit: type=1326 audit(1593891752.959:367): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26896 comm=3F1FB42185CB101A76BDEAF4BE4297 exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45cb29 code=0x7ffc0000 19:42:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x80, 0x9, 0x2, 0x6ec, 0x7f}) 19:42:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f0000000000)=0x1cc) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x400000000039604, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @local, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r3, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x1, @mcast1}}}, &(0x7f0000000040)=0x84) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f00000000c0)={0x4, 0x5, 0xffffee20, 0x8, 'syz0\x00', 0x7}) [ 693.373497][ T29] audit: type=1326 audit(1593891752.959:368): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26896 comm=3F1FB42185CB101A76BDEAF4BE4297 exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x7ffc0000 19:42:34 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 19:42:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x2, 0x6ec, 0x7f}) 19:42:34 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x86) 19:42:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000040)={0x18, 0x0, 0x4, {0xff}}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x0, 0x0, 0x38, 0x0, 0xfffc}, [{}]}, 0x78) r5 = dup(0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x78) fsync(r6) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000000)=0x8000800) 19:42:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x6ec, 0x7f}) 19:42:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6ec, 0x7f}) 19:42:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x8, 0x4, 0x4000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:42:34 executing program 3: syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) read$midi(0xffffffffffffffff, &(0x7f0000000cc0)=""/4096, 0x1000) openat$zero(0xffffffffffffff9c, 0x0, 0x14002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) pipe(&(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x3f0000, 0x0, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a0920, 0x61a, [], @ptr=0x7fffffff}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001cc0)=@security={'security\x00', 0xe, 0x4, 0x528, 0xffffffff, 0xe8, 0xe8, 0x318, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@ipv6={@empty, @private1={0xfc, 0x1, [], 0x1}, [0xff000000, 0xffffff00, 0x7f800000, 0xffffffff], [0xff, 0xffffffff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x5e, 0x0, 0x2, 0x38}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0x446d7f56, 0x6, 0x5436, 0x200, 0x0, 0x8, 0x5]}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00', [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 'veth0_to_bridge\x00', 'geneve0\x00', {0xff}, {}, 0x5e, 0x3, 0x1, 0x4}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x1c4, [0xff, 0x54], 0x6, 0x1, 0x6, [@private1={0xfc, 0x1, [], 0x1}, @private0, @dev={0xfe, 0x80, [], 0x2b}, @loopback, @private0, @local, @empty, @private1, @loopback, @remote, @private2, @mcast1, @private0={0xfc, 0x0, [], 0x1}, @remote, @local, @loopback], 0x2}}, @common=@eui64={{0x28, 'eui64\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x3f, 0x3}}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0xff, 0x98, 0x2, 0x6, 0x3, 0x103, 0x182}}, @common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x1, 0x20, 0x8, 0x62}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5, 0x2, {0x2}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[], 0x4c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 19:42:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}) 19:42:34 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = getpid() pidfd_open(r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8b) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r2) [ 694.201371][T26976] overlayfs: conflicting lowerdir path [ 694.278808][T26980] overlayfs: workdir and upperdir must reside under the same mount 19:42:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)) 19:42:35 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f00005fc000/0x4000)=nil, 0x4000, 0x100000b, 0x11, r0, 0x4e73c000) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 19:42:35 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000), 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000380)=0x4) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x0, 0xa84}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r5, 0x0, 0x8, 0xba1}, 0x14) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x147, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) 19:42:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0xe3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x3, 0x4000}, 0x0, 0xd, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xd458) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) r2 = getpid() pidfd_open(r2, 0x0) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x400000000039604, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) r5 = socket$inet(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r6, 0x84, 0x10, 0x1}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={r6, @in={{0x2, 0x4e23, @empty}}}, 0x84) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000200)={0x9c0000, 0x7, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98090b, 0x3, [], @string=&(0x7f0000000100)=0x5}}) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x48, 0x9, 0xfc, 0x0, 0x0, 0x81, 0x12, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000040)}, 0x5010, 0x30, 0x400, 0x6, 0xff, 0x80000001, 0x3}, r2, 0x2, r7, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 19:42:35 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)) 19:42:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x40010, r1, 0x5176) [ 694.685966][T26995] FAULT_INJECTION: forcing a failure. [ 694.685966][T26995] name failslab, interval 1, probability 0, space 0, times 0 [ 694.759816][T26995] CPU: 1 PID: 26995 Comm: syz-executor.2 Not tainted 5.8.0-rc3-syzkaller #0 [ 694.768546][T26995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.778600][T26995] Call Trace: [ 694.781898][T26995] dump_stack+0x18f/0x20d [ 694.786239][T26995] should_fail.cold+0x5/0x14 [ 694.790843][T26995] ? tomoyo_realpath_from_path+0xc3/0x620 [ 694.796574][T26995] should_failslab+0x5/0xf [ 694.800997][T26995] __kmalloc+0x27d/0x340 [ 694.805250][T26995] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 694.810807][T26995] tomoyo_realpath_from_path+0xc3/0x620 [ 694.816365][T26995] ? tomoyo_profile+0x42/0x50 [ 694.821055][T26995] tomoyo_path_number_perm+0x1cb/0x4d0 [ 694.826517][T26995] ? tomoyo_path_number_perm+0x183/0x4d0 [ 694.832164][T26995] ? tomoyo_execute_permission+0x470/0x470 [ 694.838017][T26995] ? __lockdep_free_key_range+0x110/0x110 [ 694.843773][T26995] ? __mutex_unlock_slowpath+0xe2/0x610 [ 694.849345][T26995] ? lock_is_held_type+0xb0/0xe0 [ 694.854295][T26995] ? __fget_files+0x294/0x400 [ 694.858985][T26995] security_file_ioctl+0x50/0xb0 [ 694.863929][T26995] ksys_ioctl+0x50/0x180 [ 694.868179][T26995] __x64_sys_ioctl+0x6f/0xb0 [ 694.872775][T26995] ? lockdep_hardirqs_on+0x6a/0xe0 [ 694.877893][T26995] do_syscall_64+0x60/0xe0 [ 694.882317][T26995] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 694.888215][T26995] RIP: 0033:0x45cb29 [ 694.892104][T26995] Code: Bad RIP value. [ 694.896169][T26995] RSP: 002b:00007f56644c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 694.904586][T26995] RAX: ffffffffffffffda RBX: 00000000004ea220 RCX: 000000000045cb29 [ 694.912560][T26995] RDX: 0000000020000000 RSI: 0000000000004b71 RDI: 0000000000000003 [ 694.920530][T26995] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 694.928503][T26995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 694.936475][T26995] R13: 000000000000042e R14: 00000000004c7022 R15: 00007f56644ca6d4 19:42:35 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x400000000039604, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={r6, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000)=r6, 0x4) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@inode64='inode64'}]}) 19:42:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x4081, 0x0) 19:42:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x3c, r2, 0x90d, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x140, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x140}}, 0x40) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x400000, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:36 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) r2 = getpid() pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x80, 0x8, 0x40, 0x5, 0x0, 0x8000, 0x28000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7d, 0x4, @perf_config_ext={0x0, 0x7fffffff}, 0x3010, 0x8001, 0x0, 0x3, 0x6, 0xfffffffa, 0x7fff}, r2, 0xffffffffffffffff, r0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) io_getevents(r3, 0x7, 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000240)={r4, r5+10000000}) [ 695.271007][T27018] XFS (loop1): Invalid superblock magic number [ 695.332890][T26995] ERROR: Out of memory at tomoyo_realpath_from_path. 19:42:36 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)) 19:42:36 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x3, [@remote, @multicast1, @private=0xa010100]}, 0x1c) ppoll(&(0x7f00000008c0)=[{}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x7d, 0x0, 0x9d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}}, 0x0, 0x8000000, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000000)={0xeb30, 0x1e, [{0x1}, {0xa, 0x1}, {0x4, 0x1}, {}, {0xf}, {0xd}, {0xf, 0x1}, {0x1, 0x1}, {0x4}, {0x9, 0x1}, {}, {0x5, 0x1}, {0xc, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x9}, {0x5, 0x1}, {0x5}, {0x8}, {0xa, 0x1}, {0xd, 0x1}, {0xe}, {0x0, 0x1}, {0x2}, {0x7, 0x1}, {0x4}, {0x8, 0x1}, {0xf, 0x1}, {0x8}]}) prctl$PR_CAPBSET_DROP(0x18, 0x1c) [ 695.555828][T27039] FAULT_INJECTION: forcing a failure. [ 695.555828][T27039] name failslab, interval 1, probability 0, space 0, times 0 [ 695.593574][T27039] CPU: 1 PID: 27039 Comm: syz-executor.2 Not tainted 5.8.0-rc3-syzkaller #0 [ 695.602296][T27039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.612354][T27039] Call Trace: [ 695.615671][T27039] dump_stack+0x18f/0x20d [ 695.620012][T27039] should_fail.cold+0x5/0x14 [ 695.624617][T27039] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 695.629993][T27039] should_failslab+0x5/0xf [ 695.634415][T27039] __kmalloc+0x27d/0x340 [ 695.638665][T27039] ? tomoyo_realpath_from_path+0xc3/0x620 [ 695.644393][T27039] tomoyo_encode2.part.0+0xe9/0x3a0 [ 695.649601][T27039] ? tomoyo_realpath_from_path+0xc3/0x620 [ 695.655339][T27039] tomoyo_encode+0x28/0x50 [ 695.659769][T27039] tomoyo_realpath_from_path+0x186/0x620 [ 695.665412][T27039] tomoyo_path_number_perm+0x1cb/0x4d0 [ 695.670923][T27039] ? tomoyo_path_number_perm+0x183/0x4d0 [ 695.676616][T27039] ? tomoyo_execute_permission+0x470/0x470 [ 695.682530][T27039] ? __lockdep_free_key_range+0x110/0x110 [ 695.688289][T27039] ? __mutex_unlock_slowpath+0xe2/0x610 [ 695.693842][T27039] ? lock_is_held_type+0xb0/0xe0 [ 695.698793][T27039] ? __fget_files+0x294/0x400 [ 695.703487][T27039] security_file_ioctl+0x50/0xb0 [ 695.708436][T27039] ksys_ioctl+0x50/0x180 [ 695.712688][T27039] __x64_sys_ioctl+0x6f/0xb0 [ 695.717293][T27039] ? lockdep_hardirqs_on+0x6a/0xe0 [ 695.722412][T27039] do_syscall_64+0x60/0xe0 [ 695.726835][T27039] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 695.732726][T27039] RIP: 0033:0x45cb29 [ 695.736611][T27039] Code: Bad RIP value. [ 695.740682][T27039] RSP: 002b:00007f56644c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.749101][T27039] RAX: ffffffffffffffda RBX: 00000000004ea220 RCX: 000000000045cb29 [ 695.757074][T27039] RDX: 0000000020000000 RSI: 0000000000004b71 RDI: 0000000000000003 [ 695.765046][T27039] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 695.773019][T27039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 695.780994][T27039] R13: 000000000000042e R14: 00000000004c7022 R15: 00007f56644ca6d4 [ 695.806463][T27039] ERROR: Out of memory at tomoyo_realpath_from_path. 19:42:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0xb, {0x7ff, 0x0, 0x2, 0x9}, {0x1ff, 0x8, 0x0, 0x5}, {0xfff, 0x7ce4}}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:42:36 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) r2 = getpid() pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x80, 0x8, 0x40, 0x5, 0x0, 0x8000, 0x28000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7d, 0x4, @perf_config_ext={0x0, 0x7fffffff}, 0x3010, 0x8001, 0x0, 0x3, 0x6, 0xfffffffa, 0x7fff}, r2, 0xffffffffffffffff, r0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) io_getevents(r3, 0x7, 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000240)={r4, r5+10000000}) 19:42:36 executing program 2 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)) 19:42:36 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) r2 = getpid() pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x80, 0x8, 0x40, 0x5, 0x0, 0x8000, 0x28000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7d, 0x4, @perf_config_ext={0x0, 0x7fffffff}, 0x3010, 0x8001, 0x0, 0x3, 0x6, 0xfffffffa, 0x7fff}, r2, 0xffffffffffffffff, r0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) io_getevents(r3, 0x7, 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000240)={r4, r5+10000000}) 19:42:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0x1d4, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) [ 696.113704][T27055] FAULT_INJECTION: forcing a failure. [ 696.113704][T27055] name failslab, interval 1, probability 0, space 0, times 0 [ 696.171810][T27055] CPU: 0 PID: 27055 Comm: syz-executor.2 Not tainted 5.8.0-rc3-syzkaller #0 [ 696.180518][T27055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 696.190677][T27055] Call Trace: [ 696.193968][T27055] dump_stack+0x18f/0x20d [ 696.198304][T27055] should_fail.cold+0x5/0x14 [ 696.202909][T27055] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 696.208288][T27055] should_failslab+0x5/0xf [ 696.212718][T27055] __kmalloc+0x27d/0x340 [ 696.216970][T27055] ? tomoyo_realpath_from_path+0xc3/0x620 [ 696.222710][T27055] tomoyo_encode2.part.0+0xe9/0x3a0 [ 696.227916][T27055] ? tomoyo_realpath_from_path+0xc3/0x620 [ 696.233648][T27055] tomoyo_encode+0x28/0x50 [ 696.238084][T27055] tomoyo_realpath_from_path+0x186/0x620 [ 696.243744][T27055] tomoyo_path_number_perm+0x1cb/0x4d0 [ 696.249208][T27055] ? tomoyo_path_number_perm+0x183/0x4d0 [ 696.254855][T27055] ? tomoyo_execute_permission+0x470/0x470 [ 696.260703][T27055] ? __lockdep_free_key_range+0x110/0x110 [ 696.267146][T27055] ? __mutex_unlock_slowpath+0xe2/0x610 [ 696.272702][T27055] ? lock_is_held_type+0xb0/0xe0 [ 696.278049][T27055] ? __fget_files+0x294/0x400 [ 696.282747][T27055] security_file_ioctl+0x50/0xb0 [ 696.287703][T27055] ksys_ioctl+0x50/0x180 [ 696.291958][T27055] __x64_sys_ioctl+0x6f/0xb0 [ 696.296554][T27055] ? lockdep_hardirqs_on+0x6a/0xe0 [ 696.301670][T27055] do_syscall_64+0x60/0xe0 [ 696.306100][T27055] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 696.311994][T27055] RIP: 0033:0x45cb29 [ 696.315883][T27055] Code: Bad RIP value. [ 696.319947][T27055] RSP: 002b:00007f56644c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.328362][T27055] RAX: ffffffffffffffda RBX: 00000000004ea220 RCX: 000000000045cb29 [ 696.336332][T27055] RDX: 0000000020000000 RSI: 0000000000004b71 RDI: 0000000000000003 [ 696.344305][T27055] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 696.352278][T27055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 696.360253][T27055] R13: 000000000000042e R14: 00000000004c7022 R15: 00007f56644ca6d4 19:42:37 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x28, r2, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000ff020000000000000c00060006000000040044001400010000f600000000001300000020313493d3308429ff0c5de80000017b00"/74], 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x800) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r3, 0x540e, 0x0) 19:42:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f00000000c0)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2}, [], "156dbf77d3d24d4418334cb3a76e8d672f971cbc79704f8d8575d076a18850111df627e2f23995fe757345c75a2b0cd6b22a4ad77036d7c7c22c9b8f"}, 0x7c) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000000)="1f73638df7c9233ad29da99fe37a9391ffc2bfd65d38c55a39ab6732756f2392ec6c41509358533b19e13a0a5ed015e8b22cc8a299048f373593c1a0476b03dc551e83bbc97927c3f434a6a0de72f78640b2127ea23324a61dc58ae3bd23d9020f305d1a8b15d32ff840c8404f428b04e0ce8b94ec80179ceb5eb638dd57af24ae74f8655e1f48b637a104") ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0x1d4, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 19:42:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000800), 0x1000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 19:42:37 executing program 5: prctl$PR_GET_KEEPCAPS(0x7) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1b5b073b3100000000000000000000000000000000000000000000000000000072000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000800000000e960c0620000000000000000000000000000000000000000000000cd9fe058b7804553cdc1db1c4b3a96acba1274a4429f8c4d0f66cc139984aa00006d143fb29fbdb24fc4b1c1bf7d25b5cd9be94dd133b66e7c1e1a326f35c3902c96cdafbf0561d44222f9b37ed023509de84458d5f167b62d8dfafabfd9c75583ef764e89ee2e78df16da9ed26b40d545d96efa976f9b54f2f9d14348d4dff21b2d9f4833708636931ecdd21158e6a5319f905e0d5c279ea699cf41"], 0x78) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0xde72c77, 0xff, 0x9, 0x2, 0x9, "41185c7d1ebe9fe0436193a87577ce981984fe", 0xafe, 0x1ff}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:42:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) clone(0x200, &(0x7f0000000940)="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", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="04ba9329f3694b20634d25eb3a115ec0ada68ef30f04b1c6532b4d7c2178f3cf8ae5d732cc290f87f74ff2f8d86411c3cdeff31de6711a19cefbeeb08fb281bb0d89b56507b91b2fa8f518f59bce12ee6f23b5dd3c7764962c05e73c4b3e8c1a2ef79a989800373d49d2a6ac9e4a7defc9710f84ff1aed4148a8d1d9e2ffdd3519efd243558f964bb4") r3 = accept4$alg(r2, 0x0, 0x0, 0x0) bind$ax25(r1, &(0x7f00000001c0)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @bcast, @default]}, 0x48) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x7f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1735}, {0xa, 0x4e20, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x8, [0x7, 0x13ab, 0x3ff, 0x7f, 0x7, 0x800, 0x3]}, 0x5c) 19:42:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x28, r2, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000ff020000000000000c00060006000000040044001400010000f600000000001300000020313493d3308429ff0c5de80000017b00"/74], 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x800) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r3, 0x540e, 0x0) 19:42:37 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) write$qrtrtun(r1, &(0x7f0000000000)="512d792e9050a664f5484176a08548fdacf9fd47402e90d845b1b4d958db2f558dc728ab2a06f4aee5490cb104e6a1544db1211d54911af2468a050865d2d46e593b867ccc0f41058ff78d41c2ac6611a11982574893dc6791ff716e6cc43c1bc9548a315625355c680b10402db8fa405e1ead9a31bff94519444a740371a4c826cb234ab643c230841dd9ee74ff63deae6792f95acc372b2d530eb00b888ba0d3698569c3ad54ec9edef1a18260a3386a8b09772bf6240972eaa32bb905f66ecfbb81dfb3a4cae9e8ff69f6bef9f75b", 0xd0) 19:42:37 executing program 2 (fault-call:1 fault-nth:3): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)) [ 696.864743][T27055] ERROR: Out of memory at tomoyo_realpath_from_path. 19:42:37 executing program 5: r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0xb5, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x800}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 19:42:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) write$qrtrtun(r1, &(0x7f0000000000)="512d792e9050a664f5484176a08548fdacf9fd47402e90d845b1b4d958db2f558dc728ab2a06f4aee5490cb104e6a1544db1211d54911af2468a050865d2d46e593b867ccc0f41058ff78d41c2ac6611a11982574893dc6791ff716e6cc43c1bc9548a315625355c680b10402db8fa405e1ead9a31bff94519444a740371a4c826cb234ab643c230841dd9ee74ff63deae6792f95acc372b2d530eb00b888ba0d3698569c3ad54ec9edef1a18260a3386a8b09772bf6240972eaa32bb905f66ecfbb81dfb3a4cae9e8ff69f6bef9f75b", 0xd0) 19:42:37 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_usb_connect$cdc_ecm(0x2, 0x150, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13e, 0x1, 0x1, 0x1, 0x70, 0x95, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x9, 0x24, 0x6, 0x0, 0x0, "ad76f4a3"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6, 0x40, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x401, 0x41}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x2, 0x3, 0x0, 0x8, 0x6}, @dmm={0x7, 0x24, 0x14, 0x64, 0x2}, @mdlm_detail={0xe5, 0x24, 0x13, 0x2, "bf4ddcfa2a3dde677bf78fec0448ba5afbdf390374a22ceead01ad8b7d2da91232f8426ee89610c7252953594d75d234c89f1745901ad20ddac4b45929d21ac165047f51e3de1f3273374d7d88b8a927e4365792add6394c608ef95ba20c6b374bf5b98b4340202b39e50e392c63e8fd5e81245bab0d54be15ffd19a969e1017a01466fad69fd3b8285592ee83f17eedc68229b3426fc08d4a1acd72fb78833c35c02bf54359db6ab8dd7ca9d5f53983fe2cb73972fa1de4dcd6c067505ca580092d98a45f995a82bb09e9b2867091fabb1ddc3deffef9252a50b6175c76ecf314"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x8}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x2, 0x3, 0xdd, 0x8, 0x5}, 0x4d, &(0x7f0000000240)={0x5, 0xf, 0x4d, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x5a, 0x5, 0xfff, 0x0, 0x1f, [0x3f30, 0x30, 0x3f00, 0x30, 0xffc000]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "c2cf6fb5144673a530a2222a91667654"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x3, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xd, 0x3f}, @ptm_cap={0x3}]}, 0x5, [{0x4c, &(0x7f00000002c0)=@string={0x4c, 0x3, "81bcd02b2562185aeb0316ce9ee50cd29f972e3d94ff8b58bab54c22a9d38d69eeb9fdd91255e6ed6a7c51384d8a91f7ad4d2dcd02f25d705efc3496a5d9d92054569c47ddc63875579f"}}, {0xff, &(0x7f0000000340)=@string={0xff, 0x3, "016efc1c0698e71828955a03a655466ed1b312dc03d78ad34dd21d7ce204f45119eb1711973f8777fb2b573e133298b0ba0fdbadef59c4ebea782f60c70abb59ab145cfc5a3516ff41bbbc35fd76646bb2f997f639a9ba26eb0bab3660b175bc8e1f9cb66146b827bf4e7116c4ff37f1dcf88b7edea7a209f5a412edb2a5ae8ee8877ec022b85bcc52769dcde6a75ee83db2ccd457d73ee24550df503305a022994a079a58dd64d4011b94e5a592bffd08e11d01b0740b5e5b6ee583ba0ac45ad2cbd74ebeae16e006216e2dc9100ea69a1dba64a1380d83c88e7be0426602aef822cb36a7ae078f6aeb96338bab47a876d4830e951d5f98de798c95d8"}}, {0xca, &(0x7f0000000440)=@string={0xca, 0x3, "5d3f4ece4d573331747ced37d6b1e82cbfb233630ed40b3ca500fe4ada7713225d1402bf1c7a54fc173c4a3adcba6213406c8c010ba17e0a44d036642fa18992ee99c3beca01cc87cc0ae7537fd3fe38c8d264321a568703f0a1b6b036e1a07eab848c3b55cd8e2f64f20401283dba3629a9de424d81421a0eccb9164fad2b2689fd0efb715beb7971f26c2cea47f455f5af8e67a01ba94f6f9e8e256aaa7e8661f860d4af18963942a92fe0cc9a95fc5200deae67e9a7009a0403c461ddc4d2669bd19fa84a6cc9"}}, {0x6d, &(0x7f0000000540)=@string={0x6d, 0x3, "d9a0457007f1e1d9a8477c7567b5780160e47419ee961847116e5f363d4044d413d083417c3793b3c4a22c367de534f614c6a6e9617be3612d69fc38bfba5f0fe2b618ac8865b1e6a7423647421ad244a851805afd4733ef668fc188c8aad1d84465cd20372657a609e4d1"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x849}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000780)={0x14, &(0x7f0000000680)={0x40, 0xe, 0xaf, {0xaf, 0x8, "13e2a0158142fb54cf6a4c4b42ebe20796f7fd1e0895b35aae5c170ea39facab47f6f8524229d147c0e966b948ac995822ff52c709bc06d37957d2e65cd41ada38fc2885955b50524fe4a566e1d765856c14f2901ca4167d9ba21bfa9a24426fa35ba59c5ab931b2b34697d5263719175f043ab53dd55050454274a89dee7fb7814d02b8a7601f0692bf4cae2c1ee4495c0e14613e13b04971c5d5fb8c624eaf6a42e1666d5dd71e99599c68b4"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f00000007c0)={0x20, 0x4, 0x3, "e2ad8d"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x81}}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000900)) 19:42:37 executing program 1: prctl$PR_GET_KEEPCAPS(0x7) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x78) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0xde72c77, 0xff, 0x9, 0x2, 0x9, "41185c7d1ebe9fe0436193a87577ce981984fe", 0xafe, 0x1ff}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:42:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)) 19:42:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x2, &(0x7f0000000000)) [ 697.398673][ T3671] usb 6-1: new full-speed USB device number 10 using dummy_hcd 19:42:38 executing program 3: prctl$PR_GET_KEEPCAPS(0x7) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x78) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0xde72c77, 0xff, 0x9, 0x2, 0x9, "41185c7d1ebe9fe0436193a87577ce981984fe", 0xafe, 0x1ff}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:42:38 executing program 1: prctl$PR_GET_KEEPCAPS(0x7) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x78) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0xde72c77, 0xff, 0x9, 0x2, 0x9, "41185c7d1ebe9fe0436193a87577ce981984fe", 0xafe, 0x1ff}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:42:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340)=0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x40044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x4000000000, 0x2, &(0x7f0000002280)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000140)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0x804803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x208000) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000300)={0x1, 0x2}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000000)={0x0, 0x4}, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000200)={0xfffffff, 0x3, 0x80, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9e0905, 0x3ae1, [], @p_u32=&(0x7f0000000040)=0x7fffffff}}) 19:42:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x10, &(0x7f0000000000)) 19:42:38 executing program 3: prctl$PR_GET_KEEPCAPS(0x7) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x78) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0xde72c77, 0xff, 0x9, 0x2, 0x9, "41185c7d1ebe9fe0436193a87577ce981984fe", 0xafe, 0x1ff}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:42:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x400000000039604, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x4) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000480)) [ 697.757830][ T3671] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 697.785845][ T3671] usb 6-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 697.824098][ T3671] usb 6-1: config 1 interface 0 has no altsetting 0 19:42:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b2f, &(0x7f0000000000)) [ 697.990327][T27121] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 697.997745][ T3671] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 698.029162][ T3671] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.038049][T27121] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 698.056743][ T3671] usb 6-1: Product: ã½ì¹Žåㄳ籴㟭뇖⳨늿挳íŽã°‹Â¥ä«¾çŸšâˆ“á‘뼂稜ﱔ㰗㩊뫜á¢æ±€ÆŒê„‹à©¾í„æ¶ê„¯éŠ‰é§®ë»ƒÇŠèŸŒà«Œå§í¿ã£¾í‹ˆã‰¤å˜šÎ‡ê‡°ë‚¶î„¶çº è’«ã®Œìµ•â¾Žï‰¤Ä„㴨㚺ꤩ䋞è…á©‚ì°Žáš¹êµâ˜«ï¶‰ï¬Žå­±ç§«ï‰±â±¬äŸªå—´ê¿µæžŽá® ä¾©é¹¯â–Žê©ªè™¾ï¡¡í‘ á¢¯ã¦–ꥂ髌ﲕR껞§Қìƒí‹„魦鿑䪨쥬 [ 698.103409][T27121] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 698.143295][ T3671] usb 6-1: Manufacturer: æ¸á³¼é †á£§é”¨Íšå–¦æ¹†ë‘휃펊í‰ç°Ó¢å‡´î¬™á„—㾗瞇⯻㹗㈓나ྺ귛姯磪怯ે妻ᒫﱜ㕚６ë­ã–¼ç›½æ­¤ï¦²ïš—ꤹ⚺௫㚫녠뱵ᾎ뚜䙡➸亿ᙱￄ纋꟞ঢꓵꖲ躮蟨ì¾ë ¢ì±›ç™’ì¶êŸ¦î¡žëˆ½í“Œí—å…僟Գ⊠䪙騇푤á¬î–”銥ﶿÄ環帋湛è¥àªºå«„쯒仗꺾℆⵮჉꘎ᶚ撺㢡èŒè»ˆî»æ™‚긂⋸㛋꺧輇㎖ꮋꡇ푶຃ᶕ顟秞閌 [ 698.164872][T27121] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:42:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b30, &(0x7f0000000000)) [ 698.190555][ T3671] usb 6-1: SerialNumber: ꃙç…䞨畼땧Ÿᥴ雮䜘渑㙟䀽푄퀓䆃ã¼ëŽ“ꋄ㘬옔筡懣椭㣼몿ཟ뛢갘斈䊧䜶ᩂ䓒冨媀䟽车è£ê«ˆæ•„âƒâ˜·ê™—î‰ [ 698.249479][T27102] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 698.330545][T27121] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 698.747576][ T3671] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 698.768395][ T3671] usb 6-1: USB disconnect, device number 10 [ 699.467382][ T3671] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 699.857552][ T3671] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 699.868278][ T3671] usb 6-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 699.882717][ T3671] usb 6-1: config 1 interface 0 has no altsetting 0 19:42:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) 19:42:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b31, &(0x7f0000000000)) 19:42:40 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x2900, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x2000, 0x20, 0x10}, 0x18) ppoll(&(0x7f0000000480)=[{0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x5410}, {r0}, {0xffffffffffffffff, 0x1002}, {0xffffffffffffffff, 0x100}, {r2, 0x1008}, {r3, 0x20}, {r4, 0x130}, {r5, 0x8620}], 0xa, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={[0x8]}, 0x8) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x7d, 0x4) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='show_sys_files=no,disable_sparse=yes,errors=recover,mft_zone_multiplier']) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r6, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8000}, [{}]}, 0x78) fcntl$getownex(r6, 0x10, &(0x7f00000000c0)) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x800200, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000040)=ANY=[], 0x4) write$vhci(r7, &(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0xfe}, {0x100, "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"}}}, 0x101) 19:42:40 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r2, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x212, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) 19:42:40 executing program 4: ppoll(&(0x7f00000008c0)=[{}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:40 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x200, 0x0, 0x200, 0x0, 0x0, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}, {0xf8}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "1eb063546ccd56fce70cbf65d11bbcdfe2fb44e146fffc7373cfe058b91471b1f91fa3eedadf91434cf20332335cc5ef47a2f11a9ccfb3dfdf7a3bd909ac85b3"}}}, {{@ipv6={@ipv4={[], [], @local}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000040)={r8}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={r8, 0x3, &(0x7f0000000080)=[0x3, 0x5, 0x5], &(0x7f0000000140)=[0x7f, 0x1000], 0x15, 0x2, 0xea, &(0x7f0000000180)=[0x8, 0x9], &(0x7f00000001c0)=[0x4, 0x8, 0x0, 0x8, 0xffffffff, 0x6, 0x401, 0xffffffff]}) [ 700.078546][ T3671] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 700.087717][ T3671] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.095971][ T3671] usb 6-1: Product: ã½ì¹Žåㄳ籴㟭뇖⳨늿挳íŽã°‹Â¥ä«¾çŸšâˆ“á‘뼂稜ﱔ㰗㩊뫜á¢æ±€ÆŒê„‹à©¾í„æ¶ê„¯éŠ‰é§®ë»ƒÇŠèŸŒà«Œå§í¿ã£¾í‹ˆã‰¤å˜šÎ‡ê‡°ë‚¶î„¶çº è’«ã®Œìµ•â¾Žï‰¤Ä„㴨㚺ꤩ䋞è…á©‚ì°Žáš¹êµâ˜«ï¶‰ï¬Žå­±ç§«ï‰±â±¬äŸªå—´ê¿µæžŽá® ä¾©é¹¯â–Žê©ªè™¾ï¡¡í‘ á¢¯ã¦–ꥂ髌ﲕR껞§Қìƒí‹„魦鿑䪨쥬 19:42:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b32, &(0x7f0000000000)) 19:42:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x400000000039604, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="1b5b073b31000000000000000000000000000000000000000000000000000100720000000000000000000000000000000008000000003800000000000000000300d48b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0984c43e047749143d1d58b91de8bf9e4ec40032d103f97e95cfa35079d23a69fbc76033eefe347d11005746be6f446ab1e09033ef688e96388630a5bcbc160123556f3f6b508daee38e77938a973"], 0x78) pidfd_open(0x0, 0x0) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000300)={&(0x7f0000000240)="0bb2c56a755d6f323047aafdecffd77982413f1866ec32ae4ecaab7307b2241eb759e92bdf7129524b48208d9703edacf8f2549f448bd0688a61b3213307723f0f4208490ba039e52fea84141102361f2f914969bc04c8adb1440bf611e63888eb113f1d9f95a3e89aa08c6f0c0f18b9031674bd05fad74a6ce399f15dc84f7231ed38e0e04db89d8b7996638fb24c179410b94150ce31", 0x97}) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000001c0)={0xa20000, 0x4f70, 0x7fff, r8, 0x0, &(0x7f0000000180)={0x9909d5, 0x3, [], @p_u32=&(0x7f0000000140)=0xffffffff}}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, &(0x7f0000000200)={0x1, 0x2, 0xfffffffe, 0x3, 0x7}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x100, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x800) 19:42:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x80) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x183, 0x0, 0x4, 0x9ff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 19:42:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b33, &(0x7f0000000000)) [ 700.220961][T27160] __ntfs_error: 11 callbacks suppressed [ 700.220971][T27160] ntfs: (device loop3): parse_options(): The mft_zone_multiplier option requires an argument. [ 700.257545][ T3671] usb 6-1: Manufacturer: æ¸á³¼é †á£§é”¨Íšå–¦æ¹†ë‘휃펊í‰ç°Ó¢å‡´î¬™á„—㾗瞇⯻㹗㈓나ྺ귛姯磪怯ે妻ᒫﱜ㕚６ë­ã–¼ç›½æ­¤ï¦²ïš—ꤹ⚺௫㚫녠뱵ᾎ뚜䙡➸亿ᙱￄ纋꟞ঢꓵꖲ躮蟨ì¾ë ¢ì±›ç™’ì¶êŸ¦î¡žëˆ½í“Œí—å…僟Գ⊠䪙騇푤á¬î–”銥ﶿÄ環帋湛è¥àªºå«„쯒仗꺾℆⵮჉꘎ᶚ撺㢡èŒè»ˆî»æ™‚긂⋸㛋꺧輇㎖ꮋꡇ푶຃ᶕ顟秞閌 19:42:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:42:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b34, &(0x7f0000000000)) [ 700.257565][ T3671] usb 6-1: SerialNumber: ꃙç…䞨畼땧Ÿᥴ雮䜘渑㙟䀽푄퀓䆃ã¼ëŽ“ꋄ㘬옔筡懣椭㣼몿ཟ뛢갘斈䊧䜶ᩂ䓒冨媀䟽车è£ê«ˆæ•„âƒâ˜·ê™—î‰ [ 700.290049][ T3671] usb 6-1: can't set config #1, error -71 [ 700.295971][ T3671] usb 6-1: USB disconnect, device number 11 19:42:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x3, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x8000, 0xc0002) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x5, 0x1ff, 0x1b, 0x1}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 700.722747][T27160] ntfs: (device loop3): parse_options(): The mft_zone_multiplier option requires an argument. 19:42:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b35, &(0x7f0000000000)) 19:42:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 700.885733][ T29] audit: type=1800 audit(1593891761.610:380): pid=27168 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16061 res=0 19:42:41 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r2, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x212, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) 19:42:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x400000000039604, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000200)={0x1000, 0x640, 0x20, 0x300, 0xffffffff, 0x10000, 0x18, 0x1, {0x1, 0x0, 0x1}, {0x9, 0x3}, {0x8000, 0x4}, {0x3b9, 0xfb3}, 0x2, 0x80, 0x1f, 0x2, 0x0, 0x2, 0xffffffd2, 0x763, 0x822, 0x8, 0x0, 0x7, 0xff189c6e5c16b4d4, 0x0, 0x3, 0xb}) write$binfmt_elf64(r3, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r7 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001680)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c268", 0x1a0, 0x21, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @mcast2, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x19, "e5fb000005005357cd99e33bca98e246dc9027eb3334ea443e7fdc4049b892d54090878bee496aa11e07fb0f1db1a0ebe2f95347b0317613063381165c01f08fea1048ea59a6f2273e02707fdd7defc02bde3192360593169594710bddd04aead6c89c87778555de42d23236534ba1a799a63eb4532003a703b249e4628e4706bccc7a264ee85014d99a7fd4565d3c416c835a741eb4e97140e834013724d23450072f0087ac65295ca0d7c601c30de0161560e2d20c5b1052e9b208e25470e9fa884ecd2082ec38b3cb19c083"}, {0x0, 0x17, "14a142ef59c04e8e7b4db5309006bd98ec79847a52ed68124e8a24d3079fc53b81c039a7d59f992dcb481043f510a0ce1ebb98c07a624ff8c8cc0b4fd3b8e700196d1f5696e184393de669ffaebfbd494a9d6a5fedac0738ffc3dcb3c1b96e48fd063786ae5701f6aa5022621e665607848e20f162630df96d0a773993e97ae6b847e51883d73d66bb30b4375229cfd0c9c41f511bfbf2bca94caa7ce76be257173a4eae2b484117ac32acf6ea1a32def26c919c93055c"}]}}}}}, 0x1d2) 19:42:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b36, &(0x7f0000000000)) 19:42:41 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b5b073b310000000000000000000000000006000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040ffffffb1b381e6156509aad3564a2774d338ab1017e062f24663fe1cf1d3e5d58edfd34671ec5d65ce1b38ad2b472a372230e2478f9347411fa332a8e81fb9cf4452844f643bf58a96125778e1db0a16fd24f24d96627d229a61ce948df2e10e8ef1b65dd9e0dd42d5454b465fdf3b905c5aaba177759cff4809464b23f19570a25da6f30a2b595d5e7264467b1ec47a26eb3a913e8c07f43b4d8676d937af87f40fbfad9da957cdc6289ce0b532c3faa408e58264488e317ead6da3ab9d5393bbe68b3e35a84dfe5887350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008abe942e38ca302d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b44ba973c29903c594f846b3406800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7c6714"], 0x344) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESHEX=r1, @ANYRESHEX, @ANYBLOB="6812516d33acf9ea7facd1556c3026551f4c59f322b42ad55aee2d9093d89eb370133a1a2d73e08e5f", @ANYRESHEX=r2, @ANYRESHEX=r3, @ANYRESDEC=r2, @ANYRES16=r4, @ANYRES32=r5, @ANYRESDEC], 0x4) r6 = openat$cgroup_ro(r0, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r7, 0x540e, 0x0) 19:42:42 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair(0x25, 0x800, 0x8, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r3}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:42 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x0, 0x10}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r3, 0x101, 0xffff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140), &(0x7f00000001c0)=0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r0, r6, 0x0, 0x200fff) 19:42:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b37, &(0x7f0000000000)) [ 701.282058][T27231] dccp_v6_rcv: dropped packet with invalid checksum 19:42:42 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r2, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x212, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) 19:42:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b3a, &(0x7f0000000000)) 19:42:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000100)={0x10001, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0]}) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffd, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0xffdffbfffffffff9) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b073b31000000000000000000000000000000000000000000000000000000720000000000000000000000000000000000000000003800000000000000000000000000000000000000000000006f00"/120], 0x78) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x400000000039604, 0x0) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000000)=0x3, 0x4) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1b5b073b31000040000000a400000000050000000000000000000000000000004000000000000000000200000000000000000100000038edfffffeff000000000000000000000000000000000000000000000000004002003f0000000000000000000000000000000209000200000055000200000000000000"], 0x78) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x400000000039604, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@remote, @in=@empty}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) fsync(r0) 19:42:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b3b, &(0x7f0000000000)) 19:42:42 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r2, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x212, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) [ 701.947221][ T29] audit: type=1800 audit(1593891762.670:381): pid=27238 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16079 res=0 19:42:43 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8080, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000080)=0x8080404) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000002, 0x28011, r2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\a\a'], 0x28}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r3, 0x0, 0x100006800) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000200000000000000036000000950000000000000029292e4f4bafb1fa0000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 19:42:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b3c, &(0x7f0000000000)) 19:42:43 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r2, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x212, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) 19:42:43 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x8980, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x101, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x503c}, {r0, 0x1200}, {r5, 0x4441}, {r2, 0x40}, {r3, 0x8105}, {r4, 0x181}, {r5, 0x8000}, {r2, 0x2a12}, {r6, 0x2}, {r7, 0x2000}], 0xa, &(0x7f0000000900)={0x77359400}, 0x0, 0x0) 19:42:43 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0x1d4, r5) r6 = add_key$fscrypt_provisioning(&(0x7f0000000040)='fscrypt-provisioning\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)={0x1, 0x0, "72e110"}, 0xb, r5) keyctl$get_security(0x11, r6, &(0x7f0000000180)=""/222, 0xde) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:42:43 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1880, 0xc903, 0x4}, 0x0, 0xd, r0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000000)=0xc00) ioctl$TIOCSCTTY(r3, 0x540e, 0x0) 19:42:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b3d, &(0x7f0000000000)) 19:42:43 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r2, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x212, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) [ 702.866761][ T29] audit: type=1804 audit(1593891763.590:382): pid=27285 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir381979705/syzkaller.ZzfYpu/806/cgroup.controllers" dev="sda1" ino=16130 res=1 [ 702.904214][T27285] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:43 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x80000, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r4, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r4, 0x4, 0x39}, 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f0000000000)) ppoll(&(0x7f00000008c0)=[{r5}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:43 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r2, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x212, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) 19:42:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b40, &(0x7f0000000000)) [ 703.081315][T27285] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! 