[ 37.559198] audit: type=1800 audit(1568538706.303:32): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.307639] audit: type=1800 audit(1568538707.133:33): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.64' (ECDSA) to the list of known hosts. 2019/09/15 09:11:55 fuzzer started syzkaller login: [ 46.897441] kauditd_printk_skb: 2 callbacks suppressed [ 46.897455] audit: type=1400 audit(1568538715.723:36): avc: denied { map } for pid=7537 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/09/15 09:11:57 dialing manager at 10.128.0.105:41983 2019/09/15 09:11:57 syscalls: 2482 2019/09/15 09:11:57 code coverage: enabled 2019/09/15 09:11:57 comparison tracing: enabled 2019/09/15 09:11:57 extra coverage: extra coverage is not supported by the kernel 2019/09/15 09:11:57 setuid sandbox: enabled 2019/09/15 09:11:57 namespace sandbox: enabled 2019/09/15 09:11:57 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/15 09:11:57 fault injection: enabled 2019/09/15 09:11:57 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/15 09:11:57 net packet injection: enabled 2019/09/15 09:11:57 net device setup: enabled 09:14:19 executing program 0: [ 190.632063] audit: type=1400 audit(1568538859.453:37): avc: denied { map } for pid=7554 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=3993 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 190.747128] IPVS: ftp: loaded support on port[0] = 21 09:14:19 executing program 1: [ 190.877565] chnl_net:caif_netlink_parms(): no params data found [ 190.946290] IPVS: ftp: loaded support on port[0] = 21 [ 190.958675] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.970395] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.978257] device bridge_slave_0 entered promiscuous mode [ 190.998360] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.005760] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.013307] device bridge_slave_1 entered promiscuous mode 09:14:19 executing program 2: [ 191.053508] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 191.063626] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 191.135992] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 191.153246] team0: Port device team_slave_0 added [ 191.183673] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 191.191224] team0: Port device team_slave_1 added [ 191.201398] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 191.215903] chnl_net:caif_netlink_parms(): no params data found [ 191.216081] IPVS: ftp: loaded support on port[0] = 21 [ 191.249988] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 09:14:20 executing program 3: [ 191.325209] device hsr_slave_0 entered promiscuous mode [ 191.362647] device hsr_slave_1 entered promiscuous mode [ 191.421135] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 191.451809] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 191.468764] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.477145] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.484495] device bridge_slave_0 entered promiscuous mode [ 191.496410] IPVS: ftp: loaded support on port[0] = 21 [ 191.499082] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.508105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.515232] bridge0: port 1(bridge_slave_0) entered blocking state 09:14:20 executing program 4: [ 191.521597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.536502] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.546026] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.553491] device bridge_slave_1 entered promiscuous mode [ 191.601975] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 191.674170] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 191.781207] chnl_net:caif_netlink_parms(): no params data found [ 191.796542] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 191.812823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.825350] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 191.833374] team0: Port device team_slave_0 added 09:14:20 executing program 5: [ 191.885944] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 191.894827] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 191.902480] team0: Port device team_slave_1 added [ 191.911742] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.930998] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.941943] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 191.987666] chnl_net:caif_netlink_parms(): no params data found [ 191.999440] IPVS: ftp: loaded support on port[0] = 21 [ 192.002188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.012520] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.054805] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.061226] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.069968] device bridge_slave_0 entered promiscuous mode [ 192.080710] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.087205] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.094550] device bridge_slave_1 entered promiscuous mode [ 192.110966] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 192.154085] device hsr_slave_0 entered promiscuous mode [ 192.212606] device hsr_slave_1 entered promiscuous mode [ 192.286960] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 192.300543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.306564] IPVS: ftp: loaded support on port[0] = 21 [ 192.307766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.323226] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 192.329304] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.339225] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 192.347523] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 192.355536] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.363639] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.370123] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.377380] device bridge_slave_0 entered promiscuous mode [ 192.399742] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 192.420042] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 192.428905] team0: Port device team_slave_0 added [ 192.435948] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.442690] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.449605] device bridge_slave_1 entered promiscuous mode [ 192.465424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.475272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.483100] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.489450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.499378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 192.511193] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 192.518857] team0: Port device team_slave_1 added [ 192.524308] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.531645] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.550333] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 