19:42:43 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r2, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x212, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) [ 703.144967][T27285] File: /root/syzkaller-testdir381979705/syzkaller.ZzfYpu/806/cgroup.controllers PID: 27285 Comm: syz-executor.3 [ 703.192283][ T29] audit: type=1804 audit(1593891763.920:383): pid=27290 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir381979705/syzkaller.ZzfYpu/806/cgroup.controllers" dev="sda1" ino=16130 res=1 19:42:44 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x8980, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x101, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x503c}, {r0, 0x1200}, {r5, 0x4441}, {r2, 0x40}, {r3, 0x8105}, {r4, 0x181}, {r5, 0x8000}, {r2, 0x2a12}, {r6, 0x2}, {r7, 0x2000}], 0xa, &(0x7f0000000900)={0x77359400}, 0x0, 0x0) 19:42:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b41, &(0x7f0000000000)) 19:42:44 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x262100, 0x80) getsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r1}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:44 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x23, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x4) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000240)='dummy0\x00') getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000080)={@private, @loopback, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@mpls_getroute={0x24, 0x1a, 0x400, 0x70bd29, 0x25dfdbfb, {0x1c, 0x20, 0x14, 0x20, 0xfd, 0x1, 0xff, 0x0, 0x1e00}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x64008001}, 0x4000020) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 703.300214][ T29] audit: type=1804 audit(1593891763.950:384): pid=27285 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir381979705/syzkaller.ZzfYpu/806/cgroup.controllers" dev="sda1" ino=16130 res=1 19:42:44 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) eventfd2(0x10000, 0x80800) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r3}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pidfd_open(0x0, 0x0) r4 = getpid() pidfd_open(r4, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b000000000000000000000000000072000000000000000000000000000000000000000000180000000000000000000000000000000000000400"/120], 0x78) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x400000000039604, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r5, &(0x7f0000000040)={r6, r3, 0x3}) [ 703.303229][ T29] audit: type=1800 audit(1593891764.020:385): pid=27303 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16114 res=0 19:42:44 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r2, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) 19:42:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b44, &(0x7f0000000000)) 19:42:44 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81d36bb3019c13bd3ac823e588404d333d0c2321af3cf1a54f26fb0b71d0e6adfefcf182a8c6dd77bfb07186a5426580d8f7faf75e0f226bd917487960717142fa9ea4318123751c0a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b32a83438810720a159c9a903634e369a9e152ddca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd963218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa0000000000000000000000000000000000000000ddffffff020000000000000000000000000000b27cf3d1848ab7459fde96f5aeb7f9deab3323aa9fdfb52faf9cb09c3bfd71e193ce429b5ed209000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f03000000000000001cf41ab11f12fb1e03494007000000c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b540500a30b23bcee46762c2093bcc9eae5ee3e980026c96f5989b8e673e3296e52d337c56abf112874ec309baed0495f06d058a73651d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d971f7a2591dbe4a92473a10fe5762409000000000000003f138f8f92efd92239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d30104000000000000d380a447483cac394c7bbdcd0e3b1c39b6e0c410ade7a36b2635d60916de48a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73755539280b064bdaba71f897144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06dddeb6179925b55ff413c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf880d29621c3ffd59c3a0d062357b22515567230ad1e1f4933545fc3c74137421166596b63b1dd044dd0a2768e825972ea3b77641467c89fa0f82e8440105051e5510a33dd0c2ab3e2dcda5e143fbfc7ee9fb2d92d6f45588171221fff161c12ca389cbe4c51b3fa00675cc175067d2a214f8c9d9b2fcf63b66c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f39113be7bdd7115c7ba680b85d7d3aad0b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad97334e6bf9c2a8efd7d437d0de7baff231a1b933d8f931ba3552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2af79b8d4c2bf0f7a2cb032dad13007b82e6044f643fc8cd07ae636a5dbe9864a0a7d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf7f9fe0bc9f2a1a7506d35e5eb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1c1cc83d90e2a9da00000048a9dea00000b91d2309dc7ae49e4d5f52053a39e7307c09ff3ac3e820b057dd74d4aafc4c383a17bc1de5347bb71ca165cbbbaa2935f602327484386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67aedc002d2bce4c41ed04b790a8ccc9afe09d3f8dbbe333bc0f128270de700a1222a27e3f310a3abe884fd2fe21133279118c603769b17ab27fbe36dffef6eaa58adf18642b2d144d88ba63587b79b079999a24fb263c8cea69818b70911edc6a089fb05d3edc2acfd3b95d871943c88ab3f1f7d5349c57719857a1c364f6256f67f0c70be1fae38fb2bf58a1f047261af205369be5fb3eab7a3270b98843f8d5622ec583845aeb52b953ab074ce699ffd2c5709b40e27ed624365ad76d17f08df570e690e9f2e6742d12fe8192fa2aebc7bed7ac4c07d7aac19ccf63662c342643e470360e019839edc48e4d23637369efddcc4206742eab7d160500057429034d347865dd5ecd2c6a795dba6c79815002e009c6e4d36bb176196c1e203c141ca06af3fc7bc655dd02648a8ee24479f464ff589069ee32a3d5d0179481b2feed8957edc7a6a66df94616b5d7edbb4618bb42d5a8130491116a5ddca1a4f8427f033b0a5c8274c812542928a7fe31e2f0ac15c600a01fe5554266cdda4852538dfdaea71ce05c963308338f16745f493b466503cb8e30f480083dbc5cac2b969fa1fe163b50d109f1ff294273de4d12ccb408612fb938beaac3f8f409645178c38773a3743116c13bd1914db81421bf565f4bfd9d2a01d4fb437404d162d0e428e9b510ee91d9d309eb9e09e3b186c8aac8a1802974f8032a92c7dde805959b461bb1f08886f3cc16d396bed5cb99beaaa38a8f60d8e17aa8c4e8ba8b27bb1b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x10}, 0x78) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000280)="04", 0x10000a}], 0x1}, 0x0) 19:42:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b45, &(0x7f0000000000)) 19:42:44 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) 19:42:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b46, &(0x7f0000000000)) [ 703.880701][ T29] audit: type=1800 audit(1593891764.610:386): pid=27334 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16094 res=0 19:42:44 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) write$binfmt_aout(r4, &(0x7f0000000140)={{0xcc, 0x7f, 0x1e, 0x1c5, 0x15f, 0x9, 0x9, 0x3f}, "21c6151e0c00b12734021b586769b431ee00d39c4c85b149c0115875d9e0c5610b38f7d602bef24d5949aeea234c63af1723e56266baea5dd02f6e0adcc564a0654aa101490bfa50dd0ec809f26757de1021ccfcd1f3cea106f663f4d39262d9bceaadb341e289eada60887173a243eab4def4cae175185047d74ba4245c7f2e62471422a098c8364a6b1f938b160138f6b3e2aa9bf7dc0a2b7920ab42c2a6c4ed85ef17c3a4f359f5c15bfb5361d818558907c551e3e0df90bd2ae734973f130fa2d5e3f57a5fed85f09a4e61da6eec62", [[], [], [], []]}, 0x4f1) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) 19:42:44 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX]) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x1001400, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYRES32]) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r4]) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x1001400, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYRES32=r3]) r7 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r10, @ANYRESHEX=r8]) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x1001400, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r8, @ANYRES32=r7]) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x6}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x2}], {0x4, 0x6}, [{0x8, 0x7}, {0x8, 0x3}, {0x8, 0x4, 0xee01}, {0x8, 0x1, r4}, {0x8, 0x4, r8}], {0x10, 0x4}, {0x20, 0x6}}, 0x6c, 0x2) 19:42:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b47, &(0x7f0000000000)) 19:42:44 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) 19:42:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b48, &(0x7f0000000000)) 19:42:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xa0, r2, 0x220, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff7fff}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "795adfae6fd4e62faea851cdb57ca48b775b99ff3581654c1f5a1031990ebbb3010bceba"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc041}, 0x2004c840) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000)=0x8) ppoll(&(0x7f00000008c0)=[{r3}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) poll(&(0x7f0000000040)=[{r4}], 0x1, 0x0) 19:42:45 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) 19:42:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b49, &(0x7f0000000000)) 19:42:45 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, &(0x7f0000000680)=ANY=[], 0x2a8) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0xc7, 0x1, 0x0, 0x0, 0x0, 0x48a69, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000e72, 0x0, @perf_bp={&(0x7f0000000080)}, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) setxattr$system_posix_acl(0x0, &(0x7f00000005c0)='system.posix_acl_default\x00', 0x0, 0x74, 0x1) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x180, 0x0, 0x820, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0xb4, 0x3, "76e1e3a872958fb8675eca2a6e93011c2a9b5c97b5ae7ec66af9f61c0563ad4d802121c0e60e1db35b8c0c8bce3d602ced55d288c0f30ef6ec6ccb3f0bde2a1d75ec14a4509299a932160dd283af61599a3e35c04341c0f35243867c5e3a7f7eacb72ec00c6001b46f4bcaeaa643855593ef7d5d17714b5b0412d77aca978a95fa17a40d063e79df329f1b077159c92dac253e28a4547fe429a213cc1d406c3bca2af161f02a6054ceb3aea14e203b19"}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3a8c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6d95}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0d9fba4e3d9915c482a41239b8532f58164a51e3"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x34}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x1}, 0x8000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44800) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) lstat(0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 19:42:45 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:42:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b4a, &(0x7f0000000000)) 19:42:45 executing program 1: pipe(&(0x7f0000000000)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) [ 704.815143][ T29] audit: type=1800 audit(1593891765.540:387): pid=27390 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16226 res=0 19:42:45 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) connect$caif(r0, &(0x7f0000000040)=@rfm={0x25, 0x6fb0, "b758690d1ac4e0bb91ee70c1b8a07dc6"}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x82, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x511300, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x400000000039604, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000040)=ANY=[], 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000000c0)={r0, r6}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000040)=ANY=[], 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r7) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0xb) 19:42:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b4b, &(0x7f0000000000)) 19:42:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ppoll(&(0x7f0000000040)=[{r0, 0xc812}, {r1, 0x188}, {r2, 0x4310}], 0x3, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0) 19:42:45 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x2002) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f00000000c0)=@generic={0xb, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r6, 0x80045519, &(0x7f0000000080)=0x6) ftruncate(r5, 0x3) sendfile(r0, r5, 0x0, 0x200fff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[@ANYBLOB="401400000a72ad668cc47da5c51ff324001d0000fdffff1cdbf22088ffff09d57a41854d31413a3ab686a5de2973a1a3fe51c310b05fa134ac08a2d42d0e315853ace026346f37731182182e801a77e3a563002834c3cd4b81349300ce3bf659fcad34b4e9f40323ae89841a394ef0664f6d7f118b9fabda01b2a7e553215dd349e279423278bd39470dae0819f592d22d5c83b1c4554b257ea3447fe042a71ba60e2ade772660989f727587", @ANYRES16=r6, @ANYRES16=r5], 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x4040081) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x54, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc15b}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x1) keyctl$join(0x1, &(0x7f00000012c0)={'syz', 0x3}) 19:42:45 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) 19:42:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b4c, &(0x7f0000000000)) 19:42:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x400000000039604, 0x0) r7 = openat2(r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x90000, 0x21, 0x12}, 0x18) dup2(r7, r2) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008004}, 0x40804) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x80, 0x5}) [ 705.114408][T27402] overlayfs: filesystem on './file0' not supported as upperdir 19:42:45 executing program 3: syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x84000) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x40088) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x0, r0, 0xffc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350600000fff07086706000002000000170300000ee60060bf050000000000004f650000000000006507f9ff01000000070700004c0000005f75000000000000bf54000000000000070400000400f9fead4301000000000095000000000000000500000000000000950000000000000032ed3c5be9529914953170d2d7ffffff8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d15871637a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fc9de56c9d8a814261bd2b4a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546c087431d7700000006e7c955cfa1f6ab689fde4de5f63ede20271a51445dc8da39e5b0ab7010001000000009af619e3cca4d69e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d74ec88148f0200000000c8fb735fd552bdc206004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d702a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f11294b482af97787f696649a462e7ee4bcf8b07a10d6735154beb4000004000000000000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887b52d103649afa17690884f8d2001e03a651bb96589a7eab04871bc47287cd8d8c1aa3ef18d45200b7861bbd0000000000000000c59050647802cf86f1b4c3005f37d83f84e98a52fbbecd106425563d80bd0d0d703f37ca363f601ae899a53f6715a0a62a34b0c94cce699452050000000000000026a0f6a5480a55c22fe394ac000000000000000000040000000000437d57defb79ea6a58bc3eeed729a2f95e1d6a1fc3857ff51b324be00000000000000090867f577cdde2144d9d7a3b9bc43717188cb8426286fc55fc57cc3c6de4aa67babf350709e282a4f2bf59f46e20465eae865dbfd533b1cb2d540d0490cd5248715c74b6bd0248a9a0b417bbdfb5351defc6e34a961f3593920437bf3cbbc04600c64acad9a04ffe62875177b51d3e2f0c6d7194c26789d2bec2d0846831455b8fcde5beaeca2c1335d8a49a92f9d2bef5f485c4b6f4cf710b7d4550e6f2d830dfcd9d47d50ea838bdf8901a719431a9d1ef918ec0ec79037cb61df16379e3bf2a1127c49407e8512e21080315e62559e8dd67dae85177d899d9e078f80585837f0e943b8820b19c75d243a78d8c2093c59cbc4c55f1578cff737502ea2d8dc5eee909928d0b9dc946dcb30692dc88db84834cc7726429cb20603b5338184f9828aa802e37d3c4f259d616307d8ab86ca094049c0ddc1caaed5485b4ff030000182620bcba2316f9e6df0c864700000000000000000000386096e4a4ff86042f0b42027ff933d2dfe2d5baffacc9dc2411302a185ea454af5839be28b7d0fe6ae0fd63fa7f32b8ab6cd6a8b8bf1b7d3ed9f8c2a6b6f46c7dad2f9e939c92d63ab1cf2fbea215b96a604444f8c391c0d9b647a3be4885a055ce3879a91fb62ca97e6526286c14c80b6dc981c5ae6ebf0778ea01a3a44e01ab79bcccbb83266a1ce1a1dea83ebb89d07b35b1aa09ad2904040e7784e96cd66bda204d47b1c66d5a84e7c3de1d1062fd8a23d1b4e2313c177e76dbca599691164ade323ad4a17abe99975cba748bc2379eed5a83dc94947eb18976db8ba6d301fb65a3d8b5baa9bbec017646649fa99537aa453f3e6b2acebeddb6c32a87455f351efc30260941825ba884d7db07e1212033409e62d7154cc68a7ee910e3d3470cdb781817f85373a6c7fd1b626035b666e224a66c0e47e15c6b836b324318507501a0f4b2cc9153167fd839a483615cbc2ad1a7d1528f01bf91b950a9bcd7d06491e1a355e476365f653d2d94ba899acbd64d70bdb364ef3adb5ba1e4d9d5d217c02b"], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x80000001) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14, 0x800) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5f0, 0x440, 0x120, 0x210, 0x350, 0x0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, &(0x7f0000000040), {[{{@ipv6={@rand_addr=' \x01\x00', @ipv4={[], [], @private=0xa010102}, [0x0, 0x0, 0x0, 0xffffffff], [0xff, 0xffffffff, 0xff000000, 0xff], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x21, 0xcc, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@eui64={{0x28, 'eui64\x00'}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x7f}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@private1, 0x0, 0x37}}}, {{@ipv6={@private2={0xfc, 0x2, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, [0xff, 0xff], [0x0, 0xffffffff, 0x0, 0xffffff00], 'gre0\x00', 'vcan0\x00', {0xff}, {}, 0x62, 0x80, 0x2, 0x60}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010100, @ipv4=@empty, 0x1e, 0x2b, 0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1, [0xffffffff, 0x0, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], 'ip6gre0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x0, 0x82, 0x0, 0xd7496f8f69c9d167}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, [], 0x1}, @ipv6=@loopback, 0x1a, 0x29, 0xffc0}}}, {{@ipv6={@loopback, @loopback, [0x0, 0xffffff00, 0xff000000, 0xffffff00], [0x0, 0xffffff00, 0xff000000, 0xffffff00], 'virt_wifi0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x87, 0x5, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x3, 0x3}, {0x3, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x1}, 0x0, 0x80}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) set_tid_address(&(0x7f00000000c0)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xffffffffffffff9b) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) 19:42:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b4d, &(0x7f0000000000)) 19:42:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) 19:42:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b4e, &(0x7f0000000000)) 19:42:46 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000080)=0x8, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) 19:42:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000004c0)="fe", 0x1}]) io_pgetevents(r1, 0x2, 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)={0x77359400}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x480, 0x88) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x3fb, 0x400, 0x70bd27, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000010) 19:42:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) 19:42:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b52, &(0x7f0000000000)) 19:42:46 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000000)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x7], 0x0, 0x2003, 0xa}) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x35}}, 0x4e5}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, @in6={0xa, 0x4e20, 0x8, @local, 0x8}], 0x58) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 19:42:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) 19:42:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b60, &(0x7f0000000000)) [ 705.977862][ T29] audit: type=1800 audit(1593891766.710:388): pid=27447 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15826 res=0 19:42:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0xffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) accept4$alg(r4, 0x0, 0x0, 0x0) r5 = accept4(r4, &(0x7f0000000040)=@x25, &(0x7f00000000c0)=0x80, 0x80000) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000100)=0x2, 0x4) 19:42:46 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) 19:42:46 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:42:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b61, &(0x7f0000000000)) 19:42:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000005c0)={0x164, 0x15, &(0x7f00000001c0)="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"}) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x387, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x202}, [{0x3, 0x9, 0x0, 0x81e, 0x4, 0x3, 0x2, 0xb5}], "6be88f03a1ccb5e77eb8bd0ca77355c34a70980fd4ac76218ea3e23237e4c210b9ced7626548bbf9197620715401f60d8a7d64cb9f4ba4cef0358a2d793d2e9ffd3a29a01e348557ab4a59c84baeb15337054610c0a16fc4e1ab332b80304e1cbccc31562aa08b008e07f07793db7b619c050000f4c0b5c54cb09d43a059a427f38db14ca2ade8f6f650637a436a0a53dfc6ed1d64e78968c0dc01d75ae6404c423992fec2f7bc762bb82c73d461baa54c2aa2ea8a97825a07c8d79097a77c9fb6cefc4489e1be30bcc52536ea409cb4bb7c59a89c802a63d2a68135cd11d5bdd4c18eb39b502fa26b8f"}, 0x162) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[], 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000000)=""/12) 19:42:46 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) [ 706.616781][ T29] audit: type=1800 audit(1593891767.330:389): pid=27483 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15987 res=0 19:42:47 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) 19:42:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b62, &(0x7f0000000000)) 19:42:47 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) sendmsg$L2TP_CMD_NOOP(r1, 0xfffffffffffffffd, 0x4) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x1f}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$trusted_overlay_opaque(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x3) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, r3, 0x711, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008800}, 0x200408d4) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:47 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x2240c0, 0x0) ftruncate(r6, 0x2000002008002) sendfile(r0, r4, 0x0, 0x200fff) 19:42:47 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x9531}, 0x82e0, 0x0, 0xd6, 0x1, 0x0, 0x9, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x400000000039604, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, r7, 0x3, {0x2, 0x1, 0x3}, 0xfd}, 0x18, &(0x7f0000000280)={&(0x7f0000000200)="4c6c5fa6a8b89687e03b8829290488dd9df7e25f37d5e0ab9f593f3c33b58a75713b3d21ceff89afd24e70985bcd9d9a3a41b6f2fc0f2850361a072937969503ccc9444bae7f8dd8773255b5c6cb7cdcfcb604009501949346cd446a3055df2b84261aadb5e78c7af29f8051313c3eb2d5", 0x71}, 0x1, 0x0, 0x0, 0x400c080}, 0x4000800) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x20) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r8, 0x540e, 0x0) sendto$isdn(r0, &(0x7f0000000040)={0x4, 0x9, "87d43e4f0b5ee41b5cf794d6052283600f7025257aee7635e2a5e8e8fb426d62f956f50a8f2ed5c8a2112df3bb"}, 0x35, 0x20000040, &(0x7f0000000080)={0x22, 0x2, 0x6, 0x28, 0x1f}, 0x6) 19:42:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b63, &(0x7f0000000000)) [ 707.000723][T27507] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:42:47 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 19:42:47 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000004c0)="fe", 0x1}]) io_pgetevents(r1, 0x2, 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000080)={0x77359400}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x480, 0x88) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x3fb, 0x400, 0x70bd27, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000010) 19:42:47 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x400000000039604, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r3) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r6}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b64, &(0x7f0000000000)) 19:42:47 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 19:42:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x1c640, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x3) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x7c88, 0x1}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r3 = syz_usb_connect(0x5, 0x42b, &(0x7f0000000200)={{0x12, 0x1, 0x101, 0x7, 0x1f, 0x7f, 0x20, 0x7b0, 0x6, 0x75b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x419, 0x2, 0x0, 0x2, 0x40, 0x1f, [{{0x9, 0x4, 0xe5, 0x35, 0xd, 0xd6, 0x9b, 0x85, 0x7f, [@generic={0x74, 0xf, "d974545c969f7b7275be2da5edaaca54ccea7305a81576d6414f32613ebd9c33336d7f1b0a0f9a407e0794a0562f479e4477f2a6197b4aca527ad8a90fcc80014473fde27630f61d1686df01c68d0087cf8b8bbb96295a88c0d5bf9eadc845d38aefbecea1c14f859fd4d0078755adcf2f17"}, @uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x1, 0x81}, @as_header={0x7, 0x24, 0x1, 0x1, 0xff, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x7, 0x4, 0x4}, @as_header={0x7, 0x24, 0x1, 0x8}]}], [{{0x9, 0x5, 0xb, 0x2, 0x40, 0x5, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xc8a4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xffa0}]}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0x0, 0x0, 0x1a}}, {{0x9, 0x5, 0x8, 0x8, 0x0, 0x1, 0x1f, 0x4, [@generic={0x88, 0x30, "9a9690db71cb64d59a2035fcb71652da2fcd484a7dd623015254af8ffd3d1e7ab7c6266dfbe9331ebc7e6f56638f4d49914fae128671f51d52e25485e8f7c40c3719ea43727de11cf9b5b89ce56b36e124e66b6cb8547243afd3b10ba15f5e210f49034c8113c973861fc508872609d983e64fc58c0e41fca49ee3a334b754ff4d1bae919c9a"}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0x5, 0x3}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x4, 0x9, 0x0, [@generic={0x37, 0x11, "153f8b60051ab46c3243fe65e7548c2bf1a65f0d9c98816a7097832b522ef4ab20fc15000f4a8dc12ddc5b5dfa2b4f2d5512e54b11"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x3}]}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0x3f, 0x3}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x0, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0x8, 0x4, 0x0, 0x0, 0x1, 0x45}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0xf9, 0x20, 0x0, [@generic={0x6a, 0x31, "06da9f21ecb519f148bf6995735ab9a365183493b023e5d300109577043eac3fa5069870b6bd7c025de7708b60ed1c4bd8c638f930db6772b4e5aeb4a5ab0374c793b6ff23258a4649ecf0f35ddf418b1006d621cae28cd52370097a8a074f73c969e5ef7ea736c3"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3f, 0x4}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x1f, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x7f}, @generic={0xf2, 0x22, "b6dcf89ba216fde8815cb6df95636661634d460868f92c9b1b1a1f56fd775f9f966d5f75093ae6ce7ce93beb9f8727c837b3ced1a04b0d425d0325ee462dd0cfb2680e10ebfa12e1486b2c5f6972a6f7db1945a909023ef38a655e32fb0e4174213158c6ef858afe9fff69775717b0e34782a59e0b60b5509cbc38d04576e4073694e81425255bac88bebdeaa96f58849157da62587414ae6490bfc07a80c7822c6138570964bfa13240ceb2eb9a0b64d235c0f3d976441e1e1d0daada350198e343eb694d2bd95bafd0e7f43cc0a2069b2a64bd23173d1a3a220cb6343c98cbab3604ff33ad7f8b87ea9880fce2fee3"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0x81, 0x2b, 0x92}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x3f, 0x3, 0xef}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x1, 0x1f, 0x5}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x40, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xffff}]}}]}}, {{0x9, 0x4, 0x25, 0x81, 0x4, 0xa4, 0xd2, 0xa7, 0x20, [], [{{0x9, 0x5, 0x80, 0x0, 0x400, 0x8, 0x1, 0xe9, [@generic={0x80, 0x22, "6810e1ff99e00eb4d4db991008c1a58df9d15f36411464d38c8b3859a8226f56ac472dd984b6cd3c3e5fad5200202c8b288b7790103983a0566a766ea36dec796df49971ec6cdc0449237c73cdba437506c288e45fd697b38f57702ae4b7cb9bba630ffdb66b1a1fa1b809ab6c2e44ac308fefd15d9506c2c85fe8c509ac"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x7ef, 0x7, 0x9, 0xba}}, {{0x9, 0x5, 0x0, 0x4, 0x240, 0x80, 0xff, 0x9}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x3f, 0x40, 0x3f}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x24, 0x6, 0x81, 0xff, 0xd2}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x9d, &(0x7f0000000640)=@string={0x9d, 0x3, "c0ec924a75e2c801a701ad86a9864d996532cdfe1f27d2c7a258ed60e281f5d0dbb6e1241c6208afd1beae2de873e7308afa2157ce56a8cf5327b8f12bd60f39324783774badeb86be67c61f213214f4855441ae6f3de704f9efe2358f237fdd208ead61e0e5a8088f3a81903fcad09de8f3ac32d1ad84d36906385fc441dcfc41ef5beedba71af03a7d083ff07dfed9355be1daa3081d8dffe9cb"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xfcff}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000800)={0x14, &(0x7f0000000780)={0x40, 0x23, 0xa, {0xa, 0x3, "b64e8af9d8630319"}}, &(0x7f00000007c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x1c, &(0x7f0000000840)={0x20, 0x18, 0xb1, "2694c648dd2e199cfc60dcf0442e494c101cae6428b36024c6b39bf844202ffbcb8d7607c9fa1b6fdeedcfaa1947583795540a85a475f899aa4c3f55907540e47b93537b7a3b1b501363c45db3a1bfee8945495612b860d0004c78af2760bd2398df073ca0a38e232d0c06c5cf5f383239cf902c8154f6e45fd6bb67d6174e5c4cf917286cea740dbed2bcd0f4d05add6aaef4f8a6e9e230c3b3ef006f5e1490217b5ac59f5d027e77f823cf83529481fc"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x2}}) 19:42:48 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1d, 0x80000, 0xfffffffe) bind(r1, &(0x7f0000000040)=@x25={0x9, @null=' \x00'}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r3, 0x80184151, &(0x7f0000000100)={0x0, &(0x7f00000003c0)="8a2792c25fc7558f044b1823905c1e5a6e836760bd86369951cda2bb203df4d025cbe33fcdc3cc11025ab9471ab8882b2ada802150b9ec8138930e9f07655fe8a14a1b5998b932bf7670fa178339e529a895f5b939a32bc8cd97d2", 0x5b}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000a697c4214f76574a114410404f0c51ef80086153d6bc8aba10bdbe0cca67b0b2f99c530b922be3e7a6d0e7a0a914522e750d6f04cf1412bca7c37e24bce5466082629c75a2a126b6ba000000000000000000", @ANYRES16=r4, @ANYBLOB="0d090000000000000000050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030004000000"], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="d4eeff0031599c95d069f949a4454e276ef8a7e796e7b71800004f1b8b0822ef0465fc51d06a3fcb1de4ff030000a28e0f491050e909c9aa219b1d31a3bd64c9d65409b6ea0815e9a0943cddcf", @ANYRES16=r4, @ANYBLOB="200027bd7000fbdbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000080001007063690011000200303030303a30303a31302e300000000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e30000000000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x200480c0}, 0x4008000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x80001, 0x0) ioctl$BINDER_SET_MAX_THREADS(r8, 0x40046205, &(0x7f0000000440)) sendfile(r0, r7, 0x0, 0x200fff) 19:42:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b65, &(0x7f0000000000)) 19:42:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 19:42:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b66, &(0x7f0000000000)) 19:42:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) 19:42:48 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040)=0x7fc000, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000080)=0x1, 0x4) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 707.499867][ T29] audit: type=1800 audit(1593891768.230:390): pid=27539 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16118 res=0 [ 707.526647][T10327] usb 6-1: new high-speed USB device number 12 using dummy_hcd 19:42:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b67, &(0x7f0000000000)) [ 707.776562][T10327] usb 6-1: Using ep0 maxpacket: 32 [ 707.926984][T10327] usb 6-1: config 0 has an invalid interface number: 229 but max is 1 [ 707.935185][T10327] usb 6-1: config 0 has an invalid interface number: 37 but max is 1 19:42:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x400000000039604, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r6, 0x0, 0x400000000039604, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$EVIOCGBITKEY(r0, 0x80404522, &(0x7f0000000300)=""/224) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r9 = accept4$alg(r8, 0x0, 0x0, 0x0) splice(r7, 0x0, r9, 0x0, 0x400000000039604, 0x0) ioctl$DRM_IOCTL_GET_MAP(r7, 0xc0286404, &(0x7f0000000140)={0x0, 0xa1d, 0x4, 0x40, &(0x7f0000ff9000/0x4000)=nil, 0x200}) 19:42:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b68, &(0x7f0000000000)) 19:42:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x5}) 19:42:48 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x38203, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r3}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) [ 707.971246][T10327] usb 6-1: config 0 has no interface number 0 [ 708.003689][T10327] usb 6-1: config 0 has no interface number 1 [ 708.039849][T10327] usb 6-1: config 0 interface 229 altsetting 53 bulk endpoint 0xB has invalid maxpacket 64 [ 708.052559][ T29] audit: type=1800 audit(1593891768.780:391): pid=27554 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16120 res=0 [ 708.105309][T10327] usb 6-1: config 0 interface 229 altsetting 53 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 708.152200][T10327] usb 6-1: config 0 interface 229 altsetting 53 endpoint 0x8 has invalid wMaxPacketSize 0 [ 708.174858][T10327] usb 6-1: config 0 interface 229 altsetting 53 has a duplicate endpoint with address 0xE, skipping [ 708.194600][T10327] usb 6-1: config 0 interface 229 altsetting 53 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 708.216778][T10327] usb 6-1: config 0 interface 229 altsetting 53 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 708.236161][T10327] usb 6-1: config 0 interface 229 altsetting 53 has a duplicate endpoint with address 0x8, skipping [ 708.255863][T10327] usb 6-1: config 0 interface 229 altsetting 53 endpoint 0xF has an invalid bInterval 129, changing to 7 [ 708.269062][T10327] usb 6-1: config 0 interface 229 altsetting 53 has a duplicate endpoint with address 0xE, skipping [ 708.281519][T10327] usb 6-1: config 0 interface 229 altsetting 53 has a duplicate endpoint with address 0xF, skipping [ 708.294570][T10327] usb 6-1: config 0 interface 229 altsetting 53 has an invalid endpoint with address 0x0, skipping [ 708.306978][T10327] usb 6-1: config 0 interface 37 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 708.318879][T10327] usb 6-1: config 0 interface 37 altsetting 129 has a duplicate endpoint with address 0x1, skipping [ 708.330811][T10327] usb 6-1: config 0 interface 37 altsetting 129 has an invalid endpoint with address 0x0, skipping [ 708.342991][T10327] usb 6-1: config 0 interface 37 altsetting 129 has a duplicate endpoint with address 0xA, skipping [ 708.354934][T10327] usb 6-1: config 0 interface 229 has no altsetting 0 [ 708.362968][T10327] usb 6-1: config 0 interface 37 has no altsetting 0 [ 708.553642][T10327] usb 6-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=75.b6 [ 708.563049][T10327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.636845][T10327] usb 6-1: Product: syz [ 708.659202][T10327] usb 6-1: Manufacturer: ﳿ [ 708.679662][T10327] usb 6-1: SerialNumber: syz [ 708.698083][T10327] usb 6-1: config 0 descriptor?? [ 708.726951][T27533] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 708.743237][T27533] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 709.298763][T10327] usb 6-1: USB disconnect, device number 12 19:42:50 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2fd, 0x69, 0x0, &(0x7f0000000280)="b95b03b700030700009e40f088641fffffe103000057638477fbac14143fe0004301c699da153f08a0e6e380f6010af683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x5b00}, 0x28) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 19:42:50 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x5}) 19:42:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b69, &(0x7f0000000000)) 19:42:50 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000180)=0x9, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000040)={0xfe, 0x2, 0x5a}) r6 = socket(0x11, 0x2, 0xffff7fff) bind(r6, &(0x7f00000001c0)=@can, 0x80) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) ftruncate(0xffffffffffffffff, 0x2008002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200fff) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') 19:42:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23e, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}], "", [[], [], [], [], [], []]}, 0x678) ioctl$KDDELIO(r0, 0x4b35, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r1}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000480)={{0x0, 0x0, 0x8, 0x3, 0x2}, 0x0, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x153b5ce9, 0x9, 0x6, 0x80000000}) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x2bcf) shutdown(r0, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x4, r1}, 0x10) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2b8, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10) getsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x42bc0, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 19:42:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b6a, &(0x7f0000000000)) 19:42:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000100)={0x9, 0x81}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) flistxattr(r4, &(0x7f0000000000)=""/212, 0xd4) 19:42:50 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x5}) 19:42:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b6b, &(0x7f0000000000)) 19:42:50 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000040)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:42:50 executing program 3: getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x17, 0x0, &(0x7f0000000200)) 19:42:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b6c, &(0x7f0000000000)) 19:42:50 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:50 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 19:42:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000004c0)="fe", 0x1}]) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1b5b073b3100000000000000000000000000000000000000050000000000000040000000000000000000a63dfba84bf15433f77c00000000000000000000483ce3500479000038000000000000f87c76a27feb06ab6c155a86"], 0x40) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) accept4$alg(r3, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000300)=0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) fchmod(r2, 0x21) io_getevents(r1, 0x0, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000140)) 19:42:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b6d, &(0x7f0000000000)) 19:42:51 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2fd, 0x69, 0x0, &(0x7f0000000280)="b95b03b700030700009e40f088641fffffe103000057638477fbac14143fe0004301c699da153f08a0e6e380f6010af683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x5b00}, 0x28) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 19:42:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) [ 710.396499][ T29] audit: type=1800 audit(1593891771.120:392): pid=27645 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16382 res=0 [ 710.627434][ T29] audit: type=1800 audit(1593891771.360:393): pid=27651 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16127 res=0 19:42:51 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x400000000039604, 0x0) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="02140306330000002cbd7000fbdbdf250400040004000000250800000000000009000000000000000400000000000000040000005fd00000050000000000000001040000000000000000000000000000010014007f000000010014000600000005001a00000000000000000000000000000000017f0000010000000000000000000000000f000410050019000000000002004e24ac1e0001000000000000000002004e23e0000001000000000000000004000200040000000008000000000000001000000000000007000000000000006115001800fcfd9b0036a40be015e5307b7384b46d223b6631bc2889face34e2e852187f2f63f889fc99a6df4c3ce0a7e94797ce1eb77af013d2a973f88e04522b512d19d33ab1284e421ef6f76a536262d865019d349c2223789a410c53d7279de37d5d781e8edd1a1db34aa02f93a93bf01eea15355a549ed1650cdb6cf89f18ef3c30f21581dcf7a19011cd0e969198d2408cc34e754b23376e706205ec8ac01d0426000000000002001000000004d6000004d60000000002000100000004d481015600010000"], 0x198}}, 0x8000) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) 19:42:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b72, &(0x7f0000000000)) 19:42:51 executing program 1 (fault-call:1 fault-nth:0): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0xa88) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 19:42:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x26}, [@call={0x24}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xc6, &(0x7f00000002c0)=""/166, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default}) 19:42:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000028c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0xb}}}, 0x30}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000100)={0xfffff001, 0x3ff}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x20, 0x7ff, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$KDENABIO(r4, 0x4b36) ppoll(&(0x7f00000008c0)=[{r3}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) [ 710.939010][T27669] FAULT_INJECTION: forcing a failure. [ 710.939010][T27669] name failslab, interval 1, probability 0, space 0, times 0 [ 711.002262][T27669] CPU: 0 PID: 27669 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 [ 711.010973][T27669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.025025][T27669] Call Trace: [ 711.028326][T27669] dump_stack+0x18f/0x20d [ 711.032667][T27669] should_fail.cold+0x5/0x14 [ 711.037271][T27669] ? tomoyo_realpath_from_path+0xc3/0x620 [ 711.042994][T27669] should_failslab+0x5/0xf [ 711.047423][T27669] __kmalloc+0x27d/0x340 [ 711.051801][T27669] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 711.057359][T27669] tomoyo_realpath_from_path+0xc3/0x620 [ 711.062913][T27669] ? tomoyo_profile+0x42/0x50 [ 711.067636][T27669] tomoyo_path_number_perm+0x1cb/0x4d0 [ 711.073106][T27669] ? tomoyo_path_number_perm+0x183/0x4d0 [ 711.078758][T27669] ? tomoyo_execute_permission+0x470/0x470 [ 711.084577][T27669] ? __lockdep_free_key_range+0x110/0x110 [ 711.090326][T27669] ? __mutex_unlock_slowpath+0xe2/0x610 [ 711.095879][T27669] ? lock_is_held_type+0xb0/0xe0 [ 711.100829][T27669] ? __fget_files+0x294/0x400 [ 711.105537][T27669] security_file_ioctl+0x50/0xb0 [ 711.110489][T27669] ksys_ioctl+0x50/0x180 [ 711.114743][T27669] __x64_sys_ioctl+0x6f/0xb0 [ 711.119341][T27669] ? lockdep_hardirqs_on+0x6a/0xe0 [ 711.124483][T27669] do_syscall_64+0x60/0xe0 [ 711.128906][T27669] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 711.134805][T27669] RIP: 0033:0x45cb29 [ 711.138691][T27669] Code: Bad RIP value. [ 711.142754][T27669] RSP: 002b:00007f9de3610c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:42:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4bfa, &(0x7f0000000000)) [ 711.151168][T27669] RAX: ffffffffffffffda RBX: 00000000004e55e0 RCX: 000000000045cb29 [ 711.159138][T27669] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 711.167709][T27669] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 711.175676][T27669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 711.183646][T27669] R13: 00000000000002fd R14: 00000000004c58a5 R15: 00007f9de36116d4 [ 711.224934][T27669] ERROR: Out of memory at tomoyo_realpath_from_path. 19:42:52 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) clock_gettime(0x4, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000080)={r0, r1+60000000}, 0x0, 0x1e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) r3 = accept4$phonet_pipe(r2, &(0x7f0000000000), &(0x7f00000000c0)=0x10, 0x81800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000100)={0x8, 'ipvlan0\x00', {'wg2\x00'}, 0x400}) 19:42:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4bfb, &(0x7f0000000000)) 19:42:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2322}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x38, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x32, 0x1, "6473063517f94457b5da8f2cb6441424f1b182dd930fa8cc830f78144a5f728a8f850650b8270fe33809fd69f9ee"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8c5}, 0x4001) 19:42:52 executing program 1 (fault-call:1 fault-nth:1): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 711.482830][T27695] FAULT_INJECTION: forcing a failure. [ 711.482830][T27695] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 711.483093][T27694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 711.496057][T27695] CPU: 1 PID: 27695 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 [ 711.496067][T27695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.496072][T27695] Call Trace: [ 711.496094][T27695] dump_stack+0x18f/0x20d [ 711.496115][T27695] should_fail.cold+0x5/0x14 [ 711.496138][T27695] __alloc_pages_nodemask+0x1a3/0x930 [ 711.496160][T27695] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 711.496189][T27695] cache_grow_begin+0x8c/0xb20 [ 711.496204][T27695] ? mark_lock+0xbc/0x1710 [ 711.496226][T27695] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 711.563060][T27695] cache_alloc_refill+0x27b/0x340 [ 711.568093][T27695] ? lockdep_hardirqs_off+0x66/0xa0 [ 711.573302][T27695] ? tomoyo_realpath_from_path+0xc3/0x620 [ 711.579024][T27695] __kmalloc+0x319/0x340 [ 711.583281][T27695] tomoyo_realpath_from_path+0xc3/0x620 [ 711.588833][T27695] ? tomoyo_profile+0x42/0x50 [ 711.593523][T27695] tomoyo_path_number_perm+0x1cb/0x4d0 [ 711.598987][T27695] ? tomoyo_path_number_perm+0x183/0x4d0 [ 711.604624][T27695] ? tomoyo_execute_permission+0x470/0x470 [ 711.610447][T27695] ? __lockdep_free_key_range+0x110/0x110 [ 711.616191][T27695] ? __mutex_unlock_slowpath+0xe2/0x610 [ 711.621828][T27695] ? lock_is_held_type+0xb0/0xe0 [ 711.626772][T27695] ? __fget_files+0x294/0x400 [ 711.631458][T27695] security_file_ioctl+0x50/0xb0 [ 711.636406][T27695] ksys_ioctl+0x50/0x180 [ 711.640651][T27695] __x64_sys_ioctl+0x6f/0xb0 [ 711.645242][T27695] ? lockdep_hardirqs_on+0x6a/0xe0 [ 711.650353][T27695] do_syscall_64+0x60/0xe0 [ 711.654772][T27695] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 711.660664][T27695] RIP: 0033:0x45cb29 [ 711.664549][T27695] Code: Bad RIP value. [ 711.668611][T27695] RSP: 002b:00007f9de3610c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:42:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4c01, &(0x7f0000000000)) [ 711.677023][T27695] RAX: ffffffffffffffda RBX: 00000000004e55e0 RCX: 000000000045cb29 [ 711.684991][T27695] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 711.692970][T27695] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 711.701028][T27695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 711.708999][T27695] R13: 00000000000002fd R14: 00000000004c58a5 R15: 00007f9de36116d4 [ 711.741836][T27696] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:42:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5409, &(0x7f0000000000)) 19:42:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000001500)={&(0x7f0000000000)=@nfc={0x27, 0x9e, 0x0, 0x3}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000080)="ed810c77e127369b84b8b9750bdf20e0b1b27bfa9b9c8a47f7551322fab8a3fda4ab3d7964948b974a8821f08f438259866ba4", 0x33}, {&(0x7f0000000200)="89dc0710e3c0c2a40e75313b300b68c900022a75291e2de5cce37390c63655d31c4344863a1c930780acc7cea0ecd70c3c8bb520c9fc8ac0eccf2d04f6b8e3f07def08e6aee73a5d35b5967a622c7c4d8c8dfdc21e3703c6e4801cd953c4fd7026c79218f280a0c263492c905b95404d61ca40e3322d3a5f5854e36ae590bfb5a1746ba5e92bab10ec494ab31fdac15c142943ba2aeb542cc2802b66a32d5c5e7a883eeefaf27b60926504b1b9f9abbd4e808e431e6337f562da5e1e501fb805bb12fa7534a1d8d13f98151d43a070e30246f3669a6e09ffc47e23159f2d3d0bde9058ef3072ec8eb03f96f26979b43d09f12a29b32298f903e5c2632c8f59fb27bce301c4f6b822ba6350b9b017766d2d2043b88d5d6486c4b0a9c7655ac7bb954253884754ba74e8e9440427251a64a0eb1263f69f528e00c1a3c6bbbb1d9fb61254d77a0da86f3c03345a0e6c8a454dcd68d0bc26b6b80437a58d1fd28ad39d75fe725e1d2e0a3707d88bd9378607a35fb1669b4978b1033ae924e5699660265399ecda6ab5cae5781b504c85af6ff819a6c352f3e52d18d3c6b8529a7ecf6106d35adb5cf26a3b897923b8c8387ffe0afb23a10e4f17b5c4a99db731c1d65d99c65211da011523f76fe5cef6bdd505632d9aba8496b5d62995b50c664d5e6c649b2f0d11c09ecc4c901463c1ea6fd34f90914e0117ab02f4a26a246e10018f1a6f8b5747b3133a926e06b537c1c7c353a18a34d73f5835d25d5c0013f7f68034065c4f7a6debbab231b53f4681fe5719fa0dfd5233db54999cbfffc2c2a5ab97402686f157f68ba46ce03f1f50a837009b75c809502bc8c36fd9fa936f132255de4c907fcbc52d3572d599889c8bd5c8ea28918b02faedaa989fc12e0ba24be7e5ec832e50f95dca088911bc76d2ebdb7463e8652aa19a127d11082f762c5e00ff55aa8d511be3ae4d28e4cee80a5c5fc9f291df23d6eb5762cde8b5385e479022eea442d0b360e1550432f87e23a09e7df87f4b3a5a69066255758dab5f49700916c5669582fe20dcb590cdc26287b01ec61b623d821ef7b33341bf1f65f8123e8b83c962a91106a55c63d02c5e811d5e8dee8e3c16ed98b1bf256e3c7cdabdc9d52b0ca97ff14befa0fd71f6fa3c739aa0cb597a3269ddc8d1e37c525f8eb0092b7fe9e0e41aea8b0539b300cb96d5c1f4481eea5bdb4e089870991b77641b025f6c802c0b8f197c20f070009c34650d6ca9f5069076d7fdd730614332cd2950327d4bffebe431afbfc4dc92ab8d5d4adc8bd5bd50ba0191c4452e5c2ce53fb3ee7091d467a5ce6c8b7e9375c4fac7d0bc7c61455653883b6dfb6fa186805bd22710c0e95bdec3e33c056ebddcbdf9f7be371cf3d4ed4a053a6dc858a5763a8a576335161fd28556aedb24fca378f0345b0aab94ad55c5d92e500e9c23695a0bfa220dcc780c971b6cfc7a3f1d6ff335e099d2e1176dbaa35d8d25a68af847706f68f0a3600d5d7e7fb6e34441e00758835ac1c280a88700fc064bcf635ed8a3a8b18bf7467ffaf12b93ceeb26af1f41572d9695e2d8bd54b07449b590e60660183bfc3224ed4a54bdd03161decb05a53637abd962ddec767d33e86681d13ac15de717e0c043a88d3c1eb15f9b4cc8364d84b026538581f1ae8287813e43ce83d0cde3cb48f527e2d1e496d6932c80b57bf7c1bd9d2a14a7671eeda69719d913613b4827728bc65ed4f598fa774e6b8363b213bad7067663a46a101008c3a3e57aec8815519ef6d417f7e49b4481ea9d73bd8ed6b0324f965fde51515ba47846dfe85cc7785ba2eebefc3919f982324c9dd946e4b8d06f65032135d886ae92e1d9226a8542f8c3bed6560c484728753fefbba34a0d666fb3f30c61428eb2e91e1eeaef43c1a1853d91c9c8ae57147d9ebe0aee0d153e322e33ebb233e338edaac4208f3fa6e97e19b881a0a836ae45944fa678121fbd9e097a2b0cae3b9c94dbd143e02bcbadcd8c74ef2ae3a3f56bda8cb661494a9e0b7a70b97111ee4b55f3b5376594413e11872a628253181405c2ccefb83ea797fdc0526aff0d3bae2edf21fc23cc4cb7a73498d71f89dbfc2745bc5642d89e4a889d8e3539cac8a19f9d00aeb2fe9f08b5352781fdbb9e660e807150aad9d05330ba1a455310808334d80d0492f57c7e9edb14f253164b227534c3412db21a009610ea2d9ec0995454595c5dc2a1c37bb3ab6a72df119680a65019f6163e728cfefe2c9eafb1bf81b2cca325d1c21c92bd1e8f180905bb7fe64428c97f9c99867bb48d9f66ec17b11f77c1ccd7671aad5a9e2bad2bd0a2d76ece449602a6ad608cdba7de282aa07e1eb5fd3f4ad8207d3b1ebf5d6f4e8e43f41836930661d452aec992bfbe8e417c98148c17ada8c8448f370d3ea597c00e8cad204ccd486cfe93c1fb7417123a1e751dfec821dd2cf2ebba9084cbddd941546516ccd585aa392e2468803ea05a15bd842cd337021b46d7c5bc4095d51791d7ec22b1d5058320fa63b7af023bff6de9df4e551cf3cef735019eb01ce73d0139b0d0cec23020912605fa0299eb2f2435d6700b68a03de05f6b068228160f04d8b70c70189aa739de58167a83e7d53a65213da20c67dd686015f5103af333a91e258a31fb82f46c291cfde06964aa33c5c52c8490f7f73b7539b0c7b85f6f4afebc5008b1903889125ec06086b27f35b948f0ae1c449f701f6232b3266f5315be0e70a089583e8f302f2a21a0fd007861120325d7c703598f3f925b6d16a2bf1b571f7b25c3e7fb72c323bf7189d0aeb850cdb08b7331eb174b429c1c4ec07fb2c4c476db419bcbfc66e69d3207796d1d25a9f7f8a03377c5a2139263e195c6f04a3b8e1d81a027c1477e2e5184206c858d248745174495a724c63a021a4f0430b6cf0694c48accb7886c9ebe57966ce05aacf49b0ee7c7c6bedd198c74e7576af12db2e407eac67eeea0404df0b7aea2d966be6eb7a35d6f06d91336224de4bad771e77bdcba0d237a5b4821bb7767822c2a1c26780093473e0f51f7b5861f6789065a36abf88e4c5f674f8852b4c3a45b1913a9740beb357dd09f721c322586d33e07ed8fd09d6e4b01e165e5f105e261334263a6eafbaebf4834275b7ce6bc8adc82c1704e7e0d1ddff94885c8c136dc24f7e23f71419a9d714e9014603e7cfce7d05639d4bec6be296ac7bdccde35af030f4efbbed7e9bcc456ebc14a6e8653b8b059ccf3e2405861d221a55e2edb7d61e936e5c5305fce8623c61292ac19a5d9f1d0b215d756a399dd4c3d39c4222e7ef1e3c0b67687480c387b9799ead2f727827a454715eb2e3f1bbae78aa5db97c564b5ff4ec18b3b2e361564828e9bc48b3cc4f2d79dc127b6dc4f368f37c3082c8eda4ad4f00fc12b77305fbcb01853fbec4c460927994240a83c26dabcf5d8946ffa748c58f952e18f6597578d7bb0cb31ae51aeea444bf8538747579846c3754b6ecaf831b3645c3cd4988f102b6d922fc457131318aca0b298d28e42ace90f6d79b9abc3b7bee59859b7cfc67d87e5d6871bc9849f5afef8000f491a866dab0414f5a9f420f97250da1ad38beca6508d678d8bef0614dd6454ec39ac8189788f775c268222d3b4cfe8c3647986faf886ac1de138f4828ef8ac96c14afde7566565019e2d23993fb62c0dbdec89e7a55a327f8cb2dc6de53f3ff504b6107cef1f23aebd0db7ffc1a2fd50ad7bef1725e2e555270f09096980ba35d1071cbf4cd05308877fc28761b9f79f3abfed920fc15265168b787c5fe9cfc6cc9d0ac44796fb340ecfe5765ccc1d237e45ae238b7876e53a0a469a922f801d46f966e26f3ae851ae1ef11d5f2e75d52c116fb8abf12829d81bac0ead7ef74c00113c5689b9a7c5eb5b5227fd97671ff1f6cbb24445187247f8231f0e6deb0e7b7322979b8e4a9306fe0170fa70153235cfedc5749893e493183f21dad836cb20b6ec1fe9b334528939af4f4805bfd1d3f6365d0b3a00c6da34a002cdfc54b0849b56aaf2dbc61d5f7bd665d01e0d0dd53d47e5b7ac9e39bf65ec4d040773f9ecf29c8df6f355f156766ea0c3d1008a638b09c92c48ec1690fd6519d1e2485b7e89f850005cc8ab8586dd902d30934ce2ebacf5b11c8369dfde225b65aef630635dee6c84f38108db9ed484b4db8068b19e943246c2dc424af9fe249116b3a8c959dc73874078c5a7c54575d0a89302ace1bdf11e342dc0ee7045a8f9ae64050cef1a9c46863bfc1ae7ddd785ddddb3fd18653842d600b1ec849d92d03abe42dbe7ce60223ebaa4ca404a04af7405429bf723eec949e0f97e4b4af9c381b86cca7b936311e3628c15467c9c5daf70c5dc4c237f4ead0b4766a1e65001e1d84d147fe045ca85f3ac8992f2859a26b3237702223b8079f68fa1ffd6d45ed02d57285cabf2e9cba2482de05e5f9ddf214784d899ec1b5e80e0e15d8a4c0518bd3936e4148159a4a41299b2d11ae9baa6acd50584f0d7ac79a9e379086b89dac75497dfd3035b161e22960278621191bbb31ded4493c6b6720ebbb80bb9c3f4d0851ec21b83516970995002f9c0c78e666123b87102566d95a0d4b1cfaff58bdd6509c8a109c2723cb440b1f7a761f04d9fc5fa82295d98eb528892643dc054a4a95108ddaccf3e0a0e81d2fbf95fee5d3c87890a59d99924f4af10dadd342f914b3b02d99329b29a8f177068aa283956e47d3a343f54390d3aa8c154291a55fc71d718a2ad38f673f6a2b8c8e3e86900c943df32248be3f73aa4acb101f385342f979a9abdcacb0dfd8da36fd0457303622715211f8a7db035606d023837d4ab42fd70f8829f4fb0091a90acd352c4e990306c4120bb596a7f4739b49e163e6a2a482caf76cb9dcad925badfd98996e79c91dfc58aaff94fdd8783507c69858aa7a6b97a3b871ba7c8842a59cf8ac47f3410278b48cc3e800097b61ccaa210eae5ea1b09715e1e181b26b241fce089d8c050b6be522646db1c93620c5c565821b1fcb366061cdfa1c7f05c17191941bc5548e53a236eab8154087ff78c101296279663fd929a515ecbbaf585ab85c7323d2cf9f4f8c7567389ff5d1862598c3e63d498d77bc58f3627228599d907f709f9893c51e58339a7607b404a991da6abdcb1124054634588c17aeeb16075f8c8d026bb896307abc58b48d89d3352fedfcedeba793303ed09c67bdd0a5fe8a899878e21ef472faa9716ab00e0aeb42a12fd1010b20ca5ae05f41139bf4fc5ca62e12d6a6830f0c12d6cd8fc8e3da9b7ed0ff83cd2af5651417dbee5e2ed5c8bcc0e803fa5959a08fb88260e765ee748fdb51825a9e5ec705019b368d0058548bdbfea6e0ce11dd8c8fc952f1dcad7a7dd709f23b919684468711f0bc51eee120c3e9f41472cbd8fed5d7ffc16db0de9c7da1764698b8ddf44d1560140be1b7674badf086653ff2ff2327c89a57b37632c3b06ce03b76a040bb33af7057a53a72c045d57c13413b1e2bfba86c35a2daba15a0166e920238e4829327639a9877be33265bc6c19ee873a37d255cce590064304d2004eb216a13adcfbb082c56ca9e25c0813facd6d1028b287cf0724b5e41971a031ce283da3a139ce74e3c817b5f456dd43343df09de9a9a1c23ab3d5fafaf97cc82832fcfdbeba0f47ccd3b0ad1a14251a5c5c2c0786a2ebc01e19c107ceca7f79c145e54a121619d2e2c922d1d92d225a45653f57f097536807e743ef7305ec9ae5d87fe8b1eeb67508a760be436e4f65ae6913b822f0f56f882fa479bab2f7", 0x1000}, {&(0x7f0000001200)="4865587187d8cba19f8d1ed702a3ac35c90edfdb8772cce2ce065c5ed6e979c571184b18e5be8685040f237df2c42029fd46209e1547535bd2745828b7c35dde14b578d21cd1a0dc9bea00ea403b8a58cba4e350a8290349bc1da27a96624f066b4c52f42d580152adc24370fec6f91509892b3a3a1413db52ab0cb7f5df8ebf5da3384b3721a80e1cbedda3aef1175161e5031c7a190d016fc291a5681d989783785f64985323b0ab9dca20b4052b2fddc1880793ac7a1fd2907bf9cf9e4d5f4a36cd0180f52006c25b8e5deb6e", 0xce}, {&(0x7f0000001300)="7c61bd16fa8197f334cee93ed467eb13444b01d113b8cdb2a6d1a16f54cbd59aac548aea45b2b25f4ece3cab211405ba5436e0d5d75de4ba71883af19daf17d744ee7e80fd37b3e99d4237fdab8899a61a2793445878512b8bc647cde2ca979d3a15e04802885d2ce27fc3a0acde896e66b840a9db65426ddeb2f86afff01b6e0112f8cf32acaec662c5184ea9c7183710763a52e8e81fc030d88282fdb54e355d7fcf7ed2d438b5dafe493f017e6419143c65313f8e66827eaf690eb614a2713f62f2d2fb7bd6b9be18de0a98113adfa90e3693b3c3947d53f5f762d537861fbdb031ba6539b3b6efa29d2103b842", 0xef}, {&(0x7f00000000c0)="84b81672e7c8b4ec830cc96bbb7073e855d18719d5eadbcd2e8eba97fe9590b63031fac2984ce78bab2c72125889fdeeedc40cc68dc7ac9f4d699886c8d2596764d1b719635f7a62f356087e410c41f722a0f4f11feb893b07b4b3e29461e95a075162c65984c2cb64924210c7f096b27bfc4c3fbc419f90b2e2b2bb497f4f28cc5551aae91c7050cf284e15f1429057adaf320a09bb2791aa11e7ce3980", 0x9e}], 0x5, &(0x7f0000001480)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x550b9441}}], 0x60}, 0x20000044) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 19:42:52 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2322}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x38, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x32, 0x1, "6473063517f94457b5da8f2cb6441424f1b182dd930fa8cc830f78144a5f728a8f850650b8270fe33809fd69f9ee"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8c5}, 0x4001) [ 711.988209][ T29] audit: type=1800 audit(1593891772.720:394): pid=27707 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16087 res=0 19:42:52 executing program 1 (fault-call:1 fault-nth:2): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:52 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000002040)={0x875c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x38b0, 0x3, 0x0, 0x1, [{0x1014, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x400}]}, {0x26bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1320, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe6, 0x1, "4a58a4c0f31820406eb30091631e35292b61ec9eee7bb7c4e4addeb3b8e48e4608f909551b748723bb0643d7f0c52477fad3e053fec415c824966bde49f444ca89bae53c54b0fe0c9671d347f08142140ea256e1bd25b8a467757845dcd7b4e12a9aa54da0717029dbd78dfad2ce1caecd7cf992b9fa216e1297284e1e6ed44a44a45d83362a96834500b8fce76d63344ad017131e533d9282c34d9a275e26fd39c695e1b3c65790953c26a2ccbde0b26bc25cd45e4d4eb7a8e8b1e8fd0f64b91e5fb13b28bdd19b0739069d30156e47b789180a02af07cb0bf3f17a48f290f4731d"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "296c3dfc1c3a2256e09e9282264a5948ad8e3efdd8fd5a9a6fd06ecf6722bcc8cbb9c1ba29146bcfcf2b2585a8ca15c482e770e4c2b359b7efd1f16f6e897d8a6855a44dafec0193ea5b3c567bdd455e45068415e48a5f122bb80c1e8317a74cd792430c5678895d768d2cbb4fbc045b33cab8b3cc8d2b47e157b89bb25584552a8e18e5eaf7dd1a8a6ec9e77ba69584848d0be8e6fdf46a8d0f521a95"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x69, 0x1, "b9af7341e4838868485b4c56fb6f48aeed6ea313ae55014fc84ac33d7b5cb701ed1d602a3d5721665bd14993e915871a1ed292efe9a01841b144645360700490f2a69802e1517242a5c7c317fdc7d92d4b05be1821e683dc0a3debe7e5ab3c5f3492abf633"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_DATA={0x1044, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x20, 0x1, "98d518756de5e6fb0b613c41ea363c2c9e3e40c4e0d17a2c143abecf"}]}, @NFTA_SET_ELEM_KEY={0x33c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5a, 0x1, "c26b71346bf19e6fc9d9359030fc5d57c7f6462c9fed1bd34ce73879d0df0a84cb5fcad0fc5cd5a73c92a0a31af23bce77c3f29337028afe06f6ce8c0f58a986f20c9a3fa372cac22f423d80c350efa61afc732e3202"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x9c, 0x1, "1f34a918b88dfa95c5cef043296c5c42881948b1af3c691aaefd051681ad5cf75f599c3c622db4e9097fa7a7b62f36a67f48607cd0c414eb0231bb7c6f37a804533e1139bafe96a7d62358b04536149a96082322f16deac27f92bb7def48050a0de6b3d3d29989574f3af2ac8d8b3a80853f6b2675d1170a231e0aa5ad2ffc71339d7394e77ac5a7d89b7f1245002a362e3006fee6d8ef75"}, @NFTA_DATA_VALUE={0xbe, 0x1, "6b7361e6b5ed977c10334dd773bb89f47d5264989bbbe1a6a31e739addc3c2825ea3d1d86b3861e5f67dbd87f1ce0a2fdaec8526eade50555c9ce6f26c97e1537bd71749e5c98c550f502547515baeb388d27dc06a8c3535145509c049c4910c1edf3e2bc1dcad3528647f112adbea13eccc8032572bc8d706745f26bf6bb191655426392f19101875560a1491641f618168be46ca0d79a8f65414c99f5e3c9047a184d362d627bd10f86440c664e126cb3440adce9bb2ed2283"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x43, 0x1, "ad7b1b4d4accadf87500062ad95738f746aa00f3972c980279016f9369bcfc20f099819cfe58a6951745c201076da99c9a8f5d0e9feb04981fdb53ef3d1291"}, @NFTA_DATA_VALUE={0xea, 0x1, "b498fd1a43cc074b750b87c1e8dff6e48e4244bf6cd94e221ed6c23a110e4ff910235d7787e15cc309bbf5f34e8d77c3f028c94c249b07156c3254b02558684da2edd0b0a401f9c7e79524d8dd6475b0fb15dedde2757d90dc6ae31c86fc2d5622f4371f967403de02eca99c0e93710364804228be950e937b07c486ab7f29b683d68b846beed836e637335505b5866acf6d3764fffa2ea06c64a322ebab05bad9e2d670bde854430c65e3e1c9f229ab6b6211695c9dbeec8ad3597e00fe68b6d655dd5df83d70cf9026ffb97d5a26d1162c77c9725cdbd215e9d99a609c3cc10ff08b95b004"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x1dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x74, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6e, 0x1, "1043b00c4e5d8e5ea5349d6cfe80a881c70311d64ef63c111bf085a7d3d5bfac680f754cdb4667725e766166b0732cb187a4d98071727ad1f526d1038af10408839374ce179cd78aaa17837baf3ce1e85cfbd45ba0fc6e5fe699bd080b231834734a93bc7d676f75e440"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x118, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xae, 0x1, "35dae7be4433c34ffed4b10d070f2dcdb6475a022e89a73eea87c1d69ca236f710a5cea14a0b5cc1dead1919513040e5498e4f559b22c22555edf4377986e7257fe928bdefac4cea40c81b4e220dbb3d9dcbcc90972d83638643b63728b5c755ecde9e5f96ad418340058069b7b239320b890743d22d65427f54374ee2b4110ff905be754f5e3149a7802c6faf840cafe3ccd41770a59c069ed740d66311e2116bff627293cb232c1c67"}, @NFTA_DATA_VALUE={0x26, 0x1, "21abcb5705333b91ebd2751840702a6bd78fb2ebe9ce7f963efaed7ff9499243dae0"}, @NFTA_DATA_VALUE={0x17, 0x1, "6ab0a0d33c96b71f5022b6a9f5dd5d265a86d4"}, @NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4e78, 0x3, 0x0, 0x1, [{0x5b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x170, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x31, 0x1, "f89f920a3d9ea1f04d7bda21a59ecc19f10a7afb276503df0b7b3366c391a6173a0cc3121964f92c57e60b2a09"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x384, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf8, 0x1, "87712c4880091ee911272cb7b161703e3c226de24e532c17a4f64d3794915c98d32dbe5d6d561f0641beaf0c51ce7df41ca03d86907091c2c8a68bb38f8449e4fda49c2d1be406792385e9f5dc3d618504ecc80f2b4f8dd9accf063e65beae0a56c0a95fe8ecfa91ef08e8d410e370875f6e26960f2982ddced030ba14897e58c1ab469c1643bf2c31f2094a807e25caebc68e821c09645eb6ae6800f6bb85dbd52113b278750d52d57ef623292f826089fa61feb6b8826476924aa5f73faccc2738771c126a5a8adf6f769ab2f3cd85ea6ac28389fce3aaa3a7ff308a5273e88e2e04df46453c1b4eaa97934aead4b1991910a0"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc3, 0x1, "9789a33be163c9e5879cbba23bc077b865343dd9df2c4c1f195ebb6b6b34c100ec8bf2cd08f27128593a2f29b2c538385894bb22e64c39e2721460240b57ac0198a9d58aef1f8d97de99caf2f4f8029891c85962d94a9f1de3b7f3413cb0126774ed07a48884cde9597a51d64849764d45bd222f39b88789ebc280bb8e971ce216c3f823aa0c1055d2aedfa2c88017a697e18378410f5da010ffe43a51248ecc2de34a330182805b8bd3f5ded68b48e468e7436a6f528aa5581fa31e1107c9"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x33, 0x1, "c762705dfaa8dd593fcc0e27fa97912939a6bc845612c6c48db17dc1b0d4b62274d6cccdd0c4c27b26a2d957c5b05d"}, @NFTA_DATA_VALUE={0x70, 0x1, "a1f5aabeb2bca234068554afb527db3049a19c234a00ed5a03fd362dc0a114c7e0370ed7a1aca3e4d094e394a169b515ad51389bfd47b817ca324b93e7b96d4333634f568e5163204083a2afb16b8a0501507f54f52f63aa9260baa105ab9ad6bc617ab613250307a7e3a364"}, @NFTA_DATA_VALUE={0xdd, 0x1, "5769b69c5bcc1dac52a886c0ca36c0a0d91b92dd4665ae338a9e5ba6fe2a0439dd7185e9261a33ba1bbabdf70307c1e5193ade4b9e80ea31d06278337357279a89c8a7028d389ed943d8067d9312ffd18e231183086be06cb40a28f25ff6b3f88f643460a9021b663e9425181ec5fb9f98de1aa22f3aad1007368b7c3a7a7a3bf647ed3b7722ae8a6ea5d84d5e1776bc0127f2ca11cfe2c3c81d9717a1cd0754e978439d2764b79082385a59ceda61d4f30f0cd92ff2394a4372480e4bac5b2b22e2883bc6b384394e22f4742bc9bd0e6f129874dfd8d661bc"}]}, @NFTA_SET_ELEM_USERDATA={0xe, 0x6, 0x1, 0x0, "f9c912dbd8a6b8df8991"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_DATA={0x84, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x10, 0x1, "fe159caadfc5ea3b40ff785f"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0x104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0xb4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x30, 0x1, "be8989857f1ade46be5e5bb7367199e757e4a8b85477b7ba13c01e33d3c7846383e92ecd645d7320b8d45f49"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x41, 0x6, 0x1, 0x0, "e600166b2c983b49adcef91c38326bd17490142d3cf87194b2557f9aafd4387c12a6df03b7556d5d22fcc6e64b4441ed124b0c3eb1539c16a9dd819406"}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "7fcb2e5c853ac1"}]}]}, {0x17bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x50, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x401}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xda}, @NFTA_SET_ELEM_KEY={0x1458, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8b, 0x1, "724dd8bbac8c6027dcfcc01b53feb6040bc2f33c12154bbd4feeffb5a9e365b0c7d63f23b66bd14bd26aa0f5b26653f6bb9a3031a966ef75791d362ef51e45888ef4067c6ce8156b5fdf1eaf1ff7071806fdd7e2cdba27ef91084d80bc857f783fe7625f0e9d02fd48643c16ab84e9b9bc6b051b4ece16b03a7b506d3c70d01b5c06a765e5c2f1"}, @NFTA_DATA_VALUE={0x72, 0x1, "ab959198db1eb3ea7ee6fa9920563cf14f8117ddce1fdcefe745e83ff6fc21619a0c624efb9b1f77e6a5d2776e703e4997e10a22680f3308bcb31f39349d5295b6bbda6925a034646c1804604aac9667212cbb507da513f70be24879433e879a216043a498669ed78add561f90c6"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xdc, 0x1, "f6b4410568f5d62150e540ea6300481287408a8bddd282d173a774855f999c00c80e691b4ef7dec92bef7fa6322458355082c320f8a351623a4ebe64b8a0d5a343344ad3e591b5a1fa005c996f54488cec283e3bbb04b6476cee8a8f21aead12f386dd02c8da214d963eab03cc5ff75831373c92ea49283a0c6d32e4372091d08999581b632068b7aef04fac5824eab8e8763151eed9d0e046dc6c413623dce0fed0a217c00da32cce45ffab22955daa48db5b6b34cd8a485a36e7a5aa68b0dd49378abd17e46b84ce5aff3cecf2bff3d9b8a15070e57651"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xe8, 0x1, "849b882d893f0c1afc30719d29e00ed2f5ecd998dbb6b290a96f7c0f4053505c2b8d124cf79ec2dd3232287c9191b10e98559f15a89772c4da36f580f8032805bff0402dc432ad2dd63671177ec5d5e66b654777f78e3eed2709aff245b6eb0cff910cba084a252affdd78212ab582228e911e16c9d6fc1cb5c352fe91f7eb3278cd190204bbdc8a45ca9213c3ba5d1d257e46f29869a94bf97ec54b4fecd16dc394b017af858b69122c3fd659178e5e98d0087e230dd06d5b771bf2d0ee730934bc93f8d0d8e5b9c2f3a85c583eb70477ceaba62916aa3bc1ce1a466305466186829ca1"}, @NFTA_DATA_VALUE={0xeb, 0x1, "d980f9a53e3123fda75c8ea3f4e70d5a9e54847293bf045b635c4c198468dbed50b495a7d95cc17383ce16c836093c5dcb7eff77dcaaf16dd27f6b532423cff3075e1963bc5f8f334ac66c31d35f2fc8e9e456fbb75243fcc2b71a08e21f5b4157223b4981ce19b7fc22753e76ebb47057d15b235e3c8542ef25ce161f047abed9852e4feb1a75b0860f88ae9c3ed29eb56ed66cbaeb1865b36efb09c1601cfdd5d93f1b83c804fb9f8daa78413b24e1cb5a222cd6ab14034871e2170fdb6f51b316cd130cc91015f6ea656eea4409e8d0830ba3ea73f04d71037e7fa73fc1a404081b0f2a2e0d"}, @NFTA_DATA_VALUE={0x6c, 0x1, "07676f059be2364080de991c42e4d51a769bb9274b7ea09731abaebda80e2c78e859a4b7621a51c1a1528bb5554ddd4f4c0bf81286cab6c48299d53caa38b85bbb8bb7ce4e8437bf996a65a051141673599e9a0814595be210777cb62cb552f9cf8c7fd05096a321"}, @NFTA_DATA_VALUE={0x24, 0x1, "6b6ebf52efbbc29cf84b2837b94e421b2ba7de208ebf212d782e056aa1e48562"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_USERDATA={0x85, 0x6, 0x1, 0x0, "7a49e2c7e80b282d3f3479174d284626aa5840c1504e9efa52ddc868c88c0062936d7d9ae5f25ba7cb2d667042f05a9cc43e037f5e21cc5d1643cc2d31305195677d3b6a47fe10a91228ac095d55133b6da4db22d48cdad9178c5c51d092c16730a6602284ce12a958682ad9f1b0b10cc409835e73997d1178403836a438098c10"}, @NFTA_SET_ELEM_KEY={0xf0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x9c, 0x1, "096ed3be745be7d02404bd76641f3afa78c6dfc4a1cd52a5eeea5f84fc6d275f73edf112f48768b9f4ce133d1687548a0c11ea8f53e748c68088bd83a7f2c31b3650329d2cb6f65b502708a2b7384eaa7351d1afbb0d0d6ffdb452ee96480bfe27ffdab473c8022380c6f25f5e4dbcf173b304e63f2c4dc31427d4ef9709008f4b5fbf752d94f01d7cefd674d7ccbfb5692922fdf57d5552"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0xec, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "18fe84cdf1be046818658459578f6011141bda3d109467e122814ca3c2750a2e6715d7483f7ae822df193b57897b9c02e05bb63a79c0ae6da5ac08607863199a99767726b22bfcb0239d8822a69453f8549b762f527e23a7735a050e7657d709b4fe70eb8b5b8c2dd7ba49"}, @NFTA_DATA_VALUE={0x60, 0x1, "6c5afc2487e50ed3af8ea1f2b1c98535ce5844e276fa90900408339f3ac2fb2d8cac0783991b7776ae5e5de4573c4a5ed9639d77ee288e07a02d7afd76bdf5b48036c81e68560561e144bc3ac9d64cd636ebecec66aa87a3ba8cc7f0"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_KEY_END={0x84, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4b, 0x1, "5170b83b11a5926e292801f48393a93a7b791c9fc82c484861e9664012e32ceb3e33af5f04dda487d9b5b12d6f2b5ea66b41c4b97789fe880e09731ad8793e83529dcffb5d4cbe"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfbf}]}, {0x5d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x310, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa4, 0x1, "bc3604b220e120d3cb65d7752d28289972dce41495aacb52916a7ee7b95572ef753e2286248ff04cc4c221745c50ee7a8d1e8df1fe26aea84f4a0535efaa8f6df22e4b8eb01f1256bfa96f94586ea3da0bbf641da9713ca7caeb98a81566397f26f9f0988e8fe8017ff79bd67fb09ea0a290df18d2c67ca02cbea6afbd752d8458975568554fb797ba7d2913831d2e148c07be8e7e565d8ed2035f16ff6e146e"}, @NFTA_DATA_VALUE={0xa, 0x1, "7f0ed1024d03"}, @NFTA_DATA_VALUE={0x23, 0x1, "403ffb9bb2a5b361144887ca358bb495cad0e748424e0a98a32bb0eb4b9f9c"}, @NFTA_DATA_VALUE={0x2d, 0x1, "c8c0d060050cf5144141fe9be22b42ece40bec43cdd8d9ae8027a5810e3db35f65690194b89c0774bc"}, @NFTA_DATA_VALUE={0x14, 0x1, "602319c8f375791a5f9801349a1d4cba"}, @NFTA_DATA_VALUE={0xd8, 0x1, "2651c5b1bc1870370cea454182e4e8a18f2caf78fdeb95fa90d98d60384f1eada2340a37dba2a404225a9309a573d2ea43c35a1d0ee4df1414e6ee6b9ba2206924e972ab0eaafa2718d7fee9af4d85b4208c1498dd0b512ce3ec694b9ef7e6c4648750cc1b9f079d0d8646b3694b26fdb41e56714193602cb52b86a384a7e3d49b27d7bbdb7cfa396fd5f94084c3e077a50c433dafe447074836d125bb1139f3a3b14edcec0b2903981c017eec04d2cc83996fc8fadebeccc46adcec888512c0cb791894e8fd4044a87a2d55b3ff03106411d2b8"}, @NFTA_DATA_VALUE={0x9e, 0x1, "6e4a8b762d08875063ad0835aef529152d9ee8bb9e64b4fa5332d458cf3a290c084736a61246e64ef0b1018431cc4990ad3739fa236d82e2396cbd3e329e0816b721f0e8db9fcfc2af938402fae1431ef94f7a08ca460822baf3eef0cfd4088f3ae13c6b80479dd3631754139700f634babad172184d914d82e487f2bf8fd1e4298f532d353e09927b89d6009276bbd3392d0ebf6b42145202de"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_USERDATA={0xac, 0x6, 0x1, 0x0, "3f4dd8796654ad10cacd4875aa90dbbbe100fd03262ee98608c89f29b6826c5a13e0dad2c33132ee8d08dfec9a1672586d079a00306297237a6a58215de1f4fac20d33b6b4797d43d63805103895a38463510fc0674d7cdf996420a3ffe569b254a930e1f962fc6b644cef30e4ba4ecdb53862473e9e57ff3ffdf82acb7a1626ab743bcfc46ab90b79746cfb22504834727d2c6c0d771f8add808facb46057c5d30acf58c3da0262"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x140, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x80, 0x1, "d647031a4b41f40e6d8f746a318210c82679639169af99225f5cc07bfc3ea220863e4e8634bdb6b6682197e1fb9394468dc2398aba0fc2b62ebec856321d24b5645186cc1c18a28afcd6f74c0dc6915aa8e6d2ca87c09eb280e7866bee215f58e299f39b9d3c4ac7d78a4824941443c80c6c0baa6441354fec951da4"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x77, 0x1, "7561a0afb3f2345acc0beeb1e8fabc76c74852ae6de97ebb7a74678507b05ccfca21d7c3bc7e309732e2323816934fdb9e871a4c8f7b6f4d3e404a98af7a47727530311278ce5064b5439a38023f8a17f6963e19b7aec57f976ab2f4059001baefaea89a71034c053896a439e95947eeda1efe"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000001}, @NFTA_SET_ELEM_KEY={0x9c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x98, 0x1, "fa7938ad3be2c1eb7ed1c6c4c0e86c7a7b8ac973bf9931a8bb3b8ca8105871aa2e3067999b2dedce3b9dec625575d2ba38406f5f6a92f7c9faf3152383c0963c9a630c38de6711cf2e99876a23f6c29532897997c9ee637e1607c09a1d43211f820e29ddc10fcf3b7f04f8c2a0908d5eb2a290eb15a7f99581928a1509a5416a2216a25fe7a977531beadd39650191c3cd7fa8fa"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x294, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x27c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb1, 0x1, "e9be3bafbff110ca7698724f491ef5eee232208479f202a265a6dfaa39e637682c67d7405946aee7986a2d18804ebc50ad24280b59942a78f0b9652a4fd0686eaab602c1bc4e28225389c2d5d985b384b096edbe533a10d610408db4ca00f9ded1d9d7dcaf7f5dcf27a70f6eb6363e3c69227cbab3591005a4769a9d60ecdf2cbdd6d58481636dd7226b332b7525ecaa39f9cd0312a55a3dc3d14a2ad82a8aaa35101b67472f4d3210fb5f129a"}, @NFTA_DATA_VALUE={0xad, 0x1, "3c1dec94f0cd9791b1221d7804e1142acfba3275127df0e18f591c70b18b1434a9d641116890fdbe090b3c91489a855e6abcf2c10d6aff71692d15b5d941984c15cd68b031e84bb9d185c967632d81868709314816fe6c8fc6f5a72332cbda32b01060a1c4bcaaf33e5b37d0dee99fa8e8cccca06f8ce361591fa06b3e188937a16131096a66c80160fab287d3e4fd00c79374e0b9f36007a46b996817e9f22978f2ee60a1f0a3ed78"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7ff}]}, {0x2774, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2c4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "21654612ec0d393fb139008c2e96c2ab1d4cbebc6aeb032ac616d4d7c5f13accc520c532d9534ce889f0b019bee7cbaa7c492cf2c640c124995cb6f66e12e876e3d0fb8c4b6437d6f027ea3aec22f8e71774d2ef3f6ae5bebef858a6966bf3a45021959ed6fe9cfde8d80ea2591c9e871600bb298ae63cf26df482e96f70ffd96865f93456084fb7f120ec93a187e5f65f33a200c462877f4518fe1a72ce0b2b3a09edb0de49e93156318d0f57354cb1d779d097c71720609a16d6e1a10d090ad3e70020db43a31017562ecb2849fcc6b6912cdde3d2b3d86c8238d7db43ef3bd44fa4b60c"}, @NFTA_DATA_VALUE={0xe0, 0x1, "46fe92aa62122c09d5b2490bc776822da14e6f67ec4b4191cd8bf377c6c09ccfbd9f997695fdaa9ce7731d16a3a5793b6087e01d958f1b4c8650dfcbbc1e261e78435e5a52b5b74a3d25c7b4edd82cde293232a6816eb7f71047589488a86f1cdb15eb07e6e5b664c218a37e06a964d5313f46921f7dc88529c8f140432e6b6e7a78f4855d67c13d9ac19c3403ea2cbd70bb7fe851c64a73c1dad76f581caf9893d90883f6fd1800df0e5dd1cf92bc56d74e4c34374c94bfb3d67e7c093d4f4e7c2eea6156eb545d87de030f560dce1584c13412539ffdf111797cc0"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x1368, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xfc, 