192.559225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.567383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.575035] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.581492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.596834] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 192.666024] device hsr_slave_0 entered promiscuous mode [ 192.702577] device hsr_slave_1 entered promiscuous mode [ 192.783638] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.791560] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 192.804321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.814611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 192.831599] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 192.840977] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 192.849005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.862210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 192.891327] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 192.900648] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 192.908450] team0: Port device team_slave_0 added [ 192.914513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.922656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.930333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.954713] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 192.962986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.970791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.979045] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 192.988616] team0: Port device team_slave_1 added [ 192.994607] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 193.003042] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 193.074173] device hsr_slave_0 entered promiscuous mode [ 193.132668] device hsr_slave_1 entered promiscuous mode [ 193.185145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 193.200980] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 193.208229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.216476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.225961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 193.259024] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 193.267618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.276335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.285974] chnl_net:caif_netlink_parms(): no params data found [ 193.296581] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 193.302977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.327944] chnl_net:caif_netlink_parms(): no params data found [ 193.348221] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 193.405306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.418292] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.426101] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.433489] device bridge_slave_0 entered promiscuous mode [ 193.446579] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 193.458783] audit: type=1400 audit(1568538862.283:38): avc: denied { associate } for pid=7555 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 193.491337] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.497932] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.507934] device bridge_slave_1 entered promiscuous mode [ 193.535832] 8021q: adding VLAN 0 to HW filter on device bond0 09:14:22 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) dup2(r1, r0) r2 = epoll_create(0x9) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) [ 193.583284] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.589707] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.597641] device bridge_slave_0 entered promiscuous mode [ 193.614074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.622157] bond0: Enslaving bond_slave_0 as an active interface with an up link 09:14:22 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x4000000000001b2, 0x0) [ 193.642622] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.651809] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.658934] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.671956] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.680175] device bridge_slave_1 entered promiscuous mode [ 193.689543] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 193.711963] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.730941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 09:14:22 executing program 0: syz_open_dev$dmmidi(&(0x7f0000000900)='/dev/dmmidi#\x00', 0x2, 0x0) r0 = syz_open_dev$loop(0x0, 0xe4, 0x2000) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r1, 0x0, 0x20000102000007) [ 193.738416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.759278] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.775220] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 193.788492] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 193.795970] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.813315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.821460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.829458] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready 09:14:22 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x42000, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x3, 0x7fff, 0x7}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) [ 193.839176] team0: Port device team_slave_0 added [ 193.850123] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 193.860413] team0: Port device team_slave_1 added [ 193.868766] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 193.877737] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.887268] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 193.909421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 193.925037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.933358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.947985] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 193.971972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.980076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.988338] bridge0: port 1(bridge_slave_0) entered blocking state 09:14:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket(0x22, 0x2, 0x1) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x2}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x800000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x2, 0x0, &(0x7f00000002c0)=""/11, &(0x7f0000000400)=""/160, &(0x7f00000004c0)=""/4096, 0x5000}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x2}) write$binfmt_misc(r2, &(0x7f0000000380)={'syz0', "d036aaf2d70cdac8c9316688bf2e199fc8f9ca4a44bb6046bcdc9cb3fdf42edc2b946b14498fcc4737891845c392a6cd72ef036a70dca5c696aad3cbf9121314a4c955492269f242ce72d5428b79ff2a985ba41f8c"}, 0x59) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000014c0)={0xf97cff8c, 0x8, 'SE Linux', "79a0e0f0e6b18bbebd662990deb1732189b2c1209f77c3c2fdf8b08433e9804473afd08e4cb298011d015feaf8c96ecee58ad1e17d6a3dc7e5a59a619726c6b822397e123ff6c4a122a56a7684256d2fe6bcbd31c8331189dca47296666a83adda03144383a5b9e988f571a4cebf2d0646a1da6ee17e4372bbf12d80d588ee3cc5acd6d39d19f15da062adcd158bd32f156399de925ce574b29e"}, 0xaa) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00%\x00\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000240008001c00010000000000000000000000000000000000000000000000000004000200"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0xb}, 0xa, r9}) close(r1) [ 193.994800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.003217] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 194.013798] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 194.032469] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.040840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 194.053540] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.061067] team0: Port device team_slave_0 added [ 194.095656] device hsr_slave_0 entered promiscuous mode [ 194.132704] device hsr_slave_1 entered promiscuous mode [ 194.172758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.180134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.191924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.200037] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.206433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.214378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.221337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.228523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.236351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.244062] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.251014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.258092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.266995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 194.277380] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 194.285889] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.296043] team0: Port device team_slave_1 added [ 194.303867] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 194.312684] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 194.318777] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.325422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.334130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.342021] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.348604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.355936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.366250] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 09:14:23 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x0, 0xba81b78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7, 0x6, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r0, 0xda80c44e40047d40) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000100)={0x1, 0x0, {0x3ff, 0x4, 0x7, 0x13c1}}) socket$inet6(0xa, 0x3, 0x6) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000180)={0x1, 0x100, {0x54, 0x100000001, 0x2, {0x1, 0x7}, {0xc8, 0x101}, @const={0x7ff, {0xe41, 0xfffffffffffffffd, 0x4, 0x8}}}, {0x7, 0xffff, 0x1, {0x0, 0xfffffffffffffffb}, {0x1, 0x80}, @period={0x59, 0x2, 0x800, 0x7fff, 0x7ff, {0x6, 0x101, 0xd490000000, 0x9}, 0x5, &(0x7f0000000140)=[0x5, 0x8ee, 0xb5f, 0x9, 0x9]}}}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) r2 = syz_open_dev$cec(0x0, 0x1, 0x2) dup3(r1, r2, 0x0) [ 194.376424] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 194.384372] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 194.404434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 194.419845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 194.427473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.441303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.454261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.462303] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.468674] bridge0: port 1(bridge_slave_0) entered forwarding state 09:14:23 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000680)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = gettid() shutdown(r1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r2, 0x4001000000000014) [ 194.476074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.490994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.503717] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 194.514452] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 194.533955] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 194.542020] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 194.553829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.561691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.570275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.578108] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.584612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.593262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 194.602184] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 194.668484] device hsr_slave_0 entered promiscuous mode [ 194.713036] device hsr_slave_1 entered promiscuous mode [ 194.754359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 194.762658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.770438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.778779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.787084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.794903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.802701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.810261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.817452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.827984] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 194.839665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 194.848002] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 194.856799] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 194.864879] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 194.873097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.880901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.888967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.896876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.904436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.913703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 194.927428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 194.936352] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 194.946326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.954287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.961782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.969662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.977667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.988376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 195.001934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 