0x1, "b9d9660a34b76ea39d3d79ff72ba88fb2bca5fb8be92c95af3f29ba53d6cfe92abc8e8e4e8ef6e7eb3451436bb108323d8f16b2d38354c33934ca8327e1d50fca19f50e647e51febfe5664cfdebfed17a96f20f82721bb8c5936a36cea2b823145c3391683b64d4039857a593b1e4244a4ecff0dc08ac548d09df37eae43aee4b6e04adf54b9abc4c29a5be0d56435b84052fccf082ccfa89cb42b92b957329f4d6c3d56ee4bf95437f1aa6b284a9702940648caebd8c3ebae66dcc99d6cefcbb76536e4be11960bda802b81390a11cacbcf8923bc71342355110529b471422d7c57299656350d223181d8fd688ef3e5e421115b59185159"}, @NFTA_DATA_VALUE={0xd5, 0x1, "88b781646dc9ccff3bfd841a39040eaaa149d7dd12abf8c6bea1836abbef5224f636dabac58a7db3a9290ff5776f06936857d359d1e0b5a8d5e3058b31425356e1062ff54872b9ec95d36b7c73ca5bf3dc3da4bf269d7f9f91274a2a84bcd6660b82ff4ccc4704c2587a63b1293340bc0aea923aabb5aa6aa667b33c4942b73ba0c1fb136387bd5604cb96d70036d34413588cbe6613022ebe00fb7c2c209b5bbbc25ec4163a97cad1cc8991f58ffc95033df2f812d06eb9a6f5078186053daa176e0e0e6b045b9e7b3eb0a1535b74ac23"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xcf, 0x1, "08747e875b5f84ca8f3a807cbfb290e7befe5eabf47c829ad86033a341f7e823a9b83a83d3938171dd2f0fc6b0ac570bf2c180f6b461f0b5e43c9a32d8c3c27b8ac404dfce6517b9d1b07e053f2c04be26e4d4d960a642067265d7d6b99aa7a770c14541ec96160ac95b55ed422e65c42af6765e62374d5f048adacd1c4b6cfe5766a03e4fb5b37b1f93a418e859acc87304523b5e79b367419cbd098a98183f097e542341b5f8dda5aef82119bc565f4b0be0887364327ebc3d5c52562b022dfddfbb7ec749002c0e9687"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x110c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000005}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa, 0x1, "bd5d34a732c3"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x60, 0x1, "d43c7afcede5de0bc65a33418e6ffcd9fa8852ddf5158c0a65723161e6741e7b244d8a4963e7da1b2172eb0b72b1fec6c000b4cdbadc2b603e9cc5695a83abe2b9002d23ae1cc4c492fdc441e9cebe96d98393ed7d23dbdaf346b27b"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xacef}, @NFTA_SET_ELEM_KEY_END={0x20, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x4}]}]}]}, 0x875c}, 0x1, 0x0, 0x0, 0x2008000}, 0x40) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x9) sendfile(r0, r7, 0x0, 0x200fff) 19:42:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:42:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x540b, &(0x7f0000000000)) 19:42:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) prctl$PR_SET_KEEPCAPS(0x8, 0x1) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x1, 0x0) 19:42:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2322}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x38, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x32, 0x1, "6473063517f94457b5da8f2cb6441424f1b182dd930fa8cc830f78144a5f728a8f850650b8270fe33809fd69f9ee"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8c5}, 0x4001) [ 712.155710][T27716] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:53 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x4) 19:42:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x540c, &(0x7f0000000000)) [ 712.470732][T27738] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:53 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x540d, &(0x7f0000000000)) 19:42:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2322}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x38, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x32, 0x1, "6473063517f94457b5da8f2cb6441424f1b182dd930fa8cc830f78144a5f728a8f850650b8270fe33809fd69f9ee"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8c5}, 0x4001) 19:42:53 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 712.785653][T27759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:54 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x78) sendfile(r0, r5, 0x0, 0x200fff) 19:42:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x540e, &(0x7f0000000000)) 19:42:54 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x2405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r3, 0x423, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4008008) 19:42:54 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) 19:42:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b073b310000000000000000000000000000000000000000000000000000004000000000000000000000000000000020000000000038000000000000ef0000000000000000000000000000000000000000000000000000feffffff7f0000000000000000000000000000008000"/120], 0x78) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16], 0x78) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000806010300000000003f0006000000000000000007000000"], 0x1c}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x51}, {r1, 0x400}, {r2, 0x2408}, {r3, 0x148}, {r3, 0x110}], 0x0, &(0x7f00000000c0)={r4, r5+10000000}, 0x0, 0x2d) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xa8882, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000240)='/dev/vcsu#\x00', 0x100000001, 0xa4000) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f00000003c0)={{0x0, @multicast2, 0x4e24, 0x2, 'none\x00', 0x20, 0x6, 0xa}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x4e20, 0x2, 0x5, 0x1ff, 0x2}}, 0x44) getsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 713.359114][ T29] audit: type=1800 audit(1593891774.091:395): pid=27774 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16122 res=0 [ 713.471486][T27786] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x540f, &(0x7f0000000000)) 19:42:54 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4600, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 713.519448][T27788] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 19:42:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:42:54 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) 19:42:54 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5410, &(0x7f0000000000)) [ 713.754101][T27810] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 713.825133][ T29] audit: type=1800 audit(1593891774.551:396): pid=27809 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16135 res=0 19:42:54 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0xa, 0x0, "fa3a4692ae6739d3e977cdb098a4fc09ab192af0c177a548b8eebb9702955b8dcb9ec249266e6775ceee6e0b4ff3af167b574e8d3f3865957a44e8b5ac5e87843f9f944fc1df60830f05c10a49b4d63f"}, 0xd8) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x622bc405516a2239) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000001440)={0x28, 0x0, 0x3, {{0x8857, 0x2e4, 0x1}}}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x400000000039604, 0x0) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000080)) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) fcntl$setstatus(r4, 0x4, 0x40400) sendfile(r0, r7, 0x0, 0x200fff) 19:42:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5412, &(0x7f0000000000)) 19:42:54 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) 19:42:54 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4603, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:54 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x400000000039604, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) accept4$alg(r7, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000200)={{0x1, 0x52}, 'port0\x00', 0x88, 0x1800, 0x748c, 0x1, 0x7fffffff, 0x1, 0x6, 0x0, 0x4, 0x2}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000028c0)='TIPC\x00') getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x30, r8, 0x1, 0x0, 0x0, {{}, {}, {0xb}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x4, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000140)=0x1, 0x4) ioctl$TIOCSCTTY(r9, 0x540e, 0x0) [ 714.083947][T27834] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 714.282070][T27846] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 19:42:55 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$TIOCEXCL(r0, 0x540c) 19:42:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5413, &(0x7f0000000000)) 19:42:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4604, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:42:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0)='NLBL_CIPSOv4\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20082, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x1000000) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000000)={0x4, 0x103, 0x5, {0xffffffff, 0x6, 0x1, 0xe66}}) 19:42:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x2) syz_usb_connect$cdc_ecm(0x5, 0x175, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x163, 0x1, 0x1, 0x6, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x3, {{0xa, 0x24, 0x6, 0x0, 0x0, "da42766204"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x4d01, 0xc99b, 0x0, 0xa1}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @dmm={0x7, 0x24, 0x14, 0x20, 0x1}, @country_functional={0xa, 0x24, 0x7, 0x7, 0x6, [0x5134, 0x5]}, @mdlm_detail={0xfd, 0x24, 0x13, 0x1, "06cec47d8d309b1b26dc6ba0c9d66c30fbb9f3b318f43dd29643a78aae6b85588406b094c67484cdd7bd147c75a3938e325cee3abe24efe585fe17eb462d5ad7a88ad61275e7bf0ae4246ef2bf44a9efa2f48f6424fe28a35f608a5df7b8ae29283bb0caa2fdf82e5c9c72af2d244b46981e95df9b04edea63b298630cdaddc692efdcda547756fdd9b76c8981a35242c8a1788a35c397b1480f6ae22e1b808d5bad0eb91169c1b3e2ed50f9e65c528fe3f657609a98b950bdb8faa6fe17481503aff3f30265a135b6e3c900d1fdb9d9d7619292133df03371b873bb5c6673f3ae672101b5ef536f5d4c19fb78a5a3666e84feefecea9d15f0"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x80, 0x99}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000200)={0xa, 0x6, 0xbd19e1a36c68b3e7, 0x4, 0x4, 0x9, 0x8, 0x4}, 0x49, &(0x7f0000000240)={0x5, 0xf, 0x49, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x7, 0x9, 0x4, 0xff}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "1714f2a724b6dbb8d7f5471ed44ac85a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x2, 0x81, 0x5, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0xff, 0x0, 0x7e1f0cb, 0xf00, 0x2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x20, 0x8, 0x0, 0xa6}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc01}}, {0xa, &(0x7f0000000340)=@string={0xa, 0x3, "300a6e312216f462"}}, {0xf7, &(0x7f0000000380)=@string={0xf7, 0x3, "7f77c72d1478f5bc905f0487b2c8a811ab6a31c00163e3598c4a3ca46a129e45596471cd066bf9febbdd38c2508afd5ee42e58a983831c0f76097ff16880a26e0c473f800b28407bdc3c8fa8f6b9d5598396aa1803520d496be66d6e4047a76d240da2c875bfe2677b3649c198f944be05dbaa654e5bbc7d568f3c343cdea6dbe449cf96312083ffd4d0eb3b17b91a962dfead5c3aaffde4d256a5e6070da2fce183ac268daed542f250c46e2a8a79bda1f544a7df1238815feda183bba59090a1168c975b16915aa0ff45cbf9365645a9d9c1693d79ddb11bae4ec2481e2172c78202385a47db4c73fb1dc7d9bf158549a0fdca69"}}, {0xbc, &(0x7f0000000480)=@string={0xbc, 0x3, "33596e6c3146db3504b812f7bf2a087246f13d610f98bf183018eacd739bbaa7a7198b61bb9b14110b6777e52ce32b8903167bcba530599754a53fbfdeb45a21502c71b8acfe13d481c706cf9d18881cade55fec7e915bf6e55571c71c3e7c2c12e508adc7086cd00d74416c7a5c36b65e8e495452ee4a43b8fd24d59e7c325503c93649c77c92489a35c623ff5bf7b982305f58503ce1c89e34762248d8f79fa56f705457bff8fcba3e9a7c8287396a911dc9f6a480048ed28e"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1c0a}}]}) 19:42:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 714.926545][ T3665] usb 6-1: new high-speed USB device number 13 using dummy_hcd 19:42:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5414, &(0x7f0000000000)) 19:42:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4605, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:42:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 715.047040][ T29] audit: type=1800 audit(1593891775.781:397): pid=27832 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16382 res=0 19:42:55 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x400000000039604, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000040)=0x6) fcntl$setflags(r2, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) ftruncate(0xffffffffffffffff, 0x2008002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200fff) prctl$PR_CAPBSET_READ(0x17, 0x13) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r6, &(0x7f0000001980)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6ae}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}], "b52856cab01e06147f23d1c393b420cb3edd4910a935af462e345ab7b13bc8fec6f428656c3f8b8db477c0997a80f813ef7a6cb14654f5ac8f4c43055cfc594ac978d02271235fa06ca27223830eb4c2daf75c35baddfafbd70af767dd1517f260ea09", [[], [], [], [], [], [], []]}, 0x7db) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYRES64=r1], 0x10b0) 19:42:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5415, &(0x7f0000000000)) 19:42:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 715.196383][ T3665] usb 6-1: Using ep0 maxpacket: 8 19:42:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:42:56 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4608, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5416, &(0x7f0000000000)) [ 715.326402][ T3665] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1024 [ 715.353108][ T3665] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 715.417766][ T3665] usb 6-1: config 1 interface 0 has no altsetting 0 [ 715.596451][ T3665] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 715.605627][ T3665] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.641680][ T3665] usb 6-1: Product: ਰㅮᘢ拴 [ 715.655896][ T3665] usb 6-1: Manufacturer: à° [ 715.660556][ T3665] usb 6-1: SerialNumber: ç¿â·‡ç ”ë³µå¾èœ„좲ᆨ檫쀱æŒå§£äªŒê¼á‰ªä–žæ‘™ìµ±æ¬†ï»¹ìˆ¸è©å»½â»¤ê¥˜èŽƒà¼œà¥¶ï…¿è¨æº¢äœŒè€¿â ‹ç­€ã³œê¢ë§¶å§•éšƒá¢ªåˆƒä¤î™«æ¹­ä€æ¶§à´¤ì¢¢ë½µæŸ¢ã™»ì…‰ï¦˜ë¹„斪孎綼轖ã¼ä§¤é›â€±ï¾ƒíƒ”㯫뤗阚︭岭꼺囒ഇﲢè¡âš¬êºä‹•åƒ²æ»„訪뵹ê„ዟ脸莡ꖻé‚ᚡ鞌ᙛ媑ﾠ쭅㛹䕖æ§ç¤½ë‡ê¸›ì‰Žá¹ˆçˆ¡è‹‡ã ‚äšä³›ï­³ìœë¿™è”•ê‰ì«½ [ 715.727703][T27872] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 715.734718][T27872] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 716.086064][ T3665] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 716.094783][ T3665] usb 6-1: USB disconnect, device number 13 19:42:57 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4609, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5418, &(0x7f0000000000)) 19:42:57 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket(0x11, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x1, @mcast2, 0xfffff499, 0x4}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800e1ffffff1d0d8000"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000a0001006e6574076d000000280002000000000000000000000000000000000000000000000000000c00040000000000000000008bcbda521d93f0bb07652a6da02885c08abf5e05dac2d23ff90215ea6d848f14dd04bd0033db5e6a1e9cca1d0e19477e1d33008fc13990d740388aeedca39caccb129f0fad851bc07d8b8d1454a92c157d51011fc2b06863883b68255bf93bf5b6c7115de5840bf680f18e4d46f5e61c1cdc1042f3af3f5b28d15716819d7906b16160a7cd79216abc0cb55dcdaf5922c8be4e360b01a183ee24ed85baaa8ccea88a62592fe3bcf867347abf43042827027c89fcbb3e38d75e5d0eb23a81224071c43395e19f1f221706074d1f41668f3f89b61c2f05789a42c8df0819b311dd49f86b"], 0x58}}, 0x0) bind(r1, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x83de, @local, 0x1}}, 0x80) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r8 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r8, 0x2008002) sendfile(r0, r8, 0x0, 0x200fff) 19:42:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:42:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) r1 = pidfd_open(0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x400000000039604, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESHEX=r2, @ANYRESDEC, @ANYRESOCT=r1, @ANYRES32=r4, @ANYRES32=r4, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX], 0x4) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(0xffffffffffffffff, r6, &(0x7f00000001c0)=0x202, 0x4000000000dc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/1816], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r7, 0xc0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x3d) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r8}, 0xc) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r9, r6, 0x0, 0x6, &(0x7f0000000100)='<\xa9\x91\xa2w\x90', r8}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r5, 0x0, 0x1, &(0x7f0000000040)='\x00', r8}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000000)='\\\x00', r10}, 0x30) 19:42:57 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1b5b073b3100000000000000000000000000000000000000000000000000000072000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaa1bde3764166945dc9ba4100"/132], 0x78) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000200)={0x3, "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"}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400000000039604, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='&\x00'}, 0x10) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x400000000039604, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000100)=0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r6, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$TIOCSISO7816(r6, 0xc0285443, &(0x7f00000000c0)={0x9, 0x5, 0x5, 0x6, 0x9}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3, 0x4, 0x1, 0x3f, 0x0, 0xe2, 0x82460, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0xf}, 0x220, 0x2004, 0x3, 0x9, 0x7ff, 0xfffffffd, 0x1}, 0x0, 0xa, r2, 0x8) 19:42:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x541b, &(0x7f0000000000)) [ 716.573049][T27942] __nla_validate_parse: 4 callbacks suppressed [ 716.573059][T27942] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:42:57 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x460f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x541c, &(0x7f0000000000)) [ 716.693204][T27949] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:57 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4610, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 716.758066][T27960] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 716.780118][ T29] audit: type=1800 audit(1593891777.511:398): pid=27948 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16381 res=0 19:42:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:42:57 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyprintk\x00', 0x800, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000340)='trusted.overlay.origin\x00', &(0x7f0000000380)='y\x00', 0x2, 0x1) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008005) sendfile(r0, r4, 0x0, 0x200fff) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000040)=0x10000, &(0x7f0000000080)=0x4) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8000000090103002dbd7000ffdbdf25050000070c0014000a09740307e52e266ab20be10d6fea8259d2d5ff9383499568f2bc234ca61c6f64c06d240c58e77fb260e70b122b413625d0b645fa69935a6fffdc012cb0d40190116d2901ecb268ecaabdeaee03e448f994f17f4f6b75108466fd383ba1fa3c8acfd52903b4945fd76f39c411e2e8180b610b2e1e2ee85bd667bd267d6e9cc31ad338bb3c02dad85772ba498bf02a6927b27e8d8add25918eced7fa934bd7050ba406004924e55fbc7ec64002ecf66dac679ac867c33a5fc0c69796dabcab89a897ccd8012aed5038df5b5bb1d83aaa23c3210000c0cf9be8cb441a056bd964625403207c67a0cdd9b7148c578879d87cb2daafed355bac1c6eb13b72bb6d5b284f46a137b54d1a6627af37e6058bf9a1125d6647f48839960ee7e48a48c2244137ccff62053f468439cd32db4218597b7985293a823220d6c01bcc6f408e764d4d622e08dfbc322fd0d76dc9384ac0806d7da895900a2cb3f9e879b1d30d7c2478509dfe7c0a"], 0xf8}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 19:42:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x541d, &(0x7f0000000000)) 19:42:57 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4611, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x541e, &(0x7f0000000000)) [ 716.999841][T27979] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:57 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x400000000039604, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x24, 0x6}, 0x10) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) [ 717.053579][ T29] audit: type=1800 audit(1593891777.781:399): pid=27980 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16363 res=0 19:42:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x541e, &(0x7f0000000000)) 19:42:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x644a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:42:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:42:58 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4615, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'bridge_slave_0\x00', 0x600}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) getsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:42:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5421, &(0x7f0000000000)) 19:42:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @broadcast}, &(0x7f0000000040)=0xc) 19:42:58 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4619, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5422, &(0x7f0000000000)) 19:42:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:42:58 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4c01, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:59 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000080)='./bus\x00', 0x10000, 0xa, &(0x7f0000001700)=[{&(0x7f0000000140)="7c27217a80127be72b8885892c51faf5a5cc73c11dafdd39b7f5a2a2ae92d56da60e778ea5b5cd3c32a2d9bcb25dfb325b81e6c7abf87a56aeacf26c63a0de80a18c2656d86f6147c6d1a6ad2ae4134e3bbbfd9e7f23cc097406cf7e64f225c8bde0f16c150be7f93807b4c480c0ff4b4944732ba08b940c3d7fe1bdbd72301e1c15b49e9675bd24c74b45a0e26f8d8a749edcddaccb730160c3e188199a6f159d42f71d2a658e3429523fc649418744147fcc761dbd9049bf36390e589ce5295c86219c83253269309375", 0xcb, 0x2}, {&(0x7f0000000240)="bb0e497c9281939e7f2dd74564496d65c506a08ae8792435a6411bde3aaa33c2d86d02b94a8e7037029f591f865ac9f61946175824cdc18038bba2c0d2b5b31cdb5cca6be2ccf0a7b6280c0c129f908e3666d561ab3ea8592d3af539a2865f8d029e577ef0d1122df2a2d46097c3ecd989839cc88e25c2e51c8172959dc5cc0feff62b4858f817441b0590bf3bfb0b8be3f9958f196e974cbc5077329e80fef05b10f2b8d80eaf3fcedd0ded27fc4fb4f7cf66251f917f6510a436f23cb7aa8f377d30a4e54f6bb688aeb5b86439c82f56b530de3be59c8230701051a14e6b92dd30054766f27486a1f40df3630c3d9b", 0xf0, 0x5}, {&(0x7f0000000340)="c806d11176e3e5fb18182e6905fe2ccf2811214013e08c4a25822fe545a250acb588", 0x22, 0x9}, {&(0x7f0000000380)="c0008616ee370bf4bbd99e3365882281a402d95db5e0fe49acce7358cf24fc71f526fb0b6d7e345a61cd73cb16e5b022e00385c6e716064d74507e150f621102a857536cc32c6277a5dc388b63a1732f0929f29e797500e3d931bbf5490fb0f3230f4295b3378832fd4ec0576119edee8a7009", 0x73, 0xeff7}, {&(0x7f0000000400)="c87e4c00a872c9d16439ee6be24c9f458e767e00c5c0f40bb189fb813b091f827d367ba3c7e17bce3e71d173441472dd44d1e510ec92ebac201164b393c906a0f4c5ced6d8fde8afeb6c00946336195e2e5cfef33cec409ffa284b21b50c3eac50b0c76281913300950385c3444194fffab0b7aea42729c57715c9f390ce9e552a27032efb594603138e3ea20e8265e9d67391ea66154b17894abb051b26787908eef8c2bf6aa775173758056b59812bab1d0e784c2d749d11aaae8b0f85bfead66b312a7f18477ab4867b4c95e35e7cc8d70949e23ce5e76109b9c0bb723597", 0xe0, 0xf7}, {&(0x7f0000000500)="02823350414f1206c93a3a68666375b8c0eda00f920c1436c84a55dbec73202b37c5d954692b446effe5226254b0712b9274e3a485d3ffd29114d57fb6910638a32bd0e1d2cc0c5c07b9186b55063eb35bf34308e2da3fed34c81158458a03f13c17f572cec5112bd7bf6365f26c7ffca8bc77c701b6184e896cf1ab15fbf0dec906580edc088e6048802d88a023b265a5a7bbb580f93f8f322de7538977957c00c37fabf507678580dd330d", 0xac, 0x3}, {&(0x7f00000005c0)="f4b0d0d07cb4a49632cd08bf9e2a3ec8f87e32b515cbe5f5e88280c93d1d09697c4e3e7d44c34c787e4b5a44c622ccef9ff0110a10589b166f2268f42f3dfb8e9de177daf088d8905fd073f0dc1de258f421fb5718084e7669991d2b3459d1f68b20664b84fcf03646d6e498d01a8e616b2578bd3716cbd01bc2027a6ea08744ef63cb3c471756398e258013e9d06eac6e0826472edbbb0674f92b92e912d4e6c52be27c007f16fbae1f8c8f70b1a9b39b6afbc72e78a4d1b989ca0b9fbe836e8026af8d9078d867d62fc3d1b9ea139fc46647458ecc8a32b19f20ac79da4b41622e5f86c4dcec470f036e61243718ecd0285e3d1075421a7a3e3698a6e1b45648b195fc2c5356b530f5e62a4f85d961840e0eff2d7ba7e083726c02e7e94cf3d4372a8366dc2e66871c8315cdc2e04eab114e392dfb72f1a0a711d2598f155dbd3e453b321387966fb5257c826edf0a1002cb4d4d82733fa5aae8fc3a9822fe7e6d9b044610ca0de1110f34628c5f3d4f0d4b116992753d63bb74f6427ea59ee62b104e2968414be8633db600eaed1d274ee0941450603975730de21ca2912a1fa49f8a93cbe79f43a0e4d8956c452528153de9463aba7f62119445505d51b846a77e319078cd7fbe2daaf5426598d8d7ac6a1d8d759a3abb87a0ee632eceb824986619d6a2a20ae943a6594fa4aa2d142e3abb8d7ef4589d154222bd177a21ceaa674c71d8869b5f044227d4bed726240dc2c1d4ecb7bca89d74e2d30cfca0633b265c889a6c53f67f624bccee425bd0ddc58bcce70ab607abcee8ba747e96cfa450dd6c5ae3c57a173d8dd31c0fc153c5a5cabc0f4794cdae99abc080bdd3bae1d34701f118a50cad69862679601b7cb122b0cf2b06b39061db4c516cf6db8b8e8a8fd5b60bf388be003a190f6e458ef73520a7c57eb06d51576cf4fc788afe9f28d01cece0c009e863eafffffb854b1bfcb793e141513860cb18316662d1458f60c2e53670015547a9655fdebfbddebf65b6485c49e942c0a71995caa9883ba3e8b135e3af29603c9a89bfd1db3dc04bdf94f591a9160314d6906b248a7058f6ab3b3ba479a2782aa5b2d366cb158bca7295c415aa40252910e2e6582c584cd39b5339ac538deb6c6e2ecde7acc107aa80b42913cd1ef3172bdb251730a4892f648967b82e19ba760cf320d3614fbe2de26052ae745d04b1afe36f87735772e8c1d21e13c57889b3d9e83199e242e2c8e101c2a9d29c1879b0516f736c3552a735898dfd928ecf1377a80f32baa1ecdac8b88b47a7ab9a999059ca2e6c2b83d43367342e5cee6593cdd9dbd406898dcaec7653902b866bf1e59e8222fd79f2e61f42c85def226348952ea491a4b2df91a0ca555a73d4bcc93dece4057ca6e8ef0d8e1e89a7314c7f77a80382e7d1d61b37fc02961d249c6d1fb72c50fcfae15fd67360dd30ecb7e7ec6bfcb149b38596dff275f524dbb40c6ff510251f11bd0afc020e9295686dcf1f52477e300404b7f128c9d4e70f158b5bd15c9b9fd1596dc45656cc1db66299707b80d04444d3c4ebf1075b11cc2ffc98c90a9af530fa267a5439d949d46246d883a246ad986535aa95bed5cf6d15fe95acf52e39467d0825699c2ffdc91b7ac47d40b1ce3c131732017198b39a399efc311d8ec889463db734126e0c22c2d7276376d9efbff0289eef767bc2299dfe3e8e5a98a7c06b6012ee686b353834d5780c17e33d7a2b1597ee6ecf117f843e95e69a9a6c2f406a207580604dfc93bd0456fb524a0b9e1e0fb5539d3a1583a4ec6ba47c0de670ffec54e9e256260c00571eb627d64815dd176954a12f694d83001ed25f838f42e658c529e6f67a225d72ced4cfe3fed022c0455e577cd72814e9b51df1066ca7ec69270c78fd474caf151aa337d8601c3802bae700e321cb3829dca00b409c3b7fff269681fe89f6d4ae6c30d5b080fa6cbc3e6ae3196efe7228bedbce9ef96b0088e3421263bbda832c6293a1ef40f1fdbc4e7d694ef0e04756ea947055576c77a19aba9fb16d1046911c057ede87b7289e0ae386cc10d371bb96eaea3162a8b2fbbd023cf34cdc76e770283dda8a884c62d4973b084eb1e426e77f83198f21609f25eb015de092fbe6a519543c590a0822acbd270be8952316cf85687ecddfd18544e3af8c9fa8517ec73faa059ab05c753fe41569c218f29eda41b3a0c92f3420dfc743c492b1e2b2a5af76116320e3b0ad1f9dbbb344604a56d35175cceddeb1dfcf0689c957a0bded3805c2dd87dfe96bbd299c99b56b66416b9f32b9bff3ab629818ed9a08b8a4268ee9bec5331a71751bba5db29665cabf9150e76e8bf66fcad1ff4b863e1dc56f3d0bd2a2b15d2951b829217847355489fe337248aeb654131b9a20b18950c3d7bad9b5281c5769a9f5cb6ce169a9109bb7faaed8ad317dd7e42d5a2f56abf45edc988296975247b993d2aa084b7222dd9e62845892adb6fe04940423c9766267994dc02da7546210bd9f9b967e8f2d0433e2de8297c23d341bc949cdc0bc878da875286ef67ec1fcbfa6d9299ee7dfd860e76a70fac34bdeab1a4d9d9791feb6bd7e2dccdec6238eafd9c348d146c94d401ca652cd4159300d6d994f7048b746a81d5c13eafd93057c091b0d6d430b616945eb32dc7433d24e1450a99a0c8a1d6841e74897d65d0003c7813a1e09d67686127901ab8bdf9a5c1235801008339e8f754eb8904c3cce224dd7749b27d2e26144777a8e1a8435cab5706d285d50f7c1d6938f80b0713b14febbebe9b32d63e2fa76f0a71c7dff2bf45462b618154071677ba9456a70e7bafd9b58a17e6ad02c7a92ee97203689cbf68e848c77d5b67f8da375564ffc33675385e56b1f60f7d8efa52ca449ee1cb06f0cacdd10ab3282116a95ab35cc20bbe7d91d3f7c537277d9d7d020f13bc339b3f3b59f865707163b71f3bc5d97e319b368ff82be797d3ad70e4f2c7eeb0f900cb95643b8ebe3a27c76b05befee165818562f7287173caf26eb3ce5704177b509a9c35eeb0b4b0c6edf9c8f52b418e7b7d7699b39e7cbd0090a177db7b62544c85a331dd1ae86ed98759ae45c38ff3818c679e05b5e07ef05413c96422b0bd4ac162f1458150ae72321ff597885425f674f26d88f9ebb97f39052832c1209540199c4a38edabb4da1c0a90b199299ba89a6eac780d7a79159d5079fb43441e70584da7667eea7dcff1c434bc072eeb3ed6fd6bae001d3e9f1d5512caa6217ce88040f352ef71ad08d18c2840ef3e4e71c517655edab632d31ea17c6290cb04d161630c934da2f0af9706f2368abce96e3bc3e27c263f5699a9304a1735b9c781ed73276e42512cafa04b6a38e8ea9ae2ba338e570bc1fc580ff0d72982409dfa2e617ecfa14c0b2d795e2bba66d011d8e3247ab3ec46c3376dfda5fda30603335556efa99efa449fed5e9dda04665fe07102b79e71eeea393ea42dc3e8d466dd16737c198a106254c192c392a47a814efb9847320ba7e50d356fe748d4bd457af11e93262ac06fd7e3b2729e02d16d0d53cb7cd7a0461cdc6a26c35eab4eeacef09b7f3fb1f661ddf116653dc83578fbe7a2002484a4fec547aab5dd0f53ca4245b98330ad7c2aa7c8156019de676168973edc36391d915477dc0de020e1fd83c7e078f6b2e1dcaa9da2f813710c6aee96fb8af330407aa9ce7078f59f277c5256748b5fd79e2820c10ea539ea6c3effd034251d6dbfd026f27a80092ab3f18bbd8804891a33e312f15ab433fb9e0f0b9c025943f6c8b998aa8b6d4f76aa6b51044d2ce0345dba7a56a9c37f7be4a149c35d72c7317297c584d0267c9afd672b85e54e365cac06a1a444532ca54e55ec301dabed9d4512d1088fe9c7ba1fdb1bdb317707e6cc6ed2f70e55029a5328b2e18ad231a2e7d100796b8dfe00572de2a0859887c00f1f9436187c86eeaec077268ea1251020e6c5e1ba7a87ee75703a6ee8e79175332730e53d324e31354a3f34a3328d1c66eb53acf048214a63a77af4e177b9d1ede7ad6f189d9709cc8a87f2745886713bf76a0b07ae3b679f7cc33c4e51f9ddbe007c7df33c70148a66435fb2228b7d062d4585e3d94b5b6744bf40c397049f1ac8b1a31abb6f376935b69322d6ef4f4d06f1b47dcd44ff006f607e989596f6e768509f9cb1e7fc6018a714e6c9532f9af763ba90b0f93943669ebceabbc5286e124800ff191f6725e0216f043c49f858f406a28b7de57d3348845dbedd4d2998728c2f244a5097cbe8be4055f5535eb9f3dcc0ad0c08189d968e19d134712be787ce5f1735925450479ef568240a66aa485e4863dc555b457be6eaa2a82b458275a858a55d1f026fb47bd2a61af3395a305c90cc8616fb76a04b4dd7d96d4d8c3edf162f9e4b02a770fb4671c9180ffeca51d4226738d5f48b8b1361a41a8ce309f87070356670e08b64653c62e69edc73482733d03bd3eeccabfce2e2c00797adf55ae60db7a2cccfebfe2d09c022207f409da10adc5124fcfda71c1999c12bf7a494ac913e4159ff065c098bc5d7718136c11892511f78b26f2b904690e157cbc8725fcaab55684346c2e2082985088514b290f833c358a19da9639d568ddb6bf56156bf69737c4ee486a6f2c405e3311d178c73b0fb031cfd0b7d3629b109344a76841c87fcb9d759db9c9865e3c3ad0c9e7583d08fcb8bcd84339e80a67d5beca2ab9071a3b131bbf48680357058537e38327d072edd8b9fbd49adf1bf983d376af5cf106a243991d610097c452e8cb83a942d9ea2209a2180eef989272f82f06a50b955d7a66bb219b486b43b63a8fbb2fb0823dbe11aea4d5cdde829b61d5885597211612e1df15f3f6fff36f2eb5af5a317482b4a47b4cd65e6ebbe09ddde592b481498dbacef720f928ad5c885f2ac32e808cdce2d2b44adf36983e7ee0f29fd88b6eb75bc12114e2bc3971e9d41bc4bab2602aa27840a69f697345dba283f6df03facf91f44b08052ec9394dd20632e9bae69e2ecbd7d1c3de9bb7e33d0a9d974601103aa31e3c4c055b4b86ceeeb377d45cb534884449751c0d3f60bbe0bb794faf66fecead1b07d86e9aa73fe6810810da4ec458f6ad1d3b9dde2d472a2728314d3179bcbe5a2acfcbbb364fdd4770dd7ae00a253630a812563ccecdbcf702681eee9cf8f89b4e960336f8dcb5436a614ab538d5654c1efcc36a11bf1a1000a0a93906cfd90584007425a12be250b606d9811696bd928acbd8b75c2018a83fe19ff9c458e26968de6da786ba1f0c0541e091466c051161a2f6ddfb0f672e1a958e959228267a7949245f73005330a395c95a821b8f4f41e335b4513f827b9f34de2d28615a1142a18c7b39e47c94a3a515499f6b650ca2a14088b3971dd046cdd0858e938b708e2155b4ca504e94c3a83e8d362c5d23a55b1ad7070ef4eb5e2d2be1e9a1b764cb0e6c9591abe4ef3fb5843a80d865e7f170b6255afd545177a0489e3c0cc365d95e99d0efffbff16338e27e00497492bdc6e05e00deb81f0fefa91756a8de00b7064e910d98b515340b64d7ab743b328459fdd8f5c2076e4a859c5dd0f81ece50750249a2f54341e1738e82f201a373e5a0f9f7f918db3e42bda91d1a33f7bd2a4f1dc082e0c95a812903a99cdd66d202fb5165d78c602ba263bc474d68084d7da458306db63f17b15754a04437fef358fbe58635fb56ea51baa7aa3a970e854f3452646a0099b3ef21e983a87538b87ffd8229581f763015ec33d018968c5f354ffec8e8de5b4b50", 0x1000, 0x39}, {&(0x7f00000015c0)="5fd494bdef261f3160994f57413fdfdfcc04ab22d2af9dbe57cd5a2a4756ce3f53473715a1c4", 0x26, 0x7}, {&(0x7f0000001600)="6a15baa904f761303d0c5e3e766a14de864474157d0dfa9c573864491c211e86c0981811672def922ff46ca5dea09af2541cc446af4ced542f64e47262a55890430bf3f4a517dc430f7f25d361b6c6a63b09ed543090cd1c6b732ea5083eb15cce43b05c3046d65f4c1cbc9eb4425164a0d0808cec8e3fd8ccc3a0189fa19579b569053249428ccfca8cec18f51cb3b4264a410f6aef87c740b85a905a6f1d3d83f3cd2087b1174c0df12a3bbe40f82a995027ebaf8482a8d8958f1baddc8bdea197eca508e4782c7c72f67e793c1da7ed012b2df9d84f0c75e1df683ddb7fbd57", 0xe1, 0x101}, {&(0x7f0000002040)="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", 0x1000, 0x1}], 0x0, &(0x7f0000001800)='+\x00') 19:42:59 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'netdevsim0\x00', {0x2, 0x4e22, @remote}}) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x400000000039604, 0x0) setsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000000000)=0x6, 0x4) 19:42:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:42:59 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x541b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5423, &(0x7f0000000000)) 19:42:59 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x6, "857aeda5386b05b64e18a98879feaeeab6fdb2ed6a2d28fc70c812c9e26ee2ad", 0x3, 0x6, 0x4, 0x1fa4eb8, 0x4, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x402200, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b073b31000000000000000000000000000000000000000000000000000000720000000000000000000000000000000000000000003800000000000000000000000000000000000000000056bdce115e0255d2b8cbb54d276d3c3700"/120], 0x78) ppoll(&(0x7f00000008c0)=[{r3, 0x1700}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x400000000039604, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) [ 718.444038][ T29] audit: type=1800 audit(1593891779.171:400): pid=28035 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16365 res=0 19:42:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5424, &(0x7f0000000000)) 19:42:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:42:59 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x5421, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:42:59 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x5450, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 718.725981][T28057] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5425, &(0x7f0000000000)) 19:42:59 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x5451, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 718.900239][T28071] nfs4: Unknown parameter '+' [ 719.156945][T28081] nfs4: Unknown parameter '+' 19:43:00 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x6) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x1}}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0xeb) [ 719.286226][ T29] audit: type=1800 audit(1593891780.021:401): pid=28065 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16365 res=0 19:43:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5427, &(0x7f0000000000)) 19:43:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:00 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x5452, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:00 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x100, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x800, 0x7f) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) fsetxattr$security_evm(r5, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@v1={0x2, "292f2b9b"}, 0x5, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40, 0x0, 0x8a7a, 0xcf7}}, 0x21) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000040)=ANY=[], 0x4) ioctl$BLKRRPART(r6, 0x125f, 0x0) 19:43:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x30000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x6, 0x80, 0x1013, 0x7, 0xb, 0x3, 0x3d32340ea48194ec, 0x3}}) 19:43:00 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r3, 0x540e, 0x0) [ 719.569135][T28100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:00 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x5460, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5428, &(0x7f0000000000)) [ 719.644943][ T29] audit: type=1800 audit(1593891780.371:402): pid=28088 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16158 res=0 19:43:00 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) ftruncate(0xffffffffffffffff, 0x2008002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200fff) 19:43:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5429, &(0x7f0000000000)) 19:43:00 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x6364, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5437, &(0x7f0000000000)) [ 719.863705][T28123] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:00 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2008000) sendfile(r0, r4, 0x0, 0x200fff) 19:43:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5441, &(0x7f0000000000)) 19:43:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8001}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x8000, 0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) 19:43:01 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x8912, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5450, &(0x7f0000000000)) 19:43:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:01 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0xad) r2 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='caif0\x00', 0x10) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000080)=0x7000) accept4$alg(r4, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x13ae, 0x8) write$UHID_INPUT(r3, &(0x7f0000002040)={0x8, {"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", 0x84}}, 0x1006) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000001c0)={0x3}, 0x4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x78) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1000) 19:43:01 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x8933, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:01 executing program 4: epoll_create(0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000900)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xfffffffffffffffd}], "", [[], [], [], [], [], [], [], []]}, 0x878) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, 0x78) ppoll(&(0x7f0000000000)=[{r1, 0x200}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x400000000039604, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1cf8ff00", @ANYRES16=r4, @ANYBLOB="090700000000000000000100000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) [ 720.659912][T28156] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5451, &(0x7f0000000000)) 19:43:01 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0xaf01, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 720.785243][ T29] audit: type=1800 audit(1593891781.511:403): pid=28160 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16153 res=0 19:43:01 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x2c, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a38e875f2e3ff5f163ee340b7679500800000000000000101013c5811039e55775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740800000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x4) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x141003, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000040)=ANY=[], 0x4) pipe(&(0x7f0000000000)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000140)) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:43:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5452, &(0x7f0000000000)) [ 720.884093][T28162] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:01 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0xaf02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ppoll(&(0x7f00000008c0)=[{r0, 0x667a}], 0x1, &(0x7f0000000900)={r1, r2+10000000}, 0x0, 0x0) gettid() 19:43:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x545d, &(0x7f0000000000)) [ 721.064558][T28186] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:01 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x400454ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 721.169162][ T29] audit: type=1800 audit(1593891781.901:404): pid=28188 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16169 res=0 19:43:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5460, &(0x7f0000000000)) 19:43:02 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xb6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) 19:43:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:02 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x40049409, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5501, &(0x7f0000000000)) 19:43:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5509, &(0x7f0000000000)) 19:43:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:02 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4008af03, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 721.676234][T28220] __nla_validate_parse: 1 callbacks suppressed [ 721.676243][T28220] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5600, &(0x7f0000000000)) 19:43:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000000)=""/138, 0x8a) 19:43:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:02 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4008af30, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5601, &(0x7f0000000000)) [ 722.162746][ T29] audit: type=1800 audit(1593891782.891:405): pid=28216 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16365 res=0 19:43:03 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x400000000039604, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) bind$alg(r6, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r8 = accept4$alg(r6, 0x0, 0x0, 0x0) splice(r5, 0x0, r8, 0x0, 0x400000000039604, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) sendfile(r0, r4, 0x0, 0x200fff) [ 722.248097][T28239] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5602, &(0x7f0000000000)) 19:43:03 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x40186366, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) unshare(0xc00) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:43:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5603, &(0x7f0000000000)) 19:43:03 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4020940d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 722.594430][T28260] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) sendto$netrom(r1, &(0x7f0000000000)="31248ef2d9eac69fe49fa4de0015139318b719ef13cf75977ea8fce2838a4f3ea8c1cb6920f4311230d548bbc740b5b0fdd5fe51a81c8de1c28698a60a4e8fe4ba8704bc241f9c4b599ed807d0786f4060eab1b7c339f51f4af6ff65dc258469cf4a91b91dc7c6511f09941060fe33e983568d04f4d32592470c0c9c70e95cad3af3ea79162a4264b1d26f11296ae8627861d020528b7c33d63fcba1993d49ed439a364538e35d0e377b090cfe3197aca2db14f5a26fb8cd6b46f289b6f7b7cef157fde50bcb89c34fafcaf2d8a8c7ca793da3a935cb9f7c241596357279556c5ec826bcada48dbf284d99de2a25d2e525a23b", 0xf3, 0x40001, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) 19:43:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5605, &(0x7f0000000000)) 19:43:03 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5606, &(0x7f0000000000)) [ 722.894549][T28278] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 723.386199][ T29] audit: type=1800 audit(1593891784.121:406): pid=28256 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16159 res=0 19:43:04 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x400000000039604, 0x0) write$cgroup_type(r4, &(0x7f0000000040)='threaded\x00', 0x9) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) 19:43:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5607, &(0x7f0000000000)) 19:43:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 723.607418][T28298] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5608, &(0x7f0000000000)) 19:43:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r3 = dup(r2) dup2(r3, r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa826008}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1a0, 0x1403, 0x2, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x80}, 0x4800) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @empty}, 0xc, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='wg2\x00', 0x0, 0xfffffffffffffffa, 0xe4}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x0, 0x8, 0x801, 0x0, 0x0, {0x9, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008084}, 0x20048054) 19:43:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x5609, &(0x7f0000000000)) 19:43:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x80086301, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:04 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) 19:43:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x560a, &(0x7f0000000000)) [ 723.998002][T28317] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:05 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) dup(r1) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0x80184132, &(0x7f0000000080)) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) 19:43:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1b5b073b310000000000030000000000000000000000000000000000000000007200000000000000000000000000000000000000000038000000000000000000000000000000002c41cac9000000000000000000000000000000000000000000000000000000000000000000008e2f6fefec0000000073c058270fedc2f440f77bf90000"], 0x78) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={r6, 0x0, 0x10}, &(0x7f00000000c0)=0x18) fcntl$addseals(r2, 0x409, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={r6, 0x7}, &(0x7f0000000080)=0x8) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x141}], 0x2, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000140)={0x0, 0xff, 0x1, [], &(0x7f0000000100)=0xaf}) 19:43:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x560b, &(0x7f0000000000)) [ 724.686668][ T29] audit: type=1800 audit(1593891785.422:407): pid=28332 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16151 res=0 [ 724.804362][T28339] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x560c, &(0x7f0000000000)) 19:43:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:05 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x6, 0x5, 0x7}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000080)=0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x1f) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r4}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f00000000c0)={0x7f, 0xffffff64, 0x20, 0x4, 0x2}) 19:43:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x560d, &(0x7f0000000000)) [ 725.114221][T28361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:06 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000080)) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)=0x14) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x3}, 0x4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) 19:43:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x560e, &(0x7f0000000000)) 19:43:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) 19:43:06 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0xc0684608, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 726.139037][T28391] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:06 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x3c, r2, 0x90d, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf8, r2, 0xa4ba8ed588648add, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xc52}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) 19:43:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 726.404823][T28405] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:07 executing program 4: ppoll(&(0x7f00000008c0)=[{}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x402082, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x3e, "809e47fea73822ae8b7b2d28f7ceb068acaf2285625473738fe52478ceca1056", 0x6, 0x20, 0xfffffff9, 0x1, 0x16, 0x3, 0xc99, 0x77}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x40, 0x0) sendto$packet(r3, &(0x7f00000001c0)="d0690a4197023df911b86484497eb3e94135f70f3b28d6cd2730ecf37fcc7461243cf378cde59e37e173955426eefb7b1c204f42adfb845daaf36dcd49d9ab922194aea619fe44319437fe772aa32bdf7fb04dae3af58a810ab96686fa386779c28ee84550942fd0863795cda3a49e70134458c03610d2854ab18587b7b65673657eb683fa015531d022a14c2e7775f15192570b2e17573f80e4d29dcb204d98a36fc76669aba9731579036636425aca23a50898c0aa764482d6b1", 0xbb, 0x801, &(0x7f0000000280)={0x11, 0x17, 0x0, 0x1, 0x8, 0x6, @local}, 0x14) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x400000000039604, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x3, 0x473, 0xc53, 0x1, 0x6, 0xb4c, 0x3, 0x9, 0x3, 0xa028, 0x7fff, 0x0, 0x983], 0xf000, 0x40}) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x800, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x440, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) 19:43:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 726.743011][T28426] QAT: Invalid ioctl [ 726.813023][T28430] __nla_validate_parse: 1 callbacks suppressed [ 726.813034][T28430] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:08 executing program 3: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:08 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x560f, &(0x7f0000000000)) 19:43:08 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) bind(0xffffffffffffffff, &(0x7f00000000c0)=@generic={0x2a, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x400000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000140)) 19:43:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x6364, &(0x7f0000000000)) [ 727.381737][T28448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:08 executing program 3: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 727.518922][ T29] audit: type=1800 audit(1593891788.252:408): pid=28449 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16373 res=0 19:43:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:43:08 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x890b, &(0x7f0000000000)) 19:43:08 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @broadcast}, 0x4, 0x1, 0x4, 0x3}}, 0x80) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000140)={'macvtap0\x00', 0x6}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x400000000039604, 0x0) move_mount(r4, &(0x7f0000000040)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x2) [ 727.637431][T28461] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:08 executing program 4: munlockall() r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) sendto$inet(r1, &(0x7f00000000c0)="84ba457fff2f0c34c4a60b926c74c25ed98681c76f44bd4853d01611c0255dc2ace9b9c83583c235e5c16d67a0e3ef3bf946bc8a434ca7247a543059d2cbb360114ac3eee2a43d668a2ffe11e99efe1d3fa954ddc975824afd73899f0fe1f5cec0605c6a", 0x64, 0x4080, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) ioctl(r0, 0x80000001, &(0x7f0000000000)="7495d7a5423957fd4d75cb08c3f2a07e3a685bc0410ac67b6c3d7de66f761cb93bcc107bdd8e8182a75fb9e188a452a084b99cbeb57c1421738c51ec4846b3a7558870d60a63d8159a5287cf4c23764359e9c6ebe6f906f20f8d08e3afa008fa560265c57a0741dd32478431d94ce32e77639c8ef0dc91c726bb21edf0fd09f0c97efd9df5547f4e44") 19:43:08 executing program 3: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x8916, &(0x7f0000000000)) 19:43:08 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 727.944832][T28480] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x5, 0x0, 0x0, {0xc}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000005) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000, 0x0) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:43:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x8933, &(0x7f0000000000)) 19:43:08 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x8936, &(0x7f0000000000)) [ 728.247584][T28497] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:09 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000080)={{0x6, 0x2}, 0x1}, 0x10) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) memfd_create(&(0x7f0000000000)='-\xb5-}\x00', 0x1) 19:43:09 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x9205, &(0x7f0000000000)) [ 728.819391][ T29] audit: type=1800 audit(1593891789.552:409): pid=28473 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16382 res=0 19:43:09 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) write(r2, &(0x7f0000000040)="5292c5ed0521e90d", 0x8) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) 19:43:09 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0xae01, &(0x7f0000000000)) 19:43:09 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000fbffffff549ae750246dd93ef4938ddd8f057f0c3dc5fadc5750c778104633c3a4155551814f9f1f209496be8cef47224e7b152a5ff4bcebf19b2bc07b416eeef3c7ea0c7ab038985d63a3e14b94b472249479da8fd6c806abed256fbe7a5d9d41021230a46dc0b867fb1b789df5", @ANYRES16=r1, @ANYBLOB="01000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f0001000000000000000c0090000000000900000000"], 0x54}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r2, 0x3202}], 0x1, &(0x7f0000000900), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000300)={0x3, "5984fd"}, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) splice(r3, 0x0, r6, 0x0, 0x400000000039604, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000040)=ANY=[], 0x4) accept$alg(r7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x140a, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xffffffff}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x48}}, 0x4008004) [ 728.941442][T28521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0xaf01, &(0x7f0000000000)) 19:43:09 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:09 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x400454ca, &(0x7f0000000000)) [ 729.198945][T28536] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4004550a, &(0x7f0000000000)) 19:43:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 729.491176][T28551] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 729.526284][ T29] audit: type=1800 audit(1593891790.262:410): pid=28531 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16173 res=0 19:43:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x800, 0x200) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendfile(r0, r4, 0x0, 0x200fff) 19:43:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x40049409, &(0x7f0000000000)) 19:43:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x40085503, &(0x7f0000000000)) 19:43:10 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x0) sendto$unix(r0, &(0x7f0000000000)="226473af11128fccb74dfbce5fa9ad4b73218930cd905f7f3472d0adb21e1ab263e088", 0x23, 0x4008000, 0x0, 0x0) ppoll(&(0x7f00000008c0), 0x0, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:43:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4008af03, &(0x7f0000000000)) [ 729.820607][T28565] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) socket(0x2a, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x2) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 729.985183][ T29] audit: type=1800 audit(1593891790.722:411): pid=28570 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16375 res=0 [ 730.052813][T28581] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4008af30, &(0x7f0000000000)) 19:43:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x40095505, &(0x7f0000000000)) 19:43:11 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x542f, 0x0) socket(0x11, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) bind(r2, &(0x7f00000000c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-twofish-avx\x00'}, 0x80) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040)={0x2, 'netpci0\x00', {}, 0x4}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r0, r6, 0x0, 0x200fff) 19:43:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x40186366, &(0x7f0000000000)) 19:43:11 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:11 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ppoll(&(0x7f0000000040)=[{r0, 0x8014}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:43:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4020940d, &(0x7f0000000000)) 19:43:11 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x14000, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "08f556b411ed8e7c", "eeb493db8fbc2900d061673f8ccbceca465a3ddceb6296cb149f95a82eda68b8", "5605c930", "696836afbfcd63ad"}, 0x38) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x400000000039604, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) r5 = socket(0x5, 0x2, 0x0) bind(r5, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @loopback}, 0x1, 0x1, 0x7, 0x3}}, 0x80) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r8, 0xffffffffffffffff, 0x0, 0x200fff) 19:43:11 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x400000000039604, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000000)={0x8, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0xfffffffffffffff8, r6, 0x2, 0x1}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:43:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x40284504, &(0x7f0000000000)) 19:43:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:11 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$KDSETLED(r1, 0x4b32, 0x101) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:43:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4028af11, &(0x7f0000000000)) 19:43:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x40405514, &(0x7f0000000000)) 19:43:12 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) getpid() pidfd_open(0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x400000000039604, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x200, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x78) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) splice(r7, 0x0, r7, 0x0, 0x400000000039604, 0x2) r8 = openat(r5, &(0x7f0000000080)='./file0\x00', 0x28000, 0xe) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[r3, 0xffffffffffffffff, r4, r8]}, 0x4) 19:43:12 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0x3) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:43:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x41015500, &(0x7f0000000000)) 19:43:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:12 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, 0x0) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000000)=""/183) 19:43:12 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x6, 0xcd, 0x1, 'queue0\x00'}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) [ 731.936317][ T29] audit: type=1800 audit(1593891792.672:412): pid=28686 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16174 res=0 19:43:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0xa8d}, [{0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffe}]}, 0x78) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) [ 732.018094][T28697] QAT: Invalid ioctl [ 732.032019][T28697] QAT: Invalid ioctl [ 732.048310][T28701] __nla_validate_parse: 5 callbacks suppressed [ 732.048318][T28701] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:12 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x80045432, &(0x7f0000000000)) 19:43:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000200)=""/192, 0xc0}], 0x2, &(0x7f00000002c0)=""/116, 0x74}, 0x80012100) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={'vcan0\x00', {0x2, 0x4e20, @remote}}) 19:43:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x80045440, &(0x7f0000000000)) [ 732.774753][ T29] audit: type=1800 audit(1593891793.502:413): pid=28731 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16244 res=0 19:43:13 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0x1d4, r4) r5 = request_key(&(0x7f00000013c0)='rxrpc_s\x00', &(0x7f0000001400)={'syz', 0x2}, &(0x7f0000001440)='^-\x00', 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r4, &(0x7f0000001380)=[{&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000001180)="a40d859beb87af8125e67bd83a075a", 0xf}, {&(0x7f00000011c0)="af8b054b6784214f0a0deb2bed98a5d12ba7eb0f0d7c9f94221765fbddd1caa507326f3b7db275c28ca01079c795f1cfe9af959c7f11aab95fba68ab9fd883770be3297487d381affa5d3653e91c61a10d507a473d8b7498393039fdc176d3bdd9814169a710588b9e77a30159e5f9b14e1f4e4667b85b0262fad1c4b86f151fdacaecf09ea63d1dc18571f2c59da1a12fa284579c7efc00550cbaf67bb7625d609a3d379d0e0795c08107aac93723c7bec717d4e5f2a57820a4a6f962fbdc3d94db65c5acd3f4ac153e46ec4981078eccf8644971", 0xd5}, {&(0x7f00000012c0)="9201ce7fa357d7156fd8014b9b87ca7b1edc253c27d7ef9a0ca412f24115359fc8cb5c3ddeb50445e93324636dd3e651cec68954a86ddfb61f49313574c3eb2911a34ded644f296eda43fb88b740375bbe28f1136fd65bde4f312c6bef0ea5fa1a81d1b4613c25a234e377cd3c4f48c045f5763918af4440d1fcd97dee6a7dac98d75557ec7179386bb836771a997c77d4e6b52dc28ef79c6799647543", 0x9d}], 0x4, r5) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) name_to_handle_at(r6, &(0x7f0000000040)='./bus\x00', &(0x7f0000000140)={0x1008, 0x0, "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"}, &(0x7f0000000080), 0x1000) sendfile(r0, r6, 0x0, 0x200fff) 19:43:13 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0x9, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:43:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = getpid() pidfd_open(r2, 0x0) r3 = getpid() pidfd_open(r3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) r5 = clone3(&(0x7f0000000280)={0x10000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), {0x9}, &(0x7f0000000200)=""/62, 0x3e, &(0x7f0000000940)=""/4096, &(0x7f0000000240)=[0x0, 0x0, r2, r3], 0x4, {r4}}, 0x58) getpgid(r5) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0x1d4, r1) r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0x1d4, r6) keyctl$instantiate(0xc, r1, 0x0, 0x0, r6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000040)=ANY=[], 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000040)=ANY=[], 0x4) ioctl$RTC_AIE_ON(r8, 0x7001) ppoll(&(0x7f00000008c0)=[{r0, 0x4}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:43:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x80085502, &(0x7f0000000000)) 19:43:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x80086301, &(0x7f0000000000)) 19:43:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:13 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000002c0)={0x5, 0x2, &(0x7f0000000140)=[0x7, 0x1], &(0x7f0000000200)=[0x0, 0x8000, 0xe0, 0x406], &(0x7f0000000240)=[0x3ff, 0x9, 0x20, 0x0, 0x101, 0x2, 0x1, 0x5, 0x2, 0x2], &(0x7f0000000280)=[0x2, 0x4, 0x0, 0x8, 0x7, 0x0]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0xd8000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x400000000039604, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000000300)={0x60}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) accept4$llc(r2, 0x0, &(0x7f00000000c0), 0x0) r6 = getpid() pidfd_open(r6, 0x0) syz_open_procfs(r6, &(0x7f0000000340)='net/ip_tables_names\x00') 19:43:13 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0xff01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 19:43:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0xc0045878, &(0x7f0000000000)) 19:43:14 executing program 0: r0 = socket$inet6(0xa, 0x4, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:43:14 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x5) clock_gettime(0x0, &(0x7f0000001bc0)={0x0, 0x0}) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001640)=[{&(0x7f0000000040)=0x1, 0x1}, {&(0x7f0000000080)=0x1}, {&(0x7f00000000c0)=0x1, 0x1}, {&(0x7f0000000100)=0x1, 0x3}, {&(0x7f0000000140)}, {&(0x7f0000000180)=0x1, 0x2}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=0x1, 0x1}, {&(0x7f0000000240)=0x3ff}, {&(0x7f0000000280), 0x2}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=0x2, 0x2}, {&(0x7f0000000340)=0x1, 0x1}, {&(0x7f0000000380)=0x2, 0x2}, {&(0x7f00000003c0), 0x1}, {&(0x7f0000000400)=0x2, 0x1}, {&(0x7f0000000440)=0x2, 0x2}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=0x1}, {&(0x7f0000000500)=0x2, 0x1}, {&(0x7f0000000540)=0x2, 0x1}, {&(0x7f0000000580)=0x1}, {&(0x7f00000005c0)=0x2, 0x1}, {&(0x7f0000000600), 0x1}, {&(0x7f0000000640)}, {&(0x7f0000000680)=0x1, 0x1}, {&(0x7f00000006c0), 0x2}, {&(0x7f0000000700)=0x1}, {&(0x7f0000000740)=0x1, 0x1}, {&(0x7f0000000780)=0x1, 0x2}, {&(0x7f00000007c0), 0x2}, {&(0x7f0000000800), 0x1}, {&(0x7f0000000840)=0x2, 0x1}, {&(0x7f0000000880), 0x2}, {&(0x7f0000000940)=0x1, 0x1}, {&(0x7f0000000980)=0x1, 0x1}, {&(0x7f00000009c0)=0x2, 0x2}, {&(0x7f0000000a00)=0x2, 0x1}, {&(0x7f0000000a40), 0x2}, {&(0x7f0000000a80), 0x1}, {&(0x7f0000000ac0)=0x2, 0x1}, {&(0x7f0000000b00)=0x1}, {&(0x7f0000000b40)=0x1, 0x1}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0), 0x1}, {&(0x7f0000000c00)=0x2}, {&(0x7f0000000c40), 0x2}, {&(0x7f0000000c80), 0x2}, {&(0x7f0000000cc0)=0x2, 0x1}, {&(0x7f0000000d00)=0x1}, {&(0x7f0000000d40), 0x2}, {&(0x7f0000000d80)=0x1, 0x1}, {&(0x7f0000000dc0), 0x2}, {&(0x7f0000000e00)=0x2}, {&(0x7f0000000e40)=0x1, 0x1}, {&(0x7f0000000e80)=0x1, 0x1}, {&(0x7f0000000ec0)=0x2}, {&(0x7f0000000f00)=0x2, 0x2}, {&(0x7f0000000f40), 0x1}, {&(0x7f0000000f80)=0x1, 0x2}, {&(0x7f0000000fc0), 0x1}, {&(0x7f0000001000)=0x1, 0x2}, {&(0x7f0000001040), 0x2}, {&(0x7f0000001080)=0x2, 0x2}, {&(0x7f00000010c0), 0x2}, {&(0x7f0000001100), 0x1}, {&(0x7f0000001140)}, {&(0x7f0000001180)=0x2, 0x2}, {&(0x7f00000011c0)=0x1, 0x1}, {&(0x7f0000001200), 0x1}, {&(0x7f0000001240)}, {&(0x7f0000001280)=0x1, 0x2}, {&(0x7f00000012c0), 0x1}, {&(0x7f0000001300)}, {&(0x7f0000001340)=0x2, 0x2}, {&(0x7f0000001380)=0x2, 0x2}, {&(0x7f00000013c0), 0x2}, {&(0x7f0000001400)=0x2, 0x2}, {&(0x7f0000001440)=0x2, 0x1}, {&(0x7f0000001480), 0x2}, {&(0x7f00000014c0)=0x2}, {&(0x7f0000001500)}, {&(0x7f0000001540)=0x2}, {&(0x7f0000001580)=0x2, 0x2}, {&(0x7f00000015c0)=0x1}, {&(0x7f0000001600), 0x1}], 0xd, 0x56, &(0x7f0000001c00)={r3, r4+10000000}, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r5}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) 19:43:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0xc0045878, &(0x7f0000000000)) 19:43:14 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 733.472125][ T29] audit: type=1800 audit(1593891794.202:414): pid=28750 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16174 res=0 19:43:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0xc0085504, &(0x7f0000000000)) 19:43:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 19:43:14 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0xc0189436, &(0x7f0000000000)) 19:43:14 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 19:43:14 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40200, 0xb0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000200), 0x4) sendto$x25(r1, &(0x7f0000000040)="9878b8153d2d8996c0963ac55b750b18bbffe1bcd7cc81356de68c823bec35af5c412922bdbcec6722cb5be33f79ab03e1254eb8eec8ca3fbeb0a98a9a5242026b1399ffb3f81f21207a70dd51c52c3939a28a5735403ecf577204a17299691bf9fc46d30c6ad650a53ee5e7f809a94aeb193f8abca89f04789b3fae4a6a7ba81bd01bea0ec342067f579bb0192a278f14133b35aaa63cff40e16a8453d636595d8fa04d9e52e02654be50a417c8247d827fd6a6c38382373e660bafd418bbce53c030cfd40e07543a38abf852024073b3a6728c2737da7369bf906e666c7f9560a96696440ab72530b829aae488358ead8f64989ae353e0", 0xf8, 0x8004, &(0x7f0000000140)={0x9, @null=' \x00'}, 0x12) [ 734.048450][ T29] audit: type=1800 audit(1593891794.782:415): pid=28785 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16371 res=0 19:43:14 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400c00, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e22, 0x7, @empty, 0x3}, {0xa, 0x4e20, 0x1, @empty, 0x7ff}, 0x0, [0xffffff22, 0x1a0, 0x1000, 0x1, 0xff, 0x7ff, 0x100, 0x73ac]}, 0x5c) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) 19:43:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SVE_SET_VL(0x32, 0xdf24) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000000)={0xffffffff, 0x42, 0x20, 0xc38}) 19:43:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 19:43:15 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0xc020660b, &(0x7f0000000000)) 19:43:15 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x60a000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r3, 0x0, 0x10}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r3, 0x40000}, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) 19:43:15 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x15, 0x5, 0x0, 0xe7, 0x0, 0x157, 0x10020, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0xe}, 0x908, 0x8001, 0x8, 0x7, 0x81, 0x7, 0x8}, r1, 0x8, r0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) 19:43:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 19:43:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x2}) 19:43:15 executing program 4: ppoll(&(0x7f00000008c0)=[{}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x509000, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x7}) io_uring_setup(0xf32, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x12f}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="20002abd7000fcdbdf25050000004400038008000500e00000021400020076657468305f746f5f626f6e64000000140002006772653000000000000000000000000008000500ac141437050008000000000008000500010100001c000280000b000200000005000d000100000006000b000a000000140002800800060001000000080005006c0000001800028014000100e0000001000000000000000000000000240002800800040006000000060002004e2400000800030003000000060002004e230000080004000080000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000814) 19:43:15 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 734.586750][ T29] audit: type=1800 audit(1593891795.322:416): pid=28819 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16205 res=0 19:43:15 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x400000000039604, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000040)=""/48, &(0x7f0000000080)=0x30) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) socket$packet(0x11, 0x2, 0x300) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r0, r6, 0x0, 0x200fff) 19:43:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 19:43:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) 19:43:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x3}) 19:43:15 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x4}) 19:43:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) 19:43:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x400000000039604, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1, r4, 0x1}) 19:43:15 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x5}) 19:43:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) 19:43:15 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:16 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x20000, 0x0) fstat(r5, &(0x7f0000000140)) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:43:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x6}) 19:43:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000008c0)=[{r0}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @multicast2}}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x8040010) 19:43:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32], 0x48}}, 0x0) 19:43:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) ioctl$DRM_IOCTL_FREE_BUFS(r4, 0x4010641a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[0x0, 0x5, 0x81, 0x4]}) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000040)={0x3, 'ip6gretap0\x00', {0x4735}, 0x200}) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000000)) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 735.985810][ T29] audit: type=1800 audit(1593891796.722:417): pid=28881 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16176 res=0 19:43:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 736.076448][T28889] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x7}) [ 736.137436][T28892] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32], 0x48}}, 0x0) [ 736.186502][T28889] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 736.255098][T28896] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:17 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:17 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000002c0)={0x5, 0x2, &(0x7f0000000140)=[0x7, 0x1], &(0x7f0000000200)=[0x0, 0x8000, 0xe0, 0x406], &(0x7f0000000240)=[0x3ff, 0x9, 0x20, 0x0, 0x101, 0x2, 0x1, 0x5, 0x2, 0x2], &(0x7f0000000280)=[0x2, 0x4, 0x0, 0x8, 0x7, 0x0]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0xd8000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x400000000039604, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000000300)={0x60}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) accept4$llc(r2, 0x0, &(0x7f00000000c0), 0x0) r6 = getpid() pidfd_open(r6, 0x0) syz_open_procfs(r6, &(0x7f0000000340)='net/ip_tables_names\x00') 19:43:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x8}) [ 736.348907][T28914] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:17 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) accept4$alg(r2, 0x0, 0x0, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x5, "b9294de330d37dd2aa7386730ba2c3de6d339637f4c680ec121f8abc9c7f35a22f644634e8f970998e9431a0142124e321581ca1ef7d304523d29c2eefa92b682cf628ce899559fe9bdfc9bccb415c8a94e23a2f7dd38aa9665e01af2025fb97b0cb3a789d28e6a068ddc1c59484dd1df4aca73ce795d45471973169892e"}, 0x80) accept4$inet(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x400) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) 19:43:17 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32], 0x48}}, 0x0) 19:43:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x300}) [ 736.706321][ T29] audit: type=1800 audit(1593891797.443:418): pid=28923 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15764 res=0 19:43:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x500}) [ 736.775713][T28933] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:17 executing program 5: fsopen(&(0x7f0000000000)='rootfs\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:43:17 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) 19:43:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x600}) 19:43:17 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 736.975254][T28943] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 737.222056][ T29] audit: type=1800 audit(1593891797.953:419): pid=28949 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15873 res=0 19:43:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000200)=""/192, 0xc0}], 0x2, &(0x7f00000002c0)=""/116, 0x74}, 0x80012100) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={'vcan0\x00', {0x2, 0x4e20, @remote}}) 19:43:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) 19:43:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x700}) 19:43:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDENABIO(r0, 0x4b36) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00') 19:43:18 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) accept4$alg(r5, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f00000012c0)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x2, &(0x7f0000001240)=""/75, 0x4b}, 0x40000040) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000001300)={0x8, 'hsr0\x00', {'vxcan1\x00'}, 0x4}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r7, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r8, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) sendfile(r0, r8, 0x0, 0x2) [ 737.325387][T28964] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0xff010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0xff00}) 19:43:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) 19:43:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:43:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x400000000039604, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000000)={0x8, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0xfffffffffffffff8, r6, 0x2, 0x1}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 737.542315][T28977] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1000000}) 19:43:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) 19:43:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x400000000039604, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}, 0x11814, 0x0, 0x8, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400000, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r5, 0x0, 0x10}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={r5, 0x3ff}, &(0x7f0000000280)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={r8, 0x0, 0x10}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000080)={r8, @in6={{0xa, 0x4e23, 0x9, @private0, 0x7}}, [0x3, 0x7, 0xa2, 0x80, 0x8, 0x0, 0x1000, 0x3ff, 0x1, 0x8, 0x6, 0x7, 0x780b, 0x0, 0xffff]}, &(0x7f0000000200)=0x100) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) [ 737.748108][ T29] audit: type=1800 audit(1593891798.483:420): pid=28980 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16235 res=0 19:43:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x2000000}) 19:43:18 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x28, 0xa, 0x2) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x8, 0x2000}, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x400000000039604, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, &(0x7f0000000080), &(0x7f0000000140)=0x4) r7 = socket$packet(0x11, 0x4, 0x300) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000180)) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r8 = open(&(0x7f0000002000)='./bus\x00', 0x2160c2, 0x100) ftruncate(r8, 0x2008002) sendfile(r0, r8, 0x0, 0x200fff) 19:43:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) 19:43:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:43:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) 19:43:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x3000000}) 19:43:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:19 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x4000000}) 19:43:19 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0x100, 0x201e, 0x1}) r1 = getpid() pidfd_open(r1, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0xe9, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x85b0, 0x200000000000002}, 0x0, 0x1, 0x800000, 0x5, 0x2, 0x4, 0x3f}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r3, 