195.009870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.018263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.026899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.035264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.043868] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.060519] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 195.078555] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 195.087133] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.099567] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 195.106478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.120858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.130077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.140779] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 195.153608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.161262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.169288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.179469] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 195.192168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 195.205442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.218794] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 195.225168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.236698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.244131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.251789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.271062] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 195.296963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.338947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.369495] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 09:14:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000680)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = gettid() shutdown(r1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r2, 0x4001000000000014) [ 195.385707] 8021q: adding VLAN 0 to HW filter on device bond0 09:14:24 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="ad56b6c5820fae9d6dcd915d564c90c200ce218805a45b105a5c52497651ad92687a1860f034ee40815bc28b388e7ab266b59ae720522421974240c9b6e49421522e7e6bef78f8582735ffb450ba56910a186a53f2d2d8285781ff7b90993de14f2b998659a5547178c7382c2d44870918797b68034ba066d69c3fd99344d7f2b5a9eb9805a82b9dd2d11211673c0a7a568e866feafc91f98703993b7c3d98719a680050c9bd513b72c5998e8ff2b0e98feff037c1494e5b8831da930289ff357ed7357eea2b67d861690ebb67167836b23e53975104f2c9b0b65975f49214b150887ed9d05d240ef8386f25cc188c123c66", 0xf2) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000001c0)="ec", 0x1}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="c22a79db0dd306c1371b96c40986afb6f6ca6879174c631f31ddc247d90a0300eaeb1accaaaeec6cf2867df821cd465d210423782750778b55f4f559426f389cc9de74120498dd549aeea45669a44200e3d92c4010900af84f6265317cffaf7bbeecdfa10d5d1608d9ce6da54db3e8329ae2d853e56e4e2f37d24b637281077d5821b0b8e5d0359dfdc28e2161c7de36dceb01916f0b950e356240", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r3}, 0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={r3, 0xffffffffffff5ddc, 0xfffffffffffffff7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r4, 0x4}, 0x8) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)) r5 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000000)={0x2}) fstat(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r7) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) write$P9_RXATTRCREATE(r5, &(0x7f0000000000)={0x7, 0x21, 0x2}, 0x7) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x2) r8 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r8, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f0000000140)) [ 195.432006] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 195.445819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.454451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.463678] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 195.493110] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 195.511936] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 195.520597] 8021q: adding VLAN 0 to HW filter on device team0 09:14:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) r2 = getpgrp(0x0) r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@empty, @in6=@rand_addr="49bfc7e5eb1ac788430b4c4349443b03", 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x20, 0x29, 0x0, r4}, {0x3, 0x40000000002, 0x0, 0x0, 0x7, 0x0, 0x100}, {0x9, 0x4, 0x2}, 0x7, 0x6e6bbc, 0x1, 0x1, 0x0, 0x2}, {{@in=@empty}, 0x0, @in=@empty, 0x3501, 0x3, 0x0, 0xffe00, 0x0, 0x2}}, 0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r5) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000280)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in=@dev={0xac, 0x14, 0x14, 0x1b}, @in6=@empty, 0x0, 0x0, 0x4e20, 0xfffffffffffffffe, 0xa, 0x0, 0x20, 0x29, 0x0, r7}, {0x3, 0x40000000002, 0x0, 0x0, 0x7, 0x0, 0x100, 0x8}, {0x9, 0x4, 0x5}, 0x7, 0x6e6bbc, 0x1, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0xc388, 0xfffffffffffffffe}, 0x0, @in=@empty, 0x3507, 0x3, 0x0, 0xffe00, 0x0, 0x2}}, 0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r8) init_module(&(0x7f00000005c0)='\x00', 0x1, &(0x7f0000000600)='\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r9) getgroups(0x3, &(0x7f00000002c0)=[0xee00, r8, r9]) r11 = getpgid(0xffffffffffffffff) r12 = open(&(0x7f00000003c0)='./file0\x00', 0x401000, 0x108) getpeername$packet(r12, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) syz_open_dev$rtc(&(0x7f0000000580)='/dev/rtc#\x00', 0x401, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@empty, @in6=@rand_addr="49bfc7e5eb1ac788430b4c4349443b03", 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x20, 0x29, 0x0, r13}, {0x3, 0x40000000002, 0x0, 0x0, 0x7, 0x0, 0x100}, {0x9, 0x4, 0x2}, 0x7, 0x6e6bbc, 0x1, 0x1, 0x0, 0x2}, {{@in=@empty}, 0x0, @in=@empty, 0x3501, 0x3, 0x0, 0xffe00, 0x0, 0x2}}, 0xe8) sendmsg$unix(r1, &(0x7f0000000380)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000180)="02a006a9ad4720813fcd414ce4f39faae38d38f71b7adca6204d7339144c2b0f708719be87db58877e73d43393c69c2c30daaa998f5e2b7210894240b55f0d755b523c0859043f905644f2833ab4fec9963a43c19b4ec6b8c69fe8f176eb73c84b6e3d791195888132cc9ce89f8b2b091e2efa9e1ef9dc6ab755780d14a56c0e12699b968315ac776aff565ec8adcf416db45f0a75ba18bff1c3c24d413cb9b120e1df478f311dbfcf1fb1384d9455e0e856118ee61f1fcc72bde9799cb211ac696396d1ec3e3b3bde0e2e7f06a925b97e6f9e1ef98c6224dd274f9d0121f437e681b648bec261dda7ed7248875d1e91ada116a793ceb1b83e9c53d14296", 0xfe}], 0x1, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r2, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r13, 0xffffffffffffffff}}}], 0x60, 0x20000001}, 0x20080) ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000000000)=0x7b) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', 0x0, 0x260b, 0x0) [ 