0x540e, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) 19:43:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) 19:43:19 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 738.481960][T29031] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) [ 738.608124][T29038] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:19 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x3f, 0x6, 0xfffffffe) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) getpeername$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:43:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x5000000}) 19:43:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x84602, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyS3\x00', 0x200000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5d220f29050a10000000031406002bbd7000ffdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8801) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x400000000039604, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x1407, 0x0, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r5 = getpid() pidfd_open(r5, 0x0) ptrace$setregset(0x4205, r5, 0x2, &(0x7f0000000480)={&(0x7f0000000380)="bf99b67df607aa0ed3944057bf1e20420870426f8be21935714ae0345df241fe0fe1ef60", 0x24}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000240)={0xa00000, 0x4362, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x50002, 0x6, [], @value=0x9}}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000280)=0x9, 0x4) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 19:43:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) 19:43:19 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 738.927235][T29049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) 19:43:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) [ 738.953003][T29051] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 739.062726][T29064] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:20 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r4 = syz_open_pts(0xffffffffffffffff, 0x2101) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r6 = mq_open(&(0x7f0000000240)='syz1\x00', 0x80, 0x4, &(0x7f0000000280)={0xfffffffffffffff9, 0xfffffffffffffffa, 0xea4, 0x80000001}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r4, r5, r0, r6], 0x7) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000040)=ANY=[], 0x4) mkdirat$cgroup(r7, &(0x7f0000000040)='syz1\x00', 0x1ff) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r8 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r8, 0x2008002) sendfile(r0, r8, 0x0, 0x201002) [ 739.098657][ T29] audit: type=1800 audit(1593891799.833:421): pid=29060 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16255 res=0 19:43:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) [ 739.236030][T29069] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 739.281632][T29074] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x6000000}) 19:43:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) [ 739.453001][T29081] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:20 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7fffffff, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) 19:43:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) 19:43:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x7000000}) 19:43:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) 19:43:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x8000000}) 19:43:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) 19:43:20 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b073b3100000000000000000000000000000000000000000000000000000072000000000000000000000000000000000000960b00000000000000000000000000000000000000000000000000000000000000000000000071f409d6b308bb4a913932fd9b00"/118], 0x78) ioctl$FIOCLEX(r4, 0x5451) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x3) sendfile(r0, r5, 0x0, 0x200fff) r6 = openat2(r5, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={0x0, 0xd, 0x8}, 0x18) ioctl$FIOCLEX(r6, 0x5451) 19:43:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) [ 739.877226][ T29] audit: type=1800 audit(1593891800.613:422): pid=29077 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16243 res=0 19:43:20 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000028c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0xb}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x400, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VT_ACTIVATE(r4, 0x5606, 0x3) 19:43:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) 19:43:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0xfdfdffff}) 19:43:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7fffffff, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) 19:43:21 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:21 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5903, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) fcntl$setsig(r4, 0xa, 0x26) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x1, 0x0) 19:43:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0xff000000}) 19:43:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7fffffff, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) 19:43:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:21 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) accept4$alg(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x400000000039604, 0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) accept4$alg(r5, 0x0, 0x0, 0x0) bind(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @multicast1}, 0x0, 0x3, 0x4, 0x3}}, 0x80) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r8 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(0xffffffffffffffff, 0x4db) sendfile(r0, r8, 0x0, 0x200fff) 19:43:21 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7fffffff, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) 19:43:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0xfffffdfd}) 19:43:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7fffffff, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) 19:43:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x100000000000000}) 19:43:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:22 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x200000000000000}) 19:43:22 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) bind(0xffffffffffffffff, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000040)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000003c0)=0x1, 0x4) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x26c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x258, 0x4, 0x0, 0x1, [{0x13c, 0x1, 0x0, 0x1, [@dup_ipv6={{0x8, 0x1, 'dup\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @void}, @meta={{0x9, 0x1, 'meta\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x20}]}}, @dup={{0x8, 0x1, 'dup\x00'}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}, @nat={{0x8, 0x1, 'nat\x00'}, @val={0x4}}, @xfrm={{0x9, 0x1, 'xfrm\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}, @socket={{0xb, 0x1, 'socket\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}]}, {0x118, 0x1, 0x0, 0x1, [@counter={{0xc, 0x1, 'counter\x00'}, @void}, @dynset={{0xb, 0x1, 'dynset\x00'}, @void}, @match={{0xa, 0x1, 'match\x00'}, @val={0xb0, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x93, 0x3, "b1865c3e502bf0bddcc44f33783b0df7ccdd223373ba60aaa9dae39f79b1c195b372e044c2a02d124f7e1068d37c9b026e58c8974dc238b299dfdae2da802aef8aae3b740737cd9f2c5e2876ff40ab125039d99801d4445db07380fc02b5c9ea0b3d10cce3b8d283f29501872addc1385c4c79ad41e54ca67a71872b868726131312ae46c05ba06eec741684bc1c40"}, @NFTA_MATCH_NAME={0xd, 0x1, '/\xce+%,\xa3:%\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}}, @masq={{0x9, 0x1, 'masq\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}]}}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x20000042}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) r6 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x400000000039604, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000480)="6fe50d58cc450b6de8b1e332ccc031b185aec14bd4416736857f54bb8292c0f5bf3a3f74da4ec8f6c8de33886f3c0ed3d256405c9f643bf4dbe2a7e8608da67c426b8b6c546f7b3aa0f5c0b603ab4de9ce309e7812efd76abf5d4e28522a7adc8e1c5fdfa7485aac7b0dab7f39c45d2398cbc1196ee42cc5366df786f20178724dc8f7414b39223b0b1da644bcff83c882bc1f9192b9cf9b32c5f666efe0e405db8a28393a7b3c76e57f834c4c243ac14a1a5db2bb6123a6201af0121655ad666394247b71cfc19ae75314889c1c0e99f3a9adafefde98973d2c69cbbba79626b03a3c1c9433714c177563b8fd", 0xed) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) 19:43:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040), 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000380)='./file0\x00', 0x4000, 0xb0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x80000000, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000440)={0x5, 0x7, 0x0, 0x1}, &(0x7f0000000480)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6}}, 0x10) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) personality(0x400000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendto$isdn(r3, &(0x7f0000000080)={0xc74, 0x3, "3cb657f84d420814a3e95f389211318abc3241adfe77046f79e5cd21b1a538556f64dddfe3fd304cab7806793e3c0cbf728c8d639d8ae31cc3c3e6993e6529be94714efe"}, 0x4c, 0x4040004, &(0x7f0000000100)={0x22, 0x3, 0xfd, 0x5, 0x1d}, 0x6) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000200)={0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000340)={r4, 0x1, &(0x7f0000000240)=[0x1], &(0x7f0000000280)=[0x0, 0x9, 0x7f, 0x4, 0xffff], 0x60, 0x3, 0x610, &(0x7f00000002c0)=[0x60, 0xfffffffa, 0x8], &(0x7f0000000300)=[0xbc4, 0xffff, 0xe7, 0x1f, 0x0, 0x3, 0x9, 0x4, 0x7]}) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, r6, 0xb03, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000125bd7000fcdbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) 19:43:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x300000000000000}) 19:43:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x7fffffff, 0x4) [ 741.606116][ T29] audit: type=1800 audit(1593891802.343:423): pid=29176 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16337 res=0 19:43:22 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x29, 0xa, 0x1) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:43:22 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x400000000000000}) 19:43:22 executing program 5: r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 19:43:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() pidfd_open(r0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x4, 0x5, 0x58}) ptrace$setregset(0x4205, r0, 0x6, &(0x7f0000000100)={&(0x7f0000000000)="668bf9c45fff4a7c35202b95c5370acd888786465226e7d8b2c3e30976c19088eb54f4a0b1bba6b0a95357491c2d854a16b6fdea743f6c3e4da8d9ee803cf58141c46829a9bf1c568f63c346dbcf2c1fa1a39a9cd1eb157a00638f127f951fca6bd2ab769349977bf113ecbd2664f0b2b571c43ca321b7a0cdbf7851e01e1d693ccc6ca47944a7471950fc608a54203d0015d1a4c8e575d537711f5cf302f8caf30553240104ffefe4c0195b68dcfde89221e50965fa0dd085c57d4a73ceae54775aed706d8f135cacb3654f03868a4eda84e5fb758e9f1b13813fc7c1f807bac50047c32cc48a2a7798ac65488d5b44ead4a8aec7473ab83a017b7438c482", 0xff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) 19:43:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x500000000000000}) 19:43:22 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 742.093867][ T29] audit: type=1800 audit(1593891802.823:424): pid=29212 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16289 res=0 19:43:22 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0xe, 0x637, 0x5, 0x4800, r4}) dup2(r5, r6) ftruncate(r4, 0x2008002) sendfile(r0, r1, 0x0, 0x2200fff) 19:43:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x600000000000000}) 19:43:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000900)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000940)={0x2, 0x0, [], {0x0, @bt={0x6, 0x1, 0x0, 0x1, 0x6, 0x2, 0x2, 0x7, 0x20, 0x4, 0x7fff, 0x6, 0x8, 0x2, 0x13, 0x8, {0x5, 0x101}, 0x81, 0x4}}}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c000010d53c51fc29bb3f7d0153713df3332049991764b18d4d158eaca2d6e2e0c12afa896ae76c7fb2eb906f268f2af7f7c0900f90f90d7ce14573caa63410ffc4cf7ba31c76c61327f6882a8af308373b1999439b72b2269e1cf1e73bdb0b6e372d93d1dd5871041c4f950325863363d5863c9fefad98474d842d67b7b4ef96f046d6507e48ae7780389252f52c7cd09fd8aa215ff34249115c0bf814cab705f81e249083345ba6878bedb9a861aeef8f03cbb99cacc0b5f2301aae6e5146fdc3616e1d104b0c52a9ffce9ea8d8dc2a983a480705c2898140125946b9e6e59c3c478e6305f80dd9bce0e9a5c24ced09d5b5", @ANYRES16=r3, @ANYBLOB="0d090000000000000000050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030004000000"], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000080)={0xc8, r3, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x50}, 0x24008004) r5 = socket$alg(0x26, 0x5, 0x0) write$P9_RFLUSH(r1, &(0x7f00000008c0)={0x7, 0x6d, 0x1}, 0x7) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) splice(r1, 0x0, r6, 0x0, 0x400000000039604, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000200)={{0x3, 0x1, 0x7fffffff, 0x5, 'syz0\x00', 0x10000}, 0x0, [0x40, 0xc6, 0x14, 0x3, 0x9, 0x3e3, 0x401, 0x9, 0x1, 0x9, 0x101, 0x10001, 0xff, 0x2, 0x1, 0x4, 0x3, 0xffffffff, 0x200, 0x9, 0x0, 0x3, 0x100000001, 0xffffffff00000000, 0x4, 0x43, 0x24f, 0x4, 0x4, 0x100000000, 0x401, 0xe38, 0x3, 0x3, 0x8, 0x3ff, 0x4, 0x1f, 0xfffffffffffffffc, 0x7fffffff, 0x9, 0x1, 0x2, 0x8, 0x6, 0x4, 0x6, 0x2, 0x20, 0x3, 0x2, 0x4, 0x81, 0x8, 0xffffffffffffff9f, 0x7, 0x7f, 0x0, 0x100000001, 0x101, 0x9, 0x0, 0x80000000000000, 0x0, 0x2, 0x0, 0x10000, 0xcf9, 0x8, 0x4, 0x0, 0x7, 0xfffffffffffffffe, 0x7, 0xffffffff7fffffff, 0x9, 0x7fff, 0x200, 0xffffffff, 0x80000001, 0x6, 0xffffffff, 0xffff, 0x6, 0x80000001, 0xfffffffffffffffc, 0x2ea7, 0xfff, 0x10001, 0x31, 0x9, 0x3, 0xf6fc, 0x5, 0x8, 0x2, 0x3, 0xffffffffffffffff, 0xff, 0x0, 0x3, 0x0, 0x6, 0x20, 0x9180, 0x8, 0x0, 0x8, 0xfffffffffffff6ca, 0x2, 0xcc71, 0x6, 0x8, 0x8000, 0x4, 0x9, 0xd9e7, 0x6100000000000000, 0x1, 0x3f, 0x1, 0x0, 0x1ff, 0xf0f, 0x4, 0x10001, 0x6, 0x4]}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r7 = getpid() pidfd_open(r7, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, 0x3e9, 0x800, 0x70bd27, 0x25dfdbfe, {0x8, 0x0, 0x1, r7, 0x1, 0x1, 0x4, 0x80, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x30004001) 19:43:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7fffffff, 0x4) [ 742.431107][T29236] __nla_validate_parse: 9 callbacks suppressed [ 742.431118][T29236] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:23 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x700000000000000}) 19:43:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:23 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000140)) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r5 = openat(r4, &(0x7f0000000040)='./bus\x00', 0x480000, 0x2) bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0xe8, @none, 0x1}, 0xe) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) accept4$alg(r6, 0x0, 0x0, 0x0) bind(r6, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xfff, @loopback, 0x3}}, 0x80) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 742.665187][T29249] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 742.696813][ T29] audit: type=1800 audit(1593891803.433:425): pid=29239 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16263 res=0 19:43:23 executing program 4: ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 742.830894][T29255] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x800000000000000}) 19:43:23 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 742.987723][T29263] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:24 executing program 5: r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80}, 0x804, 0x0, 0x0, 0x8, 0xfffffffffffffffe, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)="21be4574290eebde4cf578ba440480819708e7cbc758104817c59356db7197f4f1f94f7e8747260df173ff32f4b464e92c6ba747f7e6c060f9b194dc81ebb9e033f821c5cc488adfd195b792951580806d175c202ac208602d4831fd9312966b764c135d021109bbea371b755d65c4a4b0ecfe5fced2200b03078832cb8ff4a886b180d53e3ce1489c02832914a46d765a25ef48", 0x94, 0x4000, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 19:43:24 executing program 4: ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0xfdfdffff00000000}) 19:43:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:24 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:24 executing program 4: ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) [ 743.411420][T29282] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 743.435912][ T29] audit: type=1800 audit(1593891804.173:426): pid=29258 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16286 res=0 19:43:24 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:24 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000000040)='./bus\x00', 0x20a083, 0x8) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:43:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0xff00000000000000}) 19:43:24 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:24 executing program 5: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 19:43:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x2}) [ 743.655297][T29297] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:24 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:24 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x3}) 19:43:24 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 743.846762][T29313] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() pidfd_open(r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = getpgrp(r0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x2, 0x1, 0xed, 0x0, 0x95e, 0x82200, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0xafa1, 0x8}, 0x11e43, 0x10000, 0x7, 0x6, 0x20, 0x800, 0x8000}, r2, 0xd, r1, 0x7) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x4) ioctl$IMSETDEVNAME(r5, 0x80184947, &(0x7f0000000100)={0x5, 'syz1\x00'}) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) 19:43:24 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1b, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x400000000039604, 0x0) setsockopt$rose(r2, 0x104, 0x51dda9b42ab2e027, &(0x7f0000000080)=0x5983, 0x4) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000040), 0x10) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r8 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r8, 0x2008002) sendfile(r0, r8, 0x0, 0x200fff) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) 19:43:24 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:24 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0xff01, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x4}) [ 744.098567][T29331] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:25 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x5}) 19:43:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) [ 744.306835][T29340] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:25 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 744.506224][T29350] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:25 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:43:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x6}) 19:43:25 executing program 5: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r1, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) getitimer(0x0, &(0x7f0000000000)) 19:43:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:25 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 745.044892][ T29] audit: type=1800 audit(1593891805.783:427): pid=29360 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16268 res=0 19:43:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x7}) 19:43:25 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:26 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r4 = syz_open_pts(0xffffffffffffffff, 0x2101) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r6 = mq_open(&(0x7f0000000240)='syz1\x00', 0x80, 0x4, &(0x7f0000000280)={0xfffffffffffffff9, 0xfffffffffffffffa, 0xea4, 0x80000001}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r4, r5, r0, r6], 0x7) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000040)=ANY=[], 0x4) mkdirat$cgroup(r7, &(0x7f0000000040)='syz1\x00', 0x1ff) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r8 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r8, 0x2008002) sendfile(r0, r8, 0x0, 0x201002) 19:43:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x8}) 19:43:26 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) 19:43:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xfffffffffffffff8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) [ 745.904388][ T29] audit: type=1800 audit(1593891806.643:428): pid=29397 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16277 res=0 19:43:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:26 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) ioctl$SIOCNRDECOBS(r1, 0x89e2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x400000000039604, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) accept4$alg(r7, 0x0, 0x0, 0x40800) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={r7}) sendfile(r0, r4, 0x0, 0x200fff) 19:43:26 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x300}) 19:43:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x500}) 19:43:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:27 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:27 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40, 0x159, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2}, [], "f20fff548d3a1ca8c97ed4f212def645d33e92486f1d86b5b861a2d3c61b11699348c00f39a5ffffffff0000000041869284f05a5dbc1abe46fe69e9f7b37a42af", [[], []]}, 0x281) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e24, 0x5, @remote, 0x6}, {0xa, 0x4e20, 0x5, @ipv4={[], [], @private=0xa010102}, 0x1}, 0x7, [0x0, 0x3ff, 0x6, 0x6, 0x1, 0xf82f, 0x1, 0x5]}, 0x5c) close(r1) socket(0x11, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) bind(r4, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) r8 = openat2(r3, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={0x208801, 0x187, 0x18}, 0x18) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @mcast2, 0x6}, 0x1c) 19:43:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x600}) 19:43:27 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4611, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:27 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x700}) 19:43:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x7fffffff, 0x4) 19:43:27 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x400000000039604, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x1a4, 0x2, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x0, 0x1, 0xf1db, 0x7]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_NAT_DST={0x7c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5f}, @CTA_ZONE={0x6}, @CTA_TUPLE_REPLY={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={[], [], @loopback}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private=0x2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x44800) 19:43:27 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0xff00}) 19:43:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 19:43:27 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) 19:43:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) 19:43:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x1000000}) 19:43:27 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) [ 747.440945][T29513] __nla_validate_parse: 11 callbacks suppressed [ 747.440951][T29513] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:43:28 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x100, 0x2}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:43:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x2000000}) 19:43:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r3, 0x423, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4008008) 19:43:28 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x180040, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2322}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x38, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x32, 0x1, "6473063517f94457b5da8f2cb6441424f1b182dd930fa8cc830f78144a5f728a8f850650b8270fe33809fd69f9ee"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8c5}, 0x4001) 19:43:28 executing program 5 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 747.886291][ T29] audit: type=1800 audit(1593891808.613:429): pid=29477 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16304 res=0 19:43:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x3000000}) [ 747.999898][T29531] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:43:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 19:43:28 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:28 executing program 4 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) r5 = getpid() pidfd_open(r5, 0x0) sendmsg$AUDIT_SET(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x3e9, 0x200, 0x70bd2c, 0x25dfdbfd, {0x1, 0x1, 0x0, r5, 0x400, 0x4, 0x101, 0x4, 0x0, 0x8}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000830) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x2}]}}}]}, 0x3c}}, 0x0) 19:43:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x4000000}) [ 748.202809][T29546] FAULT_INJECTION: forcing a failure. [ 748.202809][T29546] name failslab, interval 1, probability 0, space 0, times 0 [ 748.271519][T29546] CPU: 0 PID: 29546 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0 [ 748.280248][T29546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.290316][T29546] Call Trace: [ 748.293618][T29546] dump_stack+0x18f/0x20d [ 748.297969][T29546] should_fail.cold+0x5/0x14 [ 748.302588][T29546] should_failslab+0x5/0xf [ 748.307024][T29546] kmem_cache_alloc_node+0x257/0x3c0 [ 748.312386][T29546] __alloc_skb+0x71/0x550 [ 748.316799][T29546] netlink_sendmsg+0x94f/0xd90 [ 748.321590][T29546] ? netlink_unicast+0x7d0/0x7d0 [ 748.326567][T29546] ? netlink_unicast+0x7d0/0x7d0 [ 748.331522][T29546] sock_sendmsg+0xcf/0x120 [ 748.335960][T29546] ____sys_sendmsg+0x6e8/0x810 [ 748.340747][T29546] ? kernel_sendmsg+0x50/0x50 [ 748.345434][T29546] ? do_recvmmsg+0x6d0/0x6d0 [ 748.350041][T29546] ? perf_trace_lock+0x2e2/0x4a0 [ 748.355023][T29546] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 748.361172][T29546] ? __lockdep_free_key_range+0x110/0x110 [ 748.361196][T29546] ___sys_sendmsg+0xf3/0x170 [ 748.361215][T29546] ? sendmsg_copy_msghdr+0x160/0x160 [ 748.361233][T29546] ? __fget_files+0x272/0x400 [ 748.361256][T29546] ? lock_downgrade+0x820/0x820 [ 748.361285][T29546] ? __lockdep_free_key_range+0x110/0x110 [ 748.361301][T29546] ? find_held_lock+0x2d/0x110 [ 748.361318][T29546] ? ksys_write+0x212/0x250 [ 748.361342][T29546] ? __fget_files+0x294/0x400 [ 748.361368][T29546] ? __fget_light+0xea/0x280 [ 748.361393][T29546] __sys_sendmsg+0xe5/0x1b0 [ 748.361408][T29546] ? __sys_sendmsg_sock+0xb0/0xb0 [ 748.361422][T29546] ? vfs_write+0x161/0x5d0 [ 748.361457][T29546] ? do_syscall_64+0x1c/0xe0 [ 748.361472][T29546] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 748.361495][T29546] do_syscall_64+0x60/0xe0 [ 748.361512][T29546] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 748.361524][T29546] RIP: 0033:0x45cb29 [ 748.361535][T29546] Code: Bad RIP value. [ 748.453407][T29546] RSP: 002b:00007fe52fc54c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.461798][T29546] RAX: ffffffffffffffda RBX: 0000000000502760 RCX: 000000000045cb29 [ 748.469791][T29546] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 748.477742][T29546] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 748.485692][T29546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 748.493645][T29546] R13: 0000000000000a43 R14: 00000000004cd2a1 R15: 00007fe52fc556d4 [ 748.789881][ T29] audit: type=1800 audit(1593891809.513:430): pid=29558 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16294 res=0 19:43:29 executing program 0: r0 = socket$inet6(0xa, 0x80000, 0x7) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0xffff, 0x5}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:43:29 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:29 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000039604, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x40400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r3, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, r3, {0x2, 0x0, @private=0xa010102}}}, 0x80) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}, {&(0x7f0000000200)=""/142, 0x8e}], 0x2, 0x0) sendmmsg(r3, &(0x7f0000001540), 0x553, 0x0) 19:43:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x5000000}) 19:43:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 19:43:29 executing program 4 (fault-call:3 fault-nth:1): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 748.940788][T29575] FAULT_INJECTION: forcing a failure. [ 748.940788][T29575] name failslab, interval 1, probability 0, space 0, times 0 [ 748.999961][T29575] CPU: 0 PID: 29575 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0 [ 749.008663][T29575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 749.018726][T29575] Call Trace: [ 749.022034][T29575] dump_stack+0x18f/0x20d [ 749.026391][T29575] should_fail.cold+0x5/0x14 [ 749.031010][T29575] should_failslab+0x5/0xf [ 749.035446][T29575] kmem_cache_alloc_node_trace+0x27d/0x400 [ 749.041284][T29575] __kmalloc_node_track_caller+0x38/0x60 [ 749.046935][T29575] __alloc_skb+0xae/0x550 [ 749.051289][T29575] netlink_sendmsg+0x94f/0xd90 [ 749.056080][T29575] ? netlink_unicast+0x7d0/0x7d0 [ 749.061046][T29575] ? netlink_unicast+0x7d0/0x7d0 [ 749.066002][T29575] sock_sendmsg+0xcf/0x120 [ 749.070444][T29575] ____sys_sendmsg+0x6e8/0x810 [ 749.075237][T29575] ? kernel_sendmsg+0x50/0x50 [ 749.079922][T29575] ? do_recvmmsg+0x6d0/0x6d0 [ 749.084527][T29575] ? perf_trace_lock+0x2e2/0x4a0 [ 749.089505][T29575] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 749.095532][T29575] ? __lockdep_free_key_range+0x110/0x110 [ 749.101277][T29575] ___sys_sendmsg+0xf3/0x170 [ 749.105883][T29575] ? sendmsg_copy_msghdr+0x160/0x160 [ 749.111203][T29575] ? __fget_files+0x272/0x400 [ 749.111233][T29575] ? lock_downgrade+0x820/0x820 [ 749.111251][T29575] ? __lockdep_free_key_range+0x110/0x110 [ 749.111267][T29575] ? find_held_lock+0x2d/0x110 [ 749.111286][T29575] ? ksys_write+0x212/0x250 [ 749.111312][T29575] ? __fget_files+0x294/0x400 [ 749.111341][T29575] ? __fget_light+0xea/0x280 [ 749.111366][T29575] __sys_sendmsg+0xe5/0x1b0 [ 749.149548][T29575] ? __sys_sendmsg_sock+0xb0/0xb0 [ 749.154588][T29575] ? vfs_write+0x161/0x5d0 [ 749.159036][T29575] ? do_syscall_64+0x1c/0xe0 [ 749.163640][T29575] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 749.169640][T29575] do_syscall_64+0x60/0xe0 [ 749.174073][T29575] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 749.179986][T29575] RIP: 0033:0x45cb29 [ 749.183882][T29575] Code: Bad RIP value. [ 749.187954][T29575] RSP: 002b:00007fe52fc54c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:43:29 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x6000000}) 19:43:29 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0xff010000, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x21, 0x4) [ 749.196379][T29575] RAX: ffffffffffffffda RBX: 0000000000502760 RCX: 000000000045cb29 [ 749.204363][T29575] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 749.212355][T29575] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 749.220341][T29575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 749.228341][T29575] R13: 0000000000000a43 R14: 00000000004cd2a1 R15: 00007fe52fc556d4 19:43:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x7000000}) 19:43:30 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:30 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f0000000a80)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x10, 0x2, 0x38, 0x0, 0x4000}, [{0x4, 0x0, 0x0, 0x0, 0x0, 0x7}], "225367f7e246cab0d0e3efc09a8b2b1eee8b7a118ca819cfad79f261fc52efb622eafd9f39900506ce0c7787b50262b6ba897b9df207b1096c5015c7699de110c7a0b5bd3200f56f99195d7f0f2f4ee0ad58927577add42f2ec30153fdc1394aa1ea387057c6fb0baa0f559463ec5fc3e8a110c6e3e5eb4251dd4c484252de0e2858cf30b422bb86e3e60eefac153c9cb5463f8a0446a7d516ea72c632a02deaa11b45fcba6960525b20aa81359db42f1b92c75b810df9225ed4199d329ee65e1f84", [[], [], [], [], [], [], [], []]}, 0x93a) syz_open_pts(r5, 0x802) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:43:30 executing program 4 (fault-call:3 fault-nth:2): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 749.694104][ T29] audit: type=1800 audit(1593891810.424:431): pid=29603 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16292 res=0 19:43:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x3f00, 0x4) 19:43:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x8000000}) 19:43:30 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x4000000}) 19:43:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x4000, 0x4) 19:43:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0xfdfdffff}) 19:43:30 executing program 4 (fault-call:3 fault-nth:3): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 749.840596][T29615] FAULT_INJECTION: forcing a failure. [ 749.840596][T29615] name failslab, interval 1, probability 0, space 0, times 0 19:43:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x60ff, 0x4) [ 749.840635][T29615] CPU: 0 PID: 29615 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0 [ 749.840645][T29615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 749.840651][T29615] Call Trace: [ 749.840682][T29615] dump_stack+0x18f/0x20d [ 749.840710][T29615] should_fail.cold+0x5/0x14 [ 749.840734][T29615] should_failslab+0x5/0xf 19:43:31 executing program 4 (fault-call:3 fault-nth:4): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 749.840751][T29615] kmem_cache_alloc+0x40/0x3b0 [ 749.840772][T29615] skb_clone+0x14f/0x3c0 [ 749.840794][T29615] netlink_deliver_tap+0x990/0xb70 [ 749.840826][T29615] netlink_unicast+0x5e5/0x7d0 [ 749.840851][T29615] ? netlink_attachskb+0x810/0x810 19:43:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7900, 0x4) [ 749.840919][T29615] ? _copy_from_iter_full+0x247/0x890 [ 749.840939][T29615] ? __phys_addr+0x9a/0x110 [ 749.840982][T29615] ? __phys_addr_symbol+0x2c/0x70 [ 749.841000][T29615] ? __check_object_size+0x171/0x3e4 [ 749.841023][T29615] netlink_sendmsg+0x856/0xd90 [ 749.841050][T29615] ? netlink_unicast+0x7d0/0x7d0 [ 749.841082][T29615] ? netlink_unicast+0x7d0/0x7d0 [ 749.841101][T29615] sock_sendmsg+0xcf/0x120 [ 749.841119][T29615] ____sys_sendmsg+0x6e8/0x810 [ 749.841141][T29615] ? kernel_sendmsg+0x50/0x50 [ 749.841170][T29615] ? do_recvmmsg+0x6d0/0x6d0 [ 749.841206][T29615] ? perf_trace_lock+0x2e2/0x4a0 [ 749.841228][T29615] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 749.841252][T29615] ? __lockdep_free_key_range+0x110/0x110 [ 749.841277][T29615] ___sys_sendmsg+0xf3/0x170 [ 749.841297][T29615] ? sendmsg_copy_msghdr+0x160/0x160 [ 749.841315][T29615] ? __fget_files+0x272/0x400 [ 749.841338][T29615] ? lock_downgrade+0x820/0x820 [ 749.841361][T29615] ? __lockdep_free_key_range+0x110/0x110 [ 749.841377][T29615] ? find_held_lock+0x2d/0x110 [ 749.841396][T29615] ? ksys_write+0x212/0x250 [ 749.841423][T29615] ? __fget_files+0x294/0x400 [ 749.841446][T29615] ? __fget_light+0xea/0x280 [ 749.841468][T29615] __sys_sendmsg+0xe5/0x1b0 [ 749.841481][T29615] ? __sys_sendmsg_sock+0xb0/0xb0 [ 749.841494][T29615] ? vfs_write+0x161/0x5d0 [ 749.841523][T29615] ? do_syscall_64+0x1c/0xe0 [ 749.841537][T29615] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 749.841557][T29615] do_syscall_64+0x60/0xe0 [ 749.841572][T29615] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 749.841584][T29615] RIP: 0033:0x45cb29 [ 749.841590][T29615] Code: Bad RIP value. [ 749.841598][T29615] RSP: 002b:00007fe52fc54c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 749.841611][T29615] RAX: ffffffffffffffda RBX: 0000000000502760 RCX: 000000000045cb29 [ 749.841619][T29615] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 749.841627][T29615] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 749.841635][T29615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 749.841644][T29615] R13: 0000000000000a43 R14: 00000000004cd2a1 R15: 00007fe52fc556d4 [ 749.853883][T29615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 750.093813][T29632] FAULT_INJECTION: forcing a failure. [ 750.093813][T29632] name failslab, interval 1, probability 0, space 0, times 0 [ 750.093863][T29632] CPU: 1 PID: 29632 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0 [ 750.093873][T29632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.093879][T29632] Call Trace: [ 750.093901][T29632] dump_stack+0x18f/0x20d [ 750.093922][T29632] should_fail.cold+0x5/0x14 [ 750.093942][T29632] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 750.093962][T29632] should_failslab+0x5/0xf [ 750.093978][T29632] kmem_cache_alloc+0x40/0x3b0 [ 750.093996][T29632] skb_clone+0x14f/0x3c0 [ 750.094069][T29632] dev_queue_xmit_nit+0x3bb/0xac0 [ 750.094097][T29632] dev_hard_start_xmit+0xaa/0x950 [ 750.094112][T29632] ? validate_xmit_skb+0x848/0xe60 [ 750.094137][T29632] __dev_queue_xmit+0x2091/0x2d60 [ 750.094167][T29632] ? lock_acquire+0x1f1/0xad0 [ 750.094184][T29632] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 750.094204][T29632] ? memcpy+0x39/0x60 [ 750.094221][T29632] ? memcpy+0x39/0x60 [ 750.094239][T29632] ? __skb_clone+0x586/0x770 [ 750.094253][T29632] ? kmem_cache_alloc+0x35f/0x3b0 [ 750.094276][T29632] netlink_deliver_tap+0x92e/0xb70 [ 750.094299][T29632] netlink_unicast+0x5e5/0x7d0 [ 750.094319][T29632] ? netlink_attachskb+0x810/0x810 [ 750.094333][T29632] ? _copy_from_iter_full+0x247/0x890 [ 750.094347][T29632] ? __phys_addr+0x9a/0x110 [ 750.094362][T29632] ? __phys_addr_symbol+0x2c/0x70 [ 750.094377][T29632] ? __check_object_size+0x171/0x3e4 [ 750.094395][T29632] netlink_sendmsg+0x856/0xd90 [ 750.094416][T29632] ? netlink_unicast+0x7d0/0x7d0 [ 750.094441][T29632] ? netlink_unicast+0x7d0/0x7d0 [ 750.094458][T29632] sock_sendmsg+0xcf/0x120 [ 750.094476][T29632] ____sys_sendmsg+0x6e8/0x810 [ 750.094494][T29632] ? kernel_sendmsg+0x50/0x50 [ 750.094511][T29632] ? do_recvmmsg+0x6d0/0x6d0 [ 750.094531][T29632] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 750.094550][T29632] ? __lockdep_free_key_range+0x110/0x110 [ 750.094568][T29632] ___sys_sendmsg+0xf3/0x170 [ 750.094585][T29632] ? sendmsg_copy_msghdr+0x160/0x160 [ 750.094600][T29632] ? __fget_files+0x272/0x400 [ 750.094619][T29632] ? lock_downgrade+0x820/0x820 [ 750.094634][T29632] ? __lockdep_free_key_range+0x110/0x110 [ 750.094648][T29632] ? find_held_lock+0x2d/0x110 [ 750.094662][T29632] ? ksys_write+0x212/0x250 [ 750.094682][T29632] ? __fget_files+0x294/0x400 [ 750.094704][T29632] ? __fget_light+0xea/0x280 [ 750.094725][T29632] __sys_sendmsg+0xe5/0x1b0 [ 750.094739][T29632] ? __sys_sendmsg_sock+0xb0/0xb0 [ 750.094753][T29632] ? vfs_write+0x161/0x5d0 [ 750.094782][T29632] ? do_syscall_64+0x1c/0xe0 [ 750.094797][T29632] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 750.094817][T29632] do_syscall_64+0x60/0xe0 [ 750.094834][T29632] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 750.094846][T29632] RIP: 0033:0x45cb29 [ 750.094852][T29632] Code: Bad RIP value. [ 750.094860][T29632] RSP: 002b:00007fe52fc54c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.094874][T29632] RAX: ffffffffffffffda RBX: 0000000000502760 RCX: 000000000045cb29 [ 750.094883][T29632] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 750.094893][T29632] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 750.094902][T29632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 750.094911][T29632] R13: 0000000000000a43 R14: 00000000004cd2a1 R15: 00007fe52fc556d4 [ 750.096644][T29632] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 750.327797][T29643] FAULT_INJECTION: forcing a failure. [ 750.327797][T29643] name failslab, interval 1, probability 0, space 0, times 0 [ 750.327817][T29643] CPU: 0 PID: 29643 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0 [ 750.327829][T29643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.327836][T29643] Call Trace: [ 750.327859][T29643] dump_stack+0x18f/0x20d [ 750.327884][T29643] should_fail.cold+0x5/0x14 [ 750.327911][T29643] should_failslab+0x5/0xf [ 750.327929][T29643] kmem_cache_alloc_trace+0x240/0x2d0 [ 750.327952][T29643] ? lock_is_held_type+0xb0/0xe0 [ 750.328035][T29643] rtnl_newlink+0x46/0xa0 [ 750.328053][T29643] ? __rtnl_newlink+0x1730/0x1730 [ 750.328074][T29643] rtnetlink_rcv_msg+0x44e/0xad0 [ 750.328100][T29643] ? rtnetlink_put_metrics+0x510/0x510 [ 750.328117][T29643] ? perf_trace_lock+0x2e2/0x4a0 [ 750.328154][T29643] ? __lockdep_free_key_range+0x110/0x110 [ 750.328172][T29643] ? lockdep_hardirqs_on+0x6a/0xe0 [ 750.328197][T29643] netlink_rcv_skb+0x15a/0x430 [ 750.328219][T29643] ? rtnetlink_put_metrics+0x510/0x510 [ 750.328240][T29643] ? netlink_ack+0xa10/0xa10 [ 750.328285][T29643] netlink_unicast+0x533/0x7d0 [ 750.328312][T29643] ? netlink_attachskb+0x810/0x810 [ 750.328329][T29643] ? _copy_from_iter_full+0x247/0x890 [ 750.328346][T29643] ? __phys_addr+0x9a/0x110 [ 750.328362][T29643] ? __phys_addr_symbol+0x2c/0x70 [ 750.328381][T29643] ? __check_object_size+0x171/0x3e4 [ 750.328405][T29643] netlink_sendmsg+0x856/0xd90 [ 750.328433][T29643] ? netlink_unicast+0x7d0/0x7d0 [ 750.328467][T29643] ? netlink_unicast+0x7d0/0x7d0 [ 750.328486][T29643] sock_sendmsg+0xcf/0x120 [ 750.328507][T29643] ____sys_sendmsg+0x6e8/0x810 [ 750.328531][T29643] ? kernel_sendmsg+0x50/0x50 [ 750.328544][T29643] ? do_recvmmsg+0x6d0/0x6d0 [ 750.328561][T29643] ? perf_trace_lock+0x2e2/0x4a0 [ 750.328582][T29643] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 750.328604][T29643] ? __lockdep_free_key_range+0x110/0x110 [ 750.328627][T29643] ___sys_sendmsg+0xf3/0x170 [ 750.328645][T29643] ? sendmsg_copy_msghdr+0x160/0x160 [ 750.328662][T29643] ? __fget_files+0x272/0x400 [ 750.328687][T29643] ? lock_downgrade+0x820/0x820 [ 750.328706][T29643] ? __lockdep_free_key_range+0x110/0x110 [ 750.328722][T29643] ? find_held_lock+0x2d/0x110 [ 750.328741][T29643] ? ksys_write+0x212/0x250 [ 750.328768][T29643] ? __fget_files+0x294/0x400 [ 750.328798][T29643] ? __fget_light+0xea/0x280 [ 750.328826][T29643] __sys_sendmsg+0xe5/0x1b0 [ 750.328842][T29643] ? __sys_sendmsg_sock+0xb0/0xb0 [ 750.328858][T29643] ? vfs_write+0x161/0x5d0 [ 750.328893][T29643] ? do_syscall_64+0x1c/0xe0 [ 750.328910][T29643] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 750.328935][T29643] do_syscall_64+0x60/0xe0 [ 750.328953][T29643] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 750.328967][T29643] RIP: 0033:0x45cb29 [ 750.328975][T29643] Code: Bad RIP value. [ 750.328985][T29643] RSP: 002b:00007fe52fc54c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.329001][T29643] RAX: ffffffffffffffda RBX: 0000000000502760 RCX: 000000000045cb29 [ 750.329012][T29643] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 750.329022][T29643] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 750.329032][T29643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 750.329042][T29643] R13: 0000000000000a43 R14: 00000000004cd2a1 R15: 00007fe52fc556d4 [ 751.040641][ T29] audit: type=1800 audit(1593891811.774:432): pid=29654 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16280 res=0 19:43:32 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) splice(r4, 0x0, r6, 0x0, 0x400000000039604, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6) pidfd_open(0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0xffffffffffff0000, 0x1) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x401) 19:43:32 executing program 4 (fault-call:3 fault-nth:5): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xb900, 0x4) 19:43:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x4000000}) 19:43:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}) 19:43:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0xff000000}) 19:43:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0xfffffdfd}) 19:43:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x400000, 0x4) 19:43:32 executing program 4 (fault-call:3 fault-nth:6): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 751.633717][T29669] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 751.633743][T29669] FAULT_INJECTION: forcing a failure. [ 751.633743][T29669] name fail_page_alloc, interval 1, probability 0, space 0, times 0 19:43:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x507400, 0x4) [ 751.633757][T29669] CPU: 0 PID: 29669 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0 [ 751.633765][T29669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.633771][T29669] Call Trace: [ 751.633789][T29669] dump_stack+0x18f/0x20d [ 751.633809][T29669] should_fail.cold+0x5/0x14 19:43:32 executing program 4 (fault-call:3 fault-nth:7): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 751.633831][T29669] __alloc_pages_nodemask+0x1a3/0x930 [ 751.633844][T29669] ? set_precision+0x160/0x160 19:43:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x53d000, 0x4) [ 751.633862][T29669] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 751.633877][T29669] ? __lockdep_free_key_range+0x110/0x110 [ 751.633896][T29669] ? lock_acquire+0x1f1/0xad0 [ 751.633909][T29669] ? fs_reclaim_acquire+0xf/0x40 [ 751.633924][T29669] ? find_held_lock+0x2d/0x110 [ 751.633946][T29669] cache_grow_begin+0x8c/0xb20 [ 751.633979][T29669] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 751.633999][T29669] cache_alloc_refill+0x27b/0x340 [ 751.634015][T29669] ? lockdep_hardirqs_off+0x66/0xa0 [ 751.634036][T29669] kmem_cache_alloc_node_trace+0x3ea/0x400 [ 751.634058][T29669] __kmalloc_node+0x38/0x60 [ 751.634074][T29669] kvmalloc_node+0x61/0xf0 [ 751.634091][T29669] alloc_netdev_mqs+0x97/0xdc0 [ 751.634186][T29669] ? veth_dellink+0x130/0x130 [ 751.634209][T29669] rtnl_create_link+0x219/0xad0 [ 751.634234][T29669] __rtnl_newlink+0xfa0/0x1730 [ 751.634269][T29669] ? rtnl_setlink+0x3c0/0x3c0 [ 751.634281][T29669] ? lock_downgrade+0x820/0x820 [ 751.634343][T29669] ? is_bpf_text_address+0xcb/0x160 [ 751.634361][T29669] ? kernel_text_address+0xbd/0xf0 [ 751.634387][T29669] ? __kernel_text_address+0x9/0x30 [ 751.634426][T29669] ? unwind_get_return_address+0x51/0x90 [ 751.634457][T29669] ? profile_setup.cold+0xc1/0xc1 [ 751.634476][T29669] ? arch_stack_walk+0x97/0xf0 [ 751.634512][T29669] ? stack_trace_save+0x8c/0xc0 [ 751.634527][T29669] ? stack_trace_consume_entry+0x160/0x160 [ 751.634548][T29669] ? __kasan_slab_free+0xf5/0x140 [ 751.634562][T29669] ? kmem_cache_free+0x7f/0x310 [ 751.634642][T29669] ? mark_lock+0xbc/0x1710 [ 751.634666][T29669] ? lock_is_held_type+0xb0/0xe0 [ 751.634692][T29669] ? trace_kmalloc+0xfd/0x130 [ 751.634715][T29669] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 751.634739][T29669] rtnl_newlink+0x64/0xa0 [ 751.634756][T29669] ? __rtnl_newlink+0x1730/0x1730 [ 751.634774][T29669] rtnetlink_rcv_msg+0x44e/0xad0 [ 751.634797][T29669] ? rtnetlink_put_metrics+0x510/0x510 [ 751.634811][T29669] ? perf_trace_lock+0x2e2/0x4a0 [ 751.634838][T29669] ? __lockdep_free_key_range+0x110/0x110 [ 751.634865][T29669] netlink_rcv_skb+0x15a/0x430 19:43:32 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b073b310000000000000000000000000000000000000000000000000000007200fb000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff000000"], 0x78) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000040)) sendfile(r0, r4, 0x0, 0x200fff) 19:43:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}) [ 751.634884][T29669] ? rtnetlink_put_metrics+0x510/0x510 [ 751.634904][T29669] ? netlink_ack+0xa10/0xa10 [ 751.634944][T29669] netlink_unicast+0x533/0x7d0 [ 751.634970][T29669] ? netlink_attachskb+0x810/0x810 [ 751.634986][T29669] ? _copy_from_iter_full+0x247/0x890 [ 751.635000][T29669] ? __phys_addr+0x9a/0x110 [ 751.635015][T29669] ? __phys_addr_symbol+0x2c/0x70 [ 751.635033][T29669] ? __check_object_size+0x171/0x3e4 [ 751.635056][T29669] netlink_sendmsg+0x856/0xd90 [ 751.635082][T29669] ? netlink_unicast+0x7d0/0x7d0 [ 751.635112][T29669] ? netlink_unicast+0x7d0/0x7d0 [ 751.635131][T29669] sock_sendmsg+0xcf/0x120 [ 751.635152][T29669] ____sys_sendmsg+0x6e8/0x810 [ 751.635174][T29669] ? kernel_sendmsg+0x50/0x50 [ 751.635187][T29669] ? do_recvmmsg+0x6d0/0x6d0 [ 751.635204][T29669] ? perf_trace_lock+0x2e2/0x4a0 [ 751.635224][T29669] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 751.635245][T29669] ? __lockdep_free_key_range+0x110/0x110 [ 751.635266][T29669] ___sys_sendmsg+0xf3/0x170 [ 751.635285][T29669] ? sendmsg_copy_msghdr+0x160/0x160 [ 751.635302][T29669] ? __fget_files+0x272/0x400 [ 751.635325][T29669] ? lock_downgrade+0x820/0x820 [ 751.635342][T29669] ? __lockdep_free_key_range+0x110/0x110 [ 751.635355][T29669] ? find_held_lock+0x2d/0x110 [ 751.635373][T29669] ? ksys_write+0x212/0x250 [ 751.635399][T29669] ? __fget_files+0x294/0x400 [ 751.635426][T29669] ? __fget_light+0xea/0x280 [ 751.635452][T29669] __sys_sendmsg+0xe5/0x1b0 [ 751.635468][T29669] ? __sys_sendmsg_sock+0xb0/0xb0 [ 751.635484][T29669] ? vfs_write+0x161/0x5d0 [ 751.635526][T29669] ? do_syscall_64+0x1c/0xe0 [ 751.635544][T29669] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 751.635570][T29669] do_syscall_64+0x60/0xe0 [ 751.635588][T29669] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 751.635601][T29669] RIP: 0033:0x45cb29 [ 751.635608][T29669] Code: Bad RIP value. [ 751.635618][T29669] RSP: 002b:00007fe52fc54c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.635634][T29669] RAX: ffffffffffffffda RBX: 0000000000502760 RCX: 000000000045cb29 [ 751.635645][T29669] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 751.635655][T29669] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 751.635665][T29669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 751.635675][T29669] R13: 0000000000000a43 R14: 00000000004cd2a1 R15: 00007fe52fc556d4 [ 751.938604][T29685] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 751.938679][T29685] FAULT_INJECTION: forcing a failure. [ 751.938679][T29685] name failslab, interval 1, probability 0, space 0, times 0 [ 751.938697][T29685] CPU: 0 PID: 29685 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0 [ 751.938707][T29685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.938715][T29685] Call Trace: [ 751.938737][T29685] dump_stack+0x18f/0x20d [ 751.938763][T29685] should_fail.cold+0x5/0x14 [ 751.938790][T29685] should_failslab+0x5/0xf [ 751.938808][T29685] kmem_cache_alloc_trace+0x47/0x2d0 [ 751.938834][T29685] __hw_addr_create_ex+0x5b/0x310 [ 751.938857][T29685] __hw_addr_add_ex+0x1ed/0x2b0 [ 751.938882][T29685] dev_addr_init+0x10b/0x1f0 [ 751.938901][T29685] ? __hw_addr_unsync_dev+0x190/0x190 [ 751.938937][T29685] alloc_netdev_mqs+0x13d/0xdc0 [ 751.938952][T29685] ? veth_dellink+0x130/0x130 [ 751.938979][T29685] rtnl_create_link+0x219/0xad0 [ 751.939008][T29685] __rtnl_newlink+0xfa0/0x1730 [ 751.939045][T29685] ? rtnl_setlink+0x3c0/0x3c0 [ 751.939060][T29685] ? lock_downgrade+0x820/0x820 [ 751.939100][T29685] ? is_bpf_text_address+0xcb/0x160 [ 751.939117][T29685] ? kernel_text_address+0xbd/0xf0 [ 751.939134][T29685] ? __kernel_text_address+0x9/0x30 19:43:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x73c000, 0x4) [ 751.939155][T29685] ? unwind_get_return_address+0x51/0x90 [ 751.939171][T29685] ? profile_setup.cold+0xc1/0xc1 [ 751.939186][T29685] ? arch_stack_walk+0x97/0xf0 [ 751.939224][T29685] ? stack_trace_save+0x8c/0xc0 [ 751.939242][T29685] ? stack_trace_consume_entry+0x160/0x160 [ 751.939270][T29685] ? __kasan_slab_free+0xf5/0x140 [ 751.939286][T29685] ? kmem_cache_free+0x7f/0x310 [ 751.939376][T29685] ? mark_lock+0xbc/0x1710 [ 751.939406][T29685] ? lock_is_held_type+0xb0/0xe0 [ 751.939433][T29685] ? trace_kmalloc+0xfd/0x130 [ 751.939457][T29685] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 751.939482][T29685] rtnl_newlink+0x64/0xa0 [ 751.939500][T29685] ? __rtnl_newlink+0x1730/0x1730 [ 751.939526][T29685] rtnetlink_rcv_msg+0x44e/0xad0 [ 751.939551][T29685] ? rtnetlink_put_metrics+0x510/0x510 [ 751.939568][T29685] ? perf_trace_lock+0x2e2/0x4a0 [ 751.939597][T29685] ? __lockdep_free_key_range+0x110/0x110 [ 751.939626][T29685] netlink_rcv_skb+0x15a/0x430 [ 751.939647][T29685] ? rtnetlink_put_metrics+0x510/0x510 [ 751.939668][T29685] ? netlink_ack+0xa10/0xa10 19:43:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}) [ 751.939713][T29685] netlink_unicast+0x533/0x7d0 [ 751.939740][T29685] ? netlink_attachskb+0x810/0x810 [ 751.939757][T29685] ? _copy_from_iter_full+0x247/0x890 [ 751.939772][T29685] ? __phys_addr+0x9a/0x110 [ 751.939789][T29685] ? __phys_addr_symbol+0x2c/0x70 [ 751.939806][T29685] ? __check_object_size+0x171/0x3e4 [ 751.939830][T29685] netlink_sendmsg+0x856/0xd90 [ 751.939858][T29685] ? netlink_unicast+0x7d0/0x7d0 [ 751.939892][T29685] ? netlink_unicast+0x7d0/0x7d0 [ 751.939912][T29685] sock_sendmsg+0xcf/0x120 [ 751.939934][T29685] ____sys_sendmsg+0x6e8/0x810 [ 751.939957][T29685] ? kernel_sendmsg+0x50/0x50 [ 751.939970][T29685] ? do_recvmmsg+0x6d0/0x6d0 [ 751.939988][T29685] ? perf_trace_lock+0x2e2/0x4a0 [ 751.940007][T29685] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 751.940031][T29685] ? __lockdep_free_key_range+0x110/0x110 [ 751.940055][T29685] ___sys_sendmsg+0xf3/0x170 [ 751.940075][T29685] ? sendmsg_copy_msghdr+0x160/0x160 [ 751.940092][T29685] ? __fget_files+0x272/0x400 [ 751.940116][T29685] ? lock_downgrade+0x820/0x820 [ 751.940134][T29685] ? __lockdep_free_key_range+0x110/0x110 [ 751.940151][T29685] ? find_held_lock+0x2d/0x110 [ 751.940169][T29685] ? ksys_write+0x212/0x250 [ 751.940196][T29685] ? __fget_files+0x294/0x400 [ 751.940226][T29685] ? __fget_light+0xea/0x280 [ 751.940255][T29685] __sys_sendmsg+0xe5/0x1b0 [ 751.940272][T29685] ? __sys_sendmsg_sock+0xb0/0xb0 [ 751.940288][T29685] ? vfs_write+0x161/0x5d0 [ 751.940324][T29685] ? do_syscall_64+0x1c/0xe0 [ 751.940341][T29685] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 751.940366][T29685] do_syscall_64+0x60/0xe0 [ 751.940385][T29685] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 751.940400][T29685] RIP: 0033:0x45cb29 [ 751.940408][T29685] Code: Bad RIP value. [ 751.940418][T29685] RSP: 002b:00007fe52fc54c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.940436][T29685] RAX: ffffffffffffffda RBX: 0000000000502760 RCX: 000000000045cb29 [ 751.940447][T29685] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 751.940457][T29685] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 751.940466][T29685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 751.940475][T29685] R13: 0000000000000a43 R14: 00000000004cd2a1 R15: 00007fe52fc556d4 [ 752.116176][ T29] audit: type=1800 audit(1593891812.844:433): pid=29687 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16312 res=0 [ 752.150153][T29693] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}) [ 753.068110][T29693] FAULT_INJECTION: forcing a failure. [ 753.068110][T29693] name failslab, interval 1, probability 0, space 0, times 0 [ 753.082559][T29693] CPU: 0 PID: 29693 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0 [ 753.091243][T29693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.101299][T29693] Call Trace: [ 753.104602][T29693] dump_stack+0x18f/0x20d [ 753.108948][T29693] should_fail.cold+0x5/0x14 [ 753.113548][T29693] should_failslab+0x5/0xf 19:43:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x100000000000000}) [ 753.117983][T29693] kmem_cache_alloc_node_trace+0x27d/0x400 [ 753.123803][T29693] __kmalloc_node+0x38/0x60 [ 753.128312][T29693] kvmalloc_node+0x61/0xf0 [ 753.132738][T29693] alloc_netdev_mqs+0x884/0xdc0 [ 753.137598][T29693] rtnl_create_link+0x219/0xad0 [ 753.142464][T29693] __rtnl_newlink+0xfa0/0x1730 [ 753.147247][T29693] ? rtnl_setlink+0x3c0/0x3c0 [ 753.151930][T29693] ? lock_downgrade+0x820/0x820 [ 753.156801][T29693] ? is_bpf_text_address+0xcb/0x160 [ 753.162002][T29693] ? kernel_text_address+0xbd/0xf0 [ 753.167225][T29693] ? __kernel_text_address+0x9/0x30 [ 753.172430][T29693] ? unwind_get_return_address+0x51/0x90 [ 753.178067][T29693] ? profile_setup.cold+0xc1/0xc1 [ 753.183099][T29693] ? arch_stack_walk+0x97/0xf0 [ 753.187884][T29693] ? stack_trace_save+0x8c/0xc0 [ 753.192747][T29693] ? stack_trace_consume_entry+0x160/0x160 [ 753.198606][T29693] ? mark_lock+0xbc/0x1710 [ 753.203073][T29693] ? lock_is_held_type+0xb0/0xe0 [ 753.208021][T29693] ? trace_kmalloc+0xfd/0x130 [ 753.212716][T29693] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 753.218289][T29693] rtnl_newlink+0x64/0xa0 [ 753.222628][T29693] ? __rtnl_newlink+0x1730/0x1730 [ 753.227675][T29693] rtnetlink_rcv_msg+0x44e/0xad0 [ 753.227696][T29693] ? rtnetlink_put_metrics+0x510/0x510 [ 753.227711][T29693] ? perf_trace_lock+0x2e2/0x4a0 [ 753.227733][T29693] ? __lockdep_free_key_range+0x110/0x110 [ 753.227751][T29693] ? lockdep_hardirqs_on+0x6a/0xe0 [ 753.227768][T29693] netlink_rcv_skb+0x15a/0x430 [ 753.227785][T29693] ? rtnetlink_put_metrics+0x510/0x510 [ 753.227801][T29693] ? netlink_ack+0xa10/0xa10 [ 753.227830][T29693] netlink_unicast+0x533/0x7d0 [ 753.227850][T29693] ? netlink_attachskb+0x810/0x810 [ 753.227865][T29693] ? _copy_from_iter_full+0x247/0x890 [ 753.227880][T29693] ? __phys_addr+0x9a/0x110 [ 753.227894][T29693] ? __phys_addr_symbol+0x2c/0x70 [ 753.227917][T29693] ? __check_object_size+0x171/0x3e4 [ 753.227937][T29693] netlink_sendmsg+0x856/0xd90 [ 753.227957][T29693] ? netlink_unicast+0x7d0/0x7d0 [ 753.227981][T29693] ? netlink_unicast+0x7d0/0x7d0 [ 753.227998][T29693] sock_sendmsg+0xcf/0x120 [ 753.228016][T29693] ____sys_sendmsg+0x6e8/0x810 [ 753.228036][T29693] ? kernel_sendmsg+0x50/0x50 [ 753.228047][T29693] ? do_recvmmsg+0x6d0/0x6d0 [ 753.228061][T29693] ? perf_trace_lock+0x2e2/0x4a0 [ 753.228075][T29693] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 753.228091][T29693] ? __lockdep_free_key_range+0x110/0x110 [ 753.228108][T29693] ___sys_sendmsg+0xf3/0x170 [ 753.228122][T29693] ? sendmsg_copy_msghdr+0x160/0x160 [ 753.228136][T29693] ? __fget_files+0x272/0x400 [ 753.228153][T29693] ? lock_downgrade+0x820/0x820 19:43:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x200000000000000}) [ 753.228167][T29693] ? __lockdep_free_key_range+0x110/0x110 [ 753.228180][T29693] ? find_held_lock+0x2d/0x110 [ 753.228194][T29693] ? ksys_write+0x212/0x250 [ 753.228212][T29693] ? __fget_files+0x294/0x400 [ 753.228231][T29693] ? __fget_light+0xea/0x280 [ 753.228250][T29693] __sys_sendmsg+0xe5/0x1b0 [ 753.228263][T29693] ? __sys_sendmsg_sock+0xb0/0xb0 [ 753.228275][T29693] ? vfs_write+0x161/0x5d0 [ 753.228299][T29693] ? do_syscall_64+0x1c/0xe0 [ 753.228313][T29693] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 753.228330][T29693] do_syscall_64+0x60/0xe0 [ 753.228345][T29693] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 753.228356][T29693] RIP: 0033:0x45cb29 [ 753.228362][T29693] Code: Bad RIP value. [ 753.228370][T29693] RSP: 002b:00007fe52fc54c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 753.228383][T29693] RAX: ffffffffffffffda RBX: 0000000000502760 RCX: 000000000045cb29 [ 753.228391][T29693] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 753.228398][T29693] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 753.228411][T29693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 753.475218][T29693] R13: 0000000000000a43 R14: 00000000004cd2a1 R15: 00007fe52fc556d4 [ 753.488982][ T29] audit: type=1800 audit(1593891814.214:434): pid=29706 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16372 res=0 19:43:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x745000, 0x4) 19:43:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x300000000000000}) 19:43:34 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}) 19:43:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x790000, 0x4) 19:43:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x400000000000000}) 19:43:34 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, 0x0, 0x711, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x58}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r8 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r8, 0x2008002) sendfile(r0, r8, 0x0, 0x200fff) 19:43:34 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}) [ 754.208353][T29741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:43:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xb90000, 0x4) 19:43:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x500000000000000}) [ 754.264396][T29745] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xc07300, 0x4) 19:43:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x600000000000000}) 19:43:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:35 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}) [ 754.595533][T29746] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 754.650435][T29767] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 754.687061][ T29] audit: type=1800 audit(1593891815.414:435): pid=29741 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16315 res=0 19:43:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x700000000000000}) 19:43:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xd05300, 0x4) 19:43:35 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket(0x11, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000040)=0x1, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 754.837404][T29767] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x800000000000000}) 19:43:35 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}) 19:43:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x20000000, 0x4) [ 755.071692][T29791] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0xfdfdffff00000000}) [ 755.122481][ T29] audit: type=1800 audit(1593891815.844:436): pid=29786 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16377 res=0 19:43:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x21000000, 0x4) 19:43:36 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x0, 0x2, 0x1, 0x3}}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x600) r6 = socket$netlink(0x10, 0x3, 0x3e) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c01000024001d0f00"/20, @ANYRES32=r9, @ANYBLOB="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"], 0x16c}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x1d, r9}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x1, 0x10, 0x3, {0x77359400}, {}, {0x2, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x0, 0x1}, 0x1b, 0x1, 0x0, 0x0, "a654386465a08a0d967e63fe0a2fe3394402fe2012d5405d1c453c8f494f00cf26895c1fdfa487728c3816a9380edbd98cc92c35e7bb61614489867d66e3b3dc"}}, 0x80}}, 0x10) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:43:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0xff00000000000000}) 19:43:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:36 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x4}) 19:43:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x3f000000, 0x4) [ 755.412695][T29810] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:43:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x2}) 19:43:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xff600000, 0x4) 19:43:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 755.484749][T29815] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 755.564514][T29810] netlink: 328 bytes leftover after parsing attributes in process `syz-executor.0'. 19:43:36 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x4}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 755.684855][ T29] audit: type=1800 audit(1593891816.414:437): pid=29825 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16316 res=0 19:43:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xffffffff, 0x4) [ 755.777174][T29838] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x3}) 19:43:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:36 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x4}) 19:43:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x3) 19:43:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x4}) 19:43:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:37 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x810, r0, 0xf77) r1 = socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1405, 0x1, 0x70bd26, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) 19:43:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x5}) [ 756.383171][ T29] audit: type=1800 audit(1593891817.114:438): pid=29848 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16377 res=0 19:43:37 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x4}) 19:43:37 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) socket$packet(0x11, 0x2, 0x300) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x111000, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8004}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x4) getsockname$tipc(r5, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 19:43:37 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x1c, r5, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r5, 0x408, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a24b9c4ab8bfb6ad05d4e8a28d"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2450911992cb288d89c8c1734a"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x40) 19:43:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x6}) 19:43:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x7}) 19:43:37 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x4}) 19:43:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x8}) 19:43:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x300}) 19:43:37 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4}) [ 757.214423][ T29] audit: type=1800 audit(1593891817.944:439): pid=29893 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16382 res=0 19:43:38 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) bind(0xffffffffffffffff, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) clock_adjtime(0x0, &(0x7f0000000140)={0x6, 0x0, 0x5c, 0x3, 0xffffffff, 0x0, 0x101, 0x7fffffff, 0x0, 0x100, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x16e000000, 0x8, 0xffffffff, 0x3f, 0x8db, 0x2, 0x2, 0x10000, 0x49c, 0x3, 0x6, 0xffffffffffffffff}) semctl$SETVAL(0x0, 0x4, 0x10, &(0x7f0000000040)=0xcf9) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0xe) ftruncate(r3, 0x2008002) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket$inet_sctp(0x2, 0x0, 0x84) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000080)={{r5}, 0x6, 0x1, 0x80000001}) sendfile(r0, r3, 0x0, 0x200fff) 19:43:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x500}) 19:43:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000140)=0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x0, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) readahead(r4, 0x8, 0xb3d6) 19:43:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x4}) 19:43:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x600}) 19:43:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4}) 19:43:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x700}) 19:43:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x81, @loopback, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x2, @empty, 0x7}, @in6={0xa, 0x4e24, 0x6, @ipv4={[], [], @empty}, 0x7}], 0x84) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000240)) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) lsetxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x2) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000000100)) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000140)) r5 = getpid() pidfd_open(r5, 0x0) sched_rr_get_interval(r5, &(0x7f0000000200)) 19:43:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x4}) [ 757.763419][ T29] audit: type=1800 audit(1593891818.494:440): pid=29933 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16374 res=0 19:43:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0xff00}) 19:43:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000140)=0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x0, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) readahead(r4, 0x8, 0xb3d6) 19:43:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0xff01, 0x0, 0x0, 0x0, 0x4}) 19:43:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x1000000}) 19:43:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x81, @loopback, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x2, @empty, 0x7}, @in6={0xa, 0x4e24, 0x6, @ipv4={[], [], @empty}, 0x7}], 0x84) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000240)) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x4) lsetxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x2) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000000100)) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000140)) r5 = getpid() pidfd_open(r5, 0x0) sched_rr_get_interval(r5, &(0x7f0000000200)) 19:43:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x4}) 19:43:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4d3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0x1d4, r1) add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)=ANY=[@ANYBLOB="04000000000d000037404f1040e77b824cd3564b25d0f5af07c2d5220fff11aef660b9073185a1355e590923ca7664e6b021f66fc88d52b4ef20c1a7570119935b63131a4e654c512b26e326de5abfa848d7a0360dc7eb2603c3780c1c6af0008aa42b17e0b711669797c95d21c6490d2dfe3805c77d099ea647720cbe4618902d2329d3326d94eddb3473fee17f5a72ed1cd867b4f0f56b192f9ce93777d3252c311ba86931a7046dee4d2300d2634e5807e4654ac6854781190361"], 0x60, r1) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0x1d4, r2) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x21a582, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x400000000039604, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000200)) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0x1d4, r4) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0x1d4, 0x0) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0x1d4, r5) keyctl$negate(0xd, r5, 0x27ffffffffffff, 0x0) 19:43:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x2000000}) 19:43:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4}) 19:43:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4}) 19:43:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980b, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x46d4, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) accept4$alg(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x24000, 0x0) splice(r1, 0x0, r4, 0x0, 0x400000000039604, 0x5) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x7fff, 0x1, 0xe62, 0x5, 0x9, 0x1000, 0x6}) 19:43:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x3000000}) 19:43:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}) 19:43:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4}) 19:43:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x4000000}) 19:43:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x3ff, 0x4) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) 19:43:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x4}) 19:43:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4}) 19:43:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x5000000}) 19:43:39 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) sendto$unix(r0, &(0x7f0000000080)="0e2b5ad83d901449fb3e36dacc73404ab92e0fd73d3b0cb0f2fa5d40217067e967a17331c8f4636c35608784733e2bfb4b2cf0f427d6453fae1123ea9e9ea9736b384131982f25f666bc4c2e49a4f6d3927e8eba80eeb771e0754d370c1323e266902dd13c5d7efdb196846e81620932b047283b358d6ec8e566339250f061eda65d", 0x82, 0x8014, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x0, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x4) write$vhci(r3, &(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@none, 0x8}}}, 0xa) 19:43:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x4}) 19:43:39 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4}) 19:43:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x6000000}) 19:43:39 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x18700, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) 19:43:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x4}) 19:43:39 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4}) 19:43:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x7000000}) 19:43:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3a, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:40 executing program 5: r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext, 0x10, 0x800, 0x0, 0x0, 0x2}, r0, 0x5, 0xffffffffffffffff, 0x0) r1 = getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) r2 = getpid() pidfd_open(r2, 0x0) r3 = getpid() pidfd_open(r3, 0x0) pidfd_open(r3, 0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000000)=0x80000000) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x0, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) write$binfmt_elf64(r5, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000040)) 19:43:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x4}) 19:43:40 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4}) 19:43:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x8000000}) [ 759.364809][T30077] __nla_validate_parse: 13 callbacks suppressed [ 759.364820][T30077] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x879}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-arm\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x400000000039604, 0x0) write$P9_RLINK(r1, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) 19:43:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x4}) 19:43:40 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4}) 19:43:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0xfdfdffff}) [ 759.507590][T30077] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, r2, 0x711, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x0, 0x4) 19:43:40 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4}) 19:43:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x4}) 19:43:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0xff000000}) 19:43:40 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4}) 19:43:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x4}) 19:43:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 19:43:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0xfffffdfd}) [ 759.827397][T30119] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:40 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4}) 19:43:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000080)={0x8, 0x8, 0x1}) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000000)) 19:43:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4a, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x100000000000000}) 19:43:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x4}) 19:43:40 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4}) [ 760.123652][T30143] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x200000000000000}) 19:43:41 executing program 5: r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x800000}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r4, 0x0, 0x10}, &(0x7f00000000c0)=0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x400000000039604, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0x8) pipe(&(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r8, 0x111, 0x5, 0x0, 0x4) 19:43:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x4}) 19:43:41 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4}) 19:43:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4c, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x300000000000000}) 19:43:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4}) 19:43:41 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 19:43:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x400000000000000}) [ 760.508150][T30167] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x4}) 19:43:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x500000000000000}) [ 760.648407][T30167] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:41 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 19:43:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 760.846548][T30191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x66, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x4}) 19:43:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x600000000000000}) 19:43:41 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 19:43:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x2, r4}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 761.272971][T30207] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x700000000000000}) 19:43:42 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0xff010000, 0x0, 0x0, 0x0, 0x4}) 19:43:42 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x68, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:42 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x4}) 19:43:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x800000000000000}) 19:43:42 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 761.598679][T30227] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6c, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0xfdfdffff00000000}) 19:43:42 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 19:43:42 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 761.848732][T30244] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 19:43:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x74, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0xff00000000000000}) 19:43:42 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}) 19:43:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}) 19:43:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7a, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}) 19:43:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 19:43:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000}) 19:43:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) 19:43:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xcd, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) 19:43:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}) 19:43:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000}) 19:43:43 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x41100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1000}, 0x0, 0x6, r0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xedcde3bb7e528b1d) sendfile(r3, r1, &(0x7f0000000040)=0x6, 0xffff) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x0, 0x4) 19:43:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}) 19:43:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000}) 19:43:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4}) 19:43:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xd8, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:43 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) 19:43:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}) 19:43:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) 19:43:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe4, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 19:43:44 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4}) 19:43:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:44 executing program 5: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0xb7) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) r3 = getpid() pidfd_open(r3, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="8cb43695b9de4f49e3d80000"], 0x104}}, 0x4000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000140)={0x3, 0x2, 0x1f, 0xdbe, 0xf0, 0x6}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x40000, 0x0) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f0000000340)={[0x7f, 0x7, 0x80010000, 0x1, 0x9, 0x4, 0x0, 0x1000, 0x9, 0x7fff, 0x108, 0x8, 0x101, 0x2, 0x6a4e, 0x3, 0xaae, 0xbfb, 0x3, 0x2, 0x20, 0x8, 0x1c00000, 0x1, 0x2, 0x1, 0x11, 0x5, 0x52bdd9a1, 0x4, 0x7, 0x8, 0x72d6, 0xd44ff9ba, 0x5, 0xf6b5, 0x8, 0x21a, 0x10000, 0x9, 0x8, 0xfffffff1, 0x0, 0x2, 0xfffffffc, 0x5, 0x2, 0x8, 0x1, 0x0, 0x407f4ff, 0x0, 0x8001, 0x9, 0x8, 0x10001, 0x7, 0x7, 0x3, 0x2, 0x0, 0x7fff, 0x1ff, 0x5, 0x80, 0x800, 0x9, 0x9, 0x700, 0x2, 0x401, 0x3, 0x5, 0x20, 0x1ff, 0x80000001, 0xef, 0x401, 0x200, 0x1, 0x7fffffff, 0x1ff, 0x1f, 0x4, 0x8, 0x4, 0x1, 0x8, 0x4, 0xffffffff, 0x9, 0x7, 0x8, 0x5, 0x0, 0x80, 0x7, 0x1, 0x4, 0x0, 0x4, 0xdc, 0x1, 0x10000, 0x3, 0x9, 0x6, 0x0, 0xd8000000, 0x200, 0x3, 0xffff, 0x5, 0x6, 0x10000, 0x8, 0x1, 0xe9f, 0x400, 0x80, 0x401, 0x6ca3f6d0, 0x7ff, 0x3ff, 0xb84, 0x3, 0x5396, 0xb1, 0x7f, 0x7, 0x3, 0x9, 0x5, 0x1, 0x3, 0xffff8001, 0x26faa3c1, 0x7, 0x4, 0x5f75, 0x10000, 0x40, 0x2, 0x1ff, 0x6, 0x6, 0x8, 0x100, 0x0, 0x874, 0x1, 0xea, 0x7, 0x200, 0x5, 0x7fff, 0x8001, 0x5, 0x3, 0x0, 0x100, 0x14, 0x0, 0x4, 0x46ea, 0x5, 0x2, 0x4, 0x6, 0x1, 0x1, 0x9, 0x20, 0x615f, 0x5, 0x95, 0x6, 0x46d80d38, 0xfffffffc, 0x6, 0x9, 0x800, 0x3, 0xfffffff8, 0x101, 0xffff0000, 0x6, 0x5, 0x7f, 0x2437d87d, 0xfff, 0x3501bb05, 0x4, 0x7, 0xf47, 0x0, 0x7, 0x7, 0x1, 0x0, 0x4, 0x7f, 0x8, 0x10000, 0x401, 0x5, 0x7, 0x7, 0x35e, 0x80000000, 0x2, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x7, 0x7d2e, 0x40, 0x80000000, 0xff, 0x0, 0x5, 0x0, 0x9, 0x9, 0x7, 0x80000001, 0x8, 0x7fffffff, 0xeb, 0x1, 0x400, 0x81, 0x1, 0x9, 0x1, 0x4, 0xaf, 0x7ff, 0x7, 0x6, 0x1, 0x3, 0x0, 0x8, 0x1, 0xa42fcf4, 0x8, 0x6, 0x0, 0x800, 0x800, 0x4, 0x2, 0x7fff, 0x7, 0x0, 0x20, 0x2, 0xae, 0x40, 0x80000001, 0x80000000, 0x0, 0xc2cc, 0x0, 0xef2, 0x80, 0x100, 0x7, 0x9, 0x5, 0x1, 0x0, 0x65dbd438, 0x45c, 0x8, 0x1ff, 0x6, 0x5, 0x4a, 0x0, 0x2, 0x4, 0x4, 0xfff, 0x9, 0x1f, 0x3, 0x7f, 0x400, 0x7fff, 0x8, 0x6, 0x7, 0x2c2, 0x4, 0x344baa64, 0x3, 0x1, 0x41, 0x401, 0x3f, 0x65de352b, 0x7fff, 0x9, 0x222, 0x6, 0x7fff, 0x8, 0x1a8d, 0x9b, 0xa818, 0x5, 0xdbd, 0x6, 0x5, 0x4f, 0x7, 0x115, 0xe6ea, 0x9, 0x593, 0x80000001, 0x401, 0xb7b, 0x7, 0x2, 0x0, 0x4, 0x400, 0x9, 0x200, 0x1, 0x7, 0x80, 0x800, 0x3f, 0x5, 0x1, 0x2, 0xb352, 0x7, 0x3, 0x3, 0x1, 0x0, 0x1f, 0x1, 0x7, 0xbd31, 0x5, 0x4, 0x4670000, 0x5, 0x3, 0x1000, 0x1, 0x9, 0x10000, 0x2, 0x2, 0x8, 0xfffffff8, 0x6, 0x4, 0x80000001, 0x2, 0x10001, 0x200, 0x8, 0x2, 0x4, 0x7, 0x10001000, 0x32, 0x81, 0x6, 0x8000, 0x6, 0xd1e1, 0x993e, 0x9, 0x800, 0x5, 0x3, 0x2, 0x3, 0x8000, 0x2, 0x2, 0xa1, 0x8, 0x8, 0x80, 0x8, 0x5, 0xffffffff, 0x3, 0x8, 0x4, 0x1, 0xffffff00, 0x8, 0x7, 0x9b1, 0x3f, 0x7, 0x80000000, 0x9, 0x10000, 0x3ff, 0x40, 0x8001, 0xb0, 0x3, 0x10001, 0x7, 0x9, 0x100, 0x7, 0x40, 0x10001, 0x10001, 0x101, 0x5, 0x400, 0x65662338, 0xfffffff8, 0x4, 0x1000, 0x4, 0x0, 0xff, 0x2, 0x6, 0x6f, 0x58, 0x3, 0x7, 0x6, 0x6, 0x0, 0x5, 0x9, 0x6, 0x401, 0x8001, 0x136ef85b, 0x9, 0x0, 0xffffc652, 0x200, 0x3ff, 0xfff, 0x2, 0x20, 0x0, 0x3, 0x1, 0x7, 0x0, 0x8, 0x2, 0x0, 0x3f, 0x80000001, 0x1, 0x6, 0x7, 0xe5, 0x9a4, 0xf8d0, 0xffffffff, 0x4, 0x9, 0x8b, 0x5, 0x6, 0x5, 0xffff8a5a, 0x7, 0x2, 0x72b3efd1, 0x9, 0x4, 0x926, 0x7f, 0x0, 0x6, 0x1, 0x5, 0x5, 0x60000000, 0x4, 0x1000, 0x40, 0x3, 0x6, 0x5, 0x8, 0xfbae, 0x2, 0x38, 0x9, 0x7, 0xf8c2, 0x1, 0xa6, 0x7, 0x8000, 0x8000, 0x1000, 0x2, 0x8, 0x81, 0x0, 0xff, 0x60, 0x10001, 0x7f, 0x5, 0x1ff, 0x67bc, 0x7, 0xe0, 0x3f, 0xffffffac, 0x0, 0x1ff, 0x81, 0x8, 0x1, 0x2, 0x2, 0x8001, 0x5, 0x9, 0x1, 0x9, 0x1, 0x100, 0xfffffff7, 0x8, 0xfffffffc, 0x2, 0x8, 0x5, 0x2, 0xa44, 0x22, 0x5, 0x5, 0x4, 0xeda0, 0x62, 0x9, 0x20, 0x2, 0x79, 0x2, 0x43c0, 0x20, 0x9, 0xd30, 0xa834, 0xfffffff7, 0x96, 0x0, 0x6, 0x4, 0xf400, 0x1, 0x1, 0x4, 0x2, 0x8, 0x2, 0x1, 0x7fffffff, 0x8, 0x1, 0x10000, 0x7ff, 0x18, 0x4, 0x2, 0xffffb572, 0x0, 0x7, 0x5, 0x0, 0x8000, 0x3, 0x1ff, 0xfffffffb, 0x10000, 0x8, 0x100, 0x80000000, 0xa7aa, 0x1, 0x1000, 0x7ff, 0x5ac9d9f8, 0x200000, 0x1, 0x100, 0xb92, 0x5f0e, 0x400, 0xffff6a43, 0x80000000, 0x3b5, 0x4, 0x5, 0x7fffffff, 0x200, 0x8, 0x5, 0x4, 0x100, 0x2, 0x101, 0x4, 0x1, 0x7dd, 0xb0, 0x6bd, 0x2, 0x40, 0x2, 0x0, 0x9252, 0x3ff, 0x7b, 0x40, 0x6, 0x10001, 0x5, 0x81, 0x1400000, 0x8001, 0x3690b692, 0x3, 0x400, 0x1, 0x3f, 0x2c, 0x1000, 0xad, 0x0, 0x1, 0x556, 0xa84c, 0x7, 0x8001, 0x200, 0x8d6, 0xc77, 0x40, 0xd8a6, 0x3, 0xffff1b81, 0xafa, 0x3, 0x1ff, 0x9, 0x9, 0x8, 0x2, 0x6, 0x7fff, 0x48f, 0x5, 0x7f, 0x5, 0xfffffff9, 0x8000, 0x5, 0x7fffffff, 0x4, 0x2000, 0x39ae, 0x24f, 0x8001, 0x800, 0x2, 0x1ff, 0x70, 0x236, 0x3f, 0x6d8e, 0x6, 0x7fffffff, 0x68, 0x81, 0x5, 0x6, 0x4, 0xffff, 0x3f, 0x0, 0xe, 0x3, 0x2, 0x2, 0x0, 0x5, 0x7fff, 0x80000001, 0x2, 0x4, 0x8001, 0x8, 0x2, 0x4, 0x7, 0xc3, 0x0, 0x1, 0x5, 0x8001, 0xd715, 0x2, 0x6, 0x7, 0x80, 0x7f, 0x800, 0x2e0, 0x5, 0x4, 0x4, 0xe78a, 0x4, 0x7, 0x1, 0x1, 0x8001, 0x2, 0x1f, 0xffffffff, 0xd3, 0x1, 0x1, 0xf9b, 0x1000, 0x74c5eb3, 0x6, 0x7, 0xfffffff8, 0x400, 0x2, 0x1000, 0x6, 0x1, 0x10001, 0x3ff, 0x1, 0xe, 0x8001, 0x8000, 0xd10, 0xff800000, 0xffff0001, 0x1000, 0x8, 0x0, 0x7f2b, 0x6, 0xc41, 0x291c457c, 0x9, 0x80000000, 0x3ff, 0x2, 0x2, 0x9, 0xffff, 0x80000000, 0x6, 0x0, 0x2, 0x7, 0x81, 0x8000, 0x6, 0xa1f, 0xffff, 0x1, 0x0, 0xfff, 0x7ff, 0xb0b1, 0x5, 0x2, 0x3, 0xa778, 0x1ff, 0x401, 0x9, 0x1, 0x200, 0xbeb, 0x8, 0x0, 0x10001, 0x2, 0x6f0, 0x4, 0x81, 0x8, 0x9, 0x1, 0x3, 0x40, 0x6, 0x3, 0x2, 0x101, 0x2, 0x6, 0x100, 0x9, 0x80, 0x8001, 0x5, 0xaa2, 0xffff, 0x9, 0x7, 0x4, 0x6, 0x7, 0x5, 0x401, 0x6, 0x1, 0x2, 0x16b, 0x4, 0x6, 0xdf, 0x79, 0x5, 0x8, 0x8001, 0x7, 0x0, 0x9, 0x9, 0x5, 0xfffffac1, 0x4, 0x0, 0x80000000, 0x8, 0x8, 0x8, 0x200, 0x7f, 0x8, 0x7, 0x1, 0x5, 0xc1, 0x40, 0xfffffc00, 0xde6, 0x0, 0x800, 0x3, 0x1, 0x9, 0x21e8, 0x1, 0x7, 0x1, 0x6, 0x9, 0x3, 0x6, 0xfffffffa, 0x8, 0xa00, 0xac23, 0x3, 0xfe000000, 0xffff7fff, 0x8, 0x47, 0x9, 0x80000000, 0x0, 0xfffffe00, 0x7, 0x21, 0x20, 0x2, 0xfffffff7, 0x664, 0x3000000, 0x72ab, 0x9, 0x149d, 0x0, 0x8, 0x5fd, 0x80, 0x8001, 0x2, 0x8, 0x8000000, 0x6, 0x7f, 0x7, 0x80000000, 0xfffffff8, 0xfffffff8, 0x3, 0x3, 0x7, 0x0, 0x8, 0xec0, 0x3, 0x8, 0x1ff, 0x7, 0x80000000, 0xfff, 0x20000, 0x10000, 0x5, 0x8, 0x10001, 0x1, 0x9, 0x8, 0x7, 0x0, 0x1655, 0x1, 0x789, 0xfff, 0x81, 0x706dcf45, 0xfff, 0x6, 0xdbb9, 0x100, 0x4, 0x7, 0x8000, 0x40b, 0x6, 0x3f, 0x9, 0x3a, 0x6, 0x1, 0x2, 0x10000, 0x7fff, 0xe891, 0x1, 0x0, 0x6, 0x0, 0x9, 0x80000000, 0x5, 0x1, 0x7fffffff, 0x2, 0x7, 0x8, 0x8, 0x3, 0x100, 0xffffffff, 0x101, 0x7fffffff, 0x0, 0x1, 0x1, 0x1, 0x6, 0x69f, 0x0, 0x8, 0x1, 0x1ff, 0x10001, 0x5, 0x7, 0x40, 0xffff, 0x78f, 0x5, 0x5d, 0x0, 0x9, 0xffff, 0x8, 0x3, 0x81, 0x8, 0x7fff, 0x1, 0x9, 0x4, 0xc, 0xbf20, 0x0, 0x5, 0xd868, 0xfffffffb, 0x5, 0x4, 0x51, 0x9]}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000040)=ANY=[], 0x4) connect$rose(r6, &(0x7f0000000200)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x40) 19:43:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}) 19:43:44 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}) 19:43:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf4, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x500}) 19:43:44 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}) 19:43:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfa, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x600}) 19:43:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x12a, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x700}) 19:43:45 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x4}) [ 764.430511][T30409] __nla_validate_parse: 13 callbacks suppressed [ 764.430520][T30409] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xff00}) 19:43:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x138, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:45 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x4}) 19:43:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) [ 764.775687][T30428] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:43:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902340000000000f94d2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="70726a71756f74612c00e7fc259ea31eb57a9431622ebb1b83f8d9cb74ac8cf1c8bbe712e690492ff26e575895bb02990900000800000065ca82730af1582ddc9a0000000000000000"]) socket$inet(0x2, 0x5, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, [{}]}, 0x78) r1 = dup(r0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/212) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x400000000039604, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x200, 0x0, 0x200, 0x0, 0x0, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}, {0xf8}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "1eb063546ccd56fce70cbf65d11bbcdfe2fb44e146fffc7373cfe058b91471b1f91fa3eedadf91434cf20332335cc5ef47a2f11a9ccfb3dfdf7a3bd909ac85b3"}}}, {{@ipv6={@ipv4={[], [], @local}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000040)={r7}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000003c0)={r7, 0x8, &(0x7f0000000040)=[0x1, 0x1, 0x3f, 0x2, 0x1, 0xbd4, 0x40, 0x7fffffff], &(0x7f0000000280)=[0x7, 0x401, 0x5], 0x6b, 0x4, 0x1, &(0x7f00000002c0)=[0x7, 0x88d9, 0x80, 0x1], &(0x7f0000000380)=[0xffff7fff, 0x64a, 0x6, 0x40, 0x9, 0x6]}) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 19:43:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x14c, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x176, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x17c, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:43:46 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 764.896794][T30428] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 764.938352][T30442] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 765.125819][T30449] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 765.182794][T30455] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 765.248468][T30460] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 765.437980][T30473] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 765.464421][T30474] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 765.613031][T30486] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 765.676923][T30486] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 766.026941][T30460] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 778.273449][ T0] NOHZ: local_softirq_pending 08 [ 807.712753][ T0] NOHZ: local_softirq_pending 08 19:45:23 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x4}) 19:45:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000000}) 19:45:23 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:45:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x186, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19:45:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x400000000039604, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x43, 0xffff, 0x9, 0x8, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r7}) splice(r1, 0x0, r3, 0x0, 0x400000000039604, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000080)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000040)=ANY=[], 0x4) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x57deab240f4408d6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf058, 0x1, @perf_config_ext={0x2, 0x7}, 0x12810, 0x80, 0x0, 0x6, 0x10cd, 0x6, 0x8}, r8, 0xf, 0xffffffffffffffff, 0x4) [ 863.530161][T30538] __nla_validate_parse: 4 callbacks suppressed [ 863.530171][T30538] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 863.550833][T30539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 863.926598][T30539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 864.810318][ T21] tipc: TX() has been purged, node left! [ 867.385672][T30593] IPVS: ftp: loaded support on port[0] = 21 [ 867.655853][ T21] device hsr_slave_0 left promiscuous mode [ 867.690731][ T21] device hsr_slave_1 left promiscuous mode [ 867.760257][ T21] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.762987][ T21] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 867.763009][ T21] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.764981][ T21] device bridge_slave_1 left promiscuous mode [ 867.765102][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.801276][ T21] device bridge_slave_0 left promiscuous mode [ 867.801406][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.859438][ T21] device veth1_macvtap left promiscuous mode [ 867.859505][ T21] device veth0_macvtap left promiscuous mode [ 867.859566][ T21] device veth1_vlan left promiscuous mode [ 867.859615][ T21] device veth0_vlan left promiscuous mode [ 874.947225][ T21] team0 (unregistering): Port device team_slave_1 removed [ 874.956227][ T21] team0 (unregistering): Port device team_slave_0 removed [ 874.968498][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.016846][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.177007][ T21] bond0 (unregistering): Released all slaves [ 875.309524][T30607] IPVS: ftp: loaded support on port[0] = 21 [ 875.544740][T30593] chnl_net:caif_netlink_parms(): no params data found [ 875.614505][T30607] chnl_net:caif_netlink_parms(): no params data found [ 875.730640][T30607] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.730675][T30607] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.731431][T30607] device bridge_slave_0 entered promiscuous mode [ 875.736588][T30607] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.736622][T30607] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.737440][T30607] device bridge_slave_1 entered promiscuous mode [ 875.809110][T30593] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.809176][T30593] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.812769][T30593] device bridge_slave_0 entered promiscuous mode [ 875.817911][T30593] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.817996][T30593] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.818929][T30593] device bridge_slave_1 entered promiscuous mode [ 875.838269][T30607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.842698][T30607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.898839][T30593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.902882][T30607] team0: Port device team_slave_0 added [ 875.905670][T30607] team0: Port device team_slave_1 added [ 875.932517][T30593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.954203][T30607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.954220][T30607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.954228][T30607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.956415][T30607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.956430][T30607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.956438][T30607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.988926][T30593] team0: Port device team_slave_0 added [ 875.993496][T30593] team0: Port device team_slave_1 added [ 876.047571][T30593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.047586][T30593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.047593][T30593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.088144][T30593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.088161][T30593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.088169][T30593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.153203][T30607] device hsr_slave_0 entered promiscuous mode [ 876.192945][T30607] device hsr_slave_1 entered promiscuous mode [ 876.230066][T30607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 876.230113][T30607] Cannot create hsr debugfs directory [ 876.324014][T30593] device hsr_slave_0 entered promiscuous mode [ 876.350883][T30593] device hsr_slave_1 entered promiscuous mode [ 876.390058][T30593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 876.390076][T30593] Cannot create hsr debugfs directory [ 876.786198][T30607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.811826][ T2494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 876.812430][ T2494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 876.815960][T30607] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.833395][ T2494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 876.833976][ T2494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 876.834368][ T2494] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.834424][ T2494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.835162][ T2494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 876.848358][ T2494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 876.848903][ T2494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 876.849242][ T2494] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.849276][ T2494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.866621][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 876.873634][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 876.883182][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 876.884017][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 876.885086][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 876.920309][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 876.921104][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 876.937831][T30593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.942087][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 876.942488][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 876.962136][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 876.962651][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 876.981809][ T3671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 876.982303][ T3671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 876.983888][T30607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 876.988926][T30593] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.021569][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 877.021698][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 877.029109][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 877.029700][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 877.030853][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.030893][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.031453][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 877.042649][T30607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.043538][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 877.044134][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 877.044558][ T2476] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.044596][ T2476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.062747][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 877.068438][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 877.077912][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 877.078795][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 877.079500][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 877.101361][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 877.102623][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 877.116002][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 877.116587][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 877.126703][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 877.127291][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 877.143371][T30593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 877.181105][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 877.181244][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 877.201737][T30593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.233160][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 877.233797][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 877.268194][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 877.268823][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 877.269595][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 877.272000][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 877.275468][T30607] device veth0_vlan entered promiscuous mode [ 877.315419][T30607] device veth1_vlan entered promiscuous mode [ 877.371345][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 877.371929][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 877.372426][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 877.380432][ T3671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 877.395684][T30607] device veth0_macvtap entered promiscuous mode [ 877.416050][T30607] device veth1_macvtap entered promiscuous mode [ 877.418869][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 877.446542][T30593] device veth0_vlan entered promiscuous mode [ 877.451770][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 877.452212][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 877.453043][T30607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 877.453076][T30607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.453085][T30607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 877.453090][T30607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.453098][T30607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 877.453103][T30607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.453114][T30607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 877.453119][T30607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.454262][T30607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.471232][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 877.471842][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 877.472247][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 877.472722][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 877.477631][T30607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 877.477639][T30607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.477648][T30607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 877.477654][T30607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.477665][T30607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 877.477671][T30607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.477681][T30607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 877.477687][T30607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.477698][T30607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 877.477704][T30607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.478879][T30607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.478963][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 877.479547][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 877.498476][T30593] device veth1_vlan entered promiscuous mode [ 877.668628][T30593] device veth0_macvtap entered promiscuous mode [ 877.670665][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 877.671314][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 877.671888][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 877.672470][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 877.673109][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 877.690439][T30593] device veth1_macvtap entered promiscuous mode [ 877.753705][T30593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 877.753714][T30593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.753725][T30593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 877.753731][T30593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.753742][T30593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 877.753748][T30593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.753761][T30593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 877.753767][T30593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.753780][T30593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 877.753786][T30593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.755706][T30593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.755810][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 877.756484][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 877.757081][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 877.768273][T30593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 877.768281][T30593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.768291][T30593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 877.768297][T30593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.768307][T30593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 877.768313][T30593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.768323][T30593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 877.768329][T30593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.768341][T30593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 877.768346][T30593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.768359][T30593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 877.768364][T30593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.771577][T30593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.771670][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 877.772266][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 880.220500][ T21] tipc: TX() has been purged, node left! [ 882.905793][ T21] device hsr_slave_0 left promiscuous mode [ 882.950172][ T21] device hsr_slave_1 left promiscuous mode [ 883.030115][ T21] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 883.030200][ T21] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.032114][ T21] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.032136][ T21] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.034043][ T21] device bridge_slave_1 left promiscuous mode [ 883.034173][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.071848][ T21] device bridge_slave_0 left promiscuous mode [ 883.071978][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.114962][ T21] device veth1_macvtap left promiscuous mode [ 883.114995][ T21] device veth0_macvtap left promiscuous mode [ 883.115052][ T21] device veth1_vlan left promiscuous mode [ 883.115104][ T21] device veth0_vlan left promiscuous mode [ 889.219658][ T21] bond1 (unregistering): Released all slaves [ 889.463867][ T21] team0 (unregistering): Port device team_slave_1 removed [ 889.481967][ T21] team0 (unregistering): Port device team_slave_0 removed [ 889.489339][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.529388][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.687555][ T21] bond0 (unregistering): Released all slaves [ 921.631808][ T0] NOHZ: local_softirq_pending 08 [ 951.070577][ T0] NOHZ: local_softirq_pending 08 [ 962.590915][ T0] NOHZ: local_softirq_pending 08 [ 1024.025532][ T0] NOHZ: local_softirq_pending 08 [ 1025.943735][ T1146] INFO: task syz-executor.2:31005 blocked for more than 143 seconds. [ 1025.943748][ T1146] Not tainted 5.8.0-rc3-syzkaller #0 [ 1025.943753][ T1146] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1025.943760][ T1146] syz-executor.2 D28760 31005 30593 0x00000004 [ 1025.943784][ T1146] Call Trace: [ 1025.943855][ T1146] __schedule+0x8e1/0x1eb0 [ 1025.943876][ T1146] ? io_schedule_timeout+0x140/0x140 [ 1025.943909][ T1146] ? __lock_acquire+0x16e3/0x56e0 [ 1025.943936][ T1146] ? __down+0x13a/0x2a0 [ 1025.943949][ T1146] schedule+0xd0/0x2a0 [ 1025.943965][ T1146] schedule_timeout+0x1d8/0x250 [ 1025.943981][ T1146] ? usleep_range+0x170/0x170 [ 1025.943995][ T1146] ? lock_downgrade+0x820/0x820 [ 1025.944012][ T1146] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1025.944027][ T1146] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1025.944041][ T1146] ? trace_hardirqs_on+0x5f/0x220 [ 1025.944058][ T1146] __down+0x183/0x2a0 [ 1025.944120][ T1146] ? do_raw_spin_lock+0x120/0x2b0 [ 1025.944134][ T1146] ? __down_timeout+0x2a0/0x2a0 [ 1025.944146][ T1146] ? rwlock_bug.part.0+0x90/0x90 [ 1025.944165][ T1146] ? lockdep_hardirqs_off+0x66/0xa0 [ 1025.944182][ T1146] down+0x57/0x80 [ 1025.944198][ T1146] console_lock+0x25/0x80 [ 1025.944242][ T1146] con_set_cmap+0xa8/0x510 [ 1025.944262][ T1146] ? console_callback+0x410/0x410 [ 1025.944293][ T1146] ? security_capable+0x8f/0xc0 [ 1025.944311][ T1146] vt_ioctl+0x1682/0x2670 [ 1025.944326][ T1146] ? trace_stack_print+0x210/0x2c0 [ 1025.944341][ T1146] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1025.944354][ T1146] ? vt_waitactive+0x350/0x350 [ 1025.944372][ T1146] ? tomoyo_path_number_perm+0x244/0x4d0 [ 1025.944389][ T1146] ? tomoyo_execute_permission+0x470/0x470 [ 1025.944414][ T1146] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1025.944454][ T1146] ? tty_jobctrl_ioctl+0x4d/0x1010 [ 1025.944467][ T1146] ? vt_waitactive+0x350/0x350 [ 1025.944505][ T1146] tty_ioctl+0x1019/0x15f0 [ 1025.944523][ T1146] ? tty_fasync+0x390/0x390 [ 1025.944540][ T1146] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1025.944562][ T1146] ? do_vfs_ioctl+0x27d/0x1090 [ 1025.944577][ T1146] ? generic_block_fiemap+0x60/0x60 [ 1025.944596][ T1146] ? __might_fault+0x190/0x1d0 [ 1025.944637][ T1146] ? _copy_to_user+0x126/0x160 [ 1025.944658][ T1146] ? __fget_files+0x294/0x400 [ 1025.944678][ T1146] ? tty_fasync+0x390/0x390 [ 1025.944691][ T1146] ksys_ioctl+0x11a/0x180 [ 1025.944707][ T1146] __x64_sys_ioctl+0x6f/0xb0 [ 1025.944721][ T1146] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1025.944735][ T1146] do_syscall_64+0x60/0xe0 [ 1025.944749][ T1146] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1025.944761][ T1146] RIP: 0033:0x45cb29 [ 1025.944766][ T1146] Code: Bad RIP value. [ 1025.944774][ T1146] RSP: 002b:00007f9e4bf41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1025.944788][ T1146] RAX: ffffffffffffffda RBX: 00000000004ea220 RCX: 000000000045cb29 [ 1025.944797][ T1146] RDX: 0000000020000000 RSI: 0000000000004b71 RDI: 0000000000000003 [ 1025.944805][ T1146] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1025.944813][ T1146] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1025.944822][ T1146] R13: 000000000000042e R14: 00000000004c7022 R15: 00007f9e4bf426d4 [ 1025.944842][ T1146] [ 1025.944842][ T1146] Showing all locks held in the system: [ 1025.944855][ T1146] 1 lock held by khungtaskd/1146: [ 1025.944860][ T1146] #0: ffffffff89bc1180 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1025.944913][ T1146] 1 lock held by in:imklog/6563: [ 1025.944922][ T1146] #0: ffff8880a8141670 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 1025.944957][ T1146] 4 locks held by syz-executor.3/30468: [ 1025.944962][ T1146] #0: ffff888092c5d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1025.944988][ T1146] #1: ffff888092c5d130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: tty_write+0x280/0x870 [ 1025.945015][ T1146] #2: ffff888092c5d2e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x1bf/0xf80 [ 1025.945041][ T1146] #3: ffffc90004961378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0x4fa/0xf80 [ 1025.945071][ T1146] 2 locks held by syz-executor.1/31001: [ 1025.945076][ T1146] [ 1025.945081][ T1146] ============================================= [ 1025.945081][ T1146] [ 1025.945088][ T1146] NMI backtrace for cpu 1 [ 1025.945102][ T1146] CPU: 1 PID: 1146 Comm: khungtaskd Not tainted 5.8.0-rc3-syzkaller #0 [ 1025.945110][ T1146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.945114][ T1146] Call Trace: [ 1025.945128][ T1146] dump_stack+0x18f/0x20d [ 1025.945146][ T1146] nmi_cpu_backtrace.cold+0x70/0xb1 [ 1025.945194][ T1146] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1025.945209][ T1146] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 1025.945222][ T1146] watchdog+0xd7d/0x1000 [ 1025.945239][ T1146] ? reset_hung_task_detector+0x30/0x30 [ 1025.945254][ T1146] kthread+0x3b5/0x4a0 [ 1025.945266][ T1146] ? __kthread_bind_mask+0xc0/0xc0 [ 1025.945277][ T1146] ? __kthread_bind_mask+0xc0/0xc0 [ 1025.945301][ T1146] ret_from_fork+0x1f/0x30 [ 1025.945321][ T1146] Sending NMI from CPU 1 to CPUs 0: [ 1025.945973][ C0] NMI backtrace for cpu 0 [ 1025.945979][ C0] CPU: 0 PID: 31001 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 [ 1025.945986][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.945990][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 1025.946002][ C0] Code: 48 89 ef 5d e9 01 07 3f 00 5d be 03 00 00 00 e9 26 b3 23 02 66 0f 1f 44 00 00 48 8b be b0 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 <65> 48 8b 14 25 00 ff 01 00 65 8b 05 50 47 8e 7e a9 00 01 ff 00 48 [ 1025.946006][ C0] RSP: 0018:ffffc900038ef5a8 EFLAGS: 00000202 [ 1025.946013][ C0] RAX: 0000000000000002 RBX: 0000000000000001 RCX: ffffffff83c64684 [ 1025.946018][ C0] RDX: 0000000000000001 RSI: ffff888049fee0c0 RDI: 0000000000000005 [ 1025.946023][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffff888218ff165f [ 1025.946029][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880000a0000 [ 1025.946034][ C0] R13: ffff8880000a0000 R14: 0000000000000000 R15: 00000000688abb28 [ 1025.946039][ C0] FS: 00007fef1ab8c700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1025.946044][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1025.946049][ C0] CR2: 00007ff49f020000 CR3: 0000000090fc1000 CR4: 00000000001406f0 [ 1025.946054][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1025.946059][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1025.946061][ C0] Call Trace: [ 1025.946065][ C0] vga16fb_fillrect+0x9c0/0x193b [ 1025.946068][ C0] ? memcpy+0x39/0x60 [ 1025.946071][ C0] bit_clear_margins+0x2d5/0x4a0 [ 1025.946074][ C0] ? bit_bmove+0x210/0x210 [ 1025.946078][ C0] ? vga16fb_update_fix+0x4a0/0x4a0 [ 1025.946081][ C0] fbcon_clear_margins+0x1d5/0x230 [ 1025.946085][ C0] fbcon_switch+0xb6e/0x16c0 [ 1025.946088][ C0] ? fbcon_scroll+0x3600/0x3600 [ 1025.946091][ C0] ? fbcon_cursor+0x52b/0x650 [ 1025.946095][ C0] ? kmalloc_array.constprop.0+0x20/0x20 [ 1025.946098][ C0] ? is_console_locked+0x5/0x10 [ 1025.946101][ C0] ? fbcon_set_origin+0x26/0x50 [ 1025.946105][ C0] redraw_screen+0x2ae/0x770 [ 1025.946108][ C0] ? vga16fb_update_fix+0x4a0/0x4a0 [ 1025.946116][ C0] ? vc_init+0x440/0x440 [ 1025.946120][ C0] ? fbcon_set_palette+0x3a8/0x490 [ 1025.946123][ C0] fbcon_modechanged+0x575/0x710 [ 1025.946127][ C0] fbcon_update_vcs+0x3a/0x50 [ 1025.946130][ C0] fb_set_var+0xae8/0xd60 [ 1025.946133][ C0] ? fb_blank+0x190/0x190 [ 1025.946136][ C0] ? lock_release+0x8d0/0x8d0 [ 1025.946140][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1025.946143][ C0] ? lock_release+0x8d0/0x8d0 [ 1025.946146][ C0] ? do_fb_ioctl+0x2f2/0x6c0 [ 1025.946150][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1025.946154][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1025.946157][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1025.946161][ C0] do_fb_ioctl+0x33f/0x6c0 [ 1025.946164][ C0] ? fb_set_suspend+0x1a0/0x1a0 [ 1025.946168][ C0] ? tomoyo_execute_permission+0x470/0x470 [ 1025.946171][ C0] ? __might_fault+0x11f/0x1d0 [ 1025.946175][ C0] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1025.946179][ C0] ? do_vfs_ioctl+0x27d/0x1090 [ 1025.946182][ C0] ? __fget_files+0x294/0x400 [ 1025.946185][ C0] fb_ioctl+0xdd/0x130 [ 1025.946188][ C0] ? do_fb_ioctl+0x6c0/0x6c0 [ 1025.946191][ C0] ksys_ioctl+0x11a/0x180 [ 1025.946194][ C0] __x64_sys_ioctl+0x6f/0xb0 [ 1025.946198][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1025.946201][ C0] do_syscall_64+0x60/0xe0 [ 1025.946205][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1025.946208][ C0] RIP: 0033:0x45cb29 [ 1025.946211][ C0] Code: Bad RIP value. [ 1025.946215][ C0] RSP: 002b:00007fef1ab8bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1025.946223][ C0] RAX: ffffffffffffffda RBX: 00000000004e55e0 RCX: 000000000045cb29 [ 1025.946228][ C0] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 1025.946234][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1025.946239][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1025.946244][ C0] R13: 00000000000002fd R14: 00000000004c58a5 R15: 00007fef1ab8c6d4 [ 1025.964293][ T1146] Kernel panic - not syncing: hung_task: blocked tasks [ 1025.964309][ T1146] CPU: 1 PID: 1146 Comm: khungtaskd Not tainted 5.8.0-rc3-syzkaller #0 [ 1025.964317][ T1146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.964322][ T1146] Call Trace: [ 1025.964342][ T1146] dump_stack+0x18f/0x20d [ 1025.964373][ T1146] panic+0x2e3/0x75c [ 1025.964387][ T1146] ? __warn_printk+0xf3/0xf3 [ 1025.964405][ T1146] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1025.964418][ T1146] ? preempt_schedule_thunk+0x16/0x18 [ 1025.964432][ T1146] ? watchdog.cold+0x5/0x16b [ 1025.964443][ T1146] ? watchdog+0xa82/0x1000 [ 1025.964457][ T1146] watchdog.cold+0x16/0x16b [ 1025.964473][ T1146] ? reset_hung_task_detector+0x30/0x30 [ 1025.964487][ T1146] kthread+0x3b5/0x4a0 [ 1025.964498][ T1146] ? __kthread_bind_mask+0xc0/0xc0 [ 1025.964510][ T1146] ? __kthread_bind_mask+0xc0/0xc0 [ 1025.964525][ T1146] ret_from_fork+0x1f/0x30 [ 1025.966112][ T1146] Kernel Offset: disabled