195.542213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.550820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.581474] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 195.598781] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.630293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 195.669008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.677513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.685358] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.691741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.698988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.708071] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 195.716957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 195.735794] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 195.747930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.769256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.782719] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.789281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.799273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.809224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.817067] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.823447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.830585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.840652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 195.850802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 195.858278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.865477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.873607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.881239] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.887628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.895220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.911336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 195.921776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.932210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 195.941652] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 195.949409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.957493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.966096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.974409] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.987039] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.996279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 196.005445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.013307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.020852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.028750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.037083] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.047644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 196.059072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.067339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.076911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 196.086864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 196.096628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 196.104325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.111931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.120134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.127922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.136810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.145702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.159984] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 196.166269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.176138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 196.184886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.192842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.207308] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 196.213667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.225058] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 196.240222] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 196.254524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.269569] 8021q: adding VLAN 0 to HW filter on device batadv0 09:14:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x80003, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x71, 0x101000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x8000, 0x101, 0x7}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f000000180007000c000300000000000000000008000100ff0f0000"], 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x88, r4, 0x3eb1ccd24e687349, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x80010) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000b0004000300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) accept4$x25(r2, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000340)=0x12, 0x0) 09:14:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55515bdc50b38a3ebf3defb30f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYPTR64, @ANYBLOB="fc4faf10fcb7e8a9e339d1f9c188c4d20e08005b2aaebee769cdeb8b6c2803e3168e8c853c202696c0006788beaa02e8fad14999d112ce36f8eb68d2ea9799fd64d69e307e338c4bdce6a257dde3867a84b041f5097b70cea9a3860c8a0459d6fbc3caf837e1e0a666ddeb5f978ad2a33953e7f20342f56e8f17317a164dbc8f3a52a4751cf8f24012776bc7277056d5fe62c136620c8f425869ea3b8cacf74651734d8032f406c719a46b58cba1a4492434b90ae5acd162d891ec849a7f5e4ccf080a9a6ad80f48fba45b141141a48a5496bb2c80699cf11d"], 0x40) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000001d80)=""/4096, 0x20011b6f}], 0x1) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x7, 0x20000) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000100)={0xcd5c69c, 0x2, "fc2e"}) gettid() 09:14:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0}, &(0x7f0000000900)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000940)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000a40)=0xe8) syz_mount_image$reiserfs(&(0x7f0000000100)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xa, &(0x7f00000007c0)=[{&(0x7f0000000180)="77db4b03f532eae575cb3aa93193034ee223cc21e1ff89a30cfa169d52dff882afecc99ec02a6b2da9b288d7972f750671c5aad1ccd75a3e92626b76f7276caed1051e", 0x43, 0xe8}, {&(0x7f0000000200)="e8f0fda30832b892e3aea30edee856e6a5b6c821280a9fed0570", 0x1a, 0x10001}, {&(0x7f0000000240)="99d3abe273f1302836c1e222318f4be2bf33a3f94eeafe9f54e51defafcc818f4333d2959ed5dd254098f4f63edb976890f6387bc7350b9df72f096d68b2f4f71c67794098df6995fd79285f64676d1a966b768e621a031a1e5b4643fa7f9a4da5680665bcb73c2611fc925e71a004996193f6a67562a1d2033f911a3f58a28bf2beb15062f30eefd51e1d9225ff2729d90a84178920f745ac6ef18da1fb1e5dd110f2c6fd58f5fa67ffcede2a9f1c67b61947d6425238f1b38b458445a9c9386d10b86148b44ee75fbc436fb23018a24749af3563658d", 0xd7, 0x1000}, {&(0x7f0000000340), 0x0, 0x1}, {&(0x7f0000000380)="cb79db07b8be0b9df48a70778fd8c9ea74d2f0c0f089f56b2c92482fb1a46831cfe628bf5d80d648a9ebd34da33da1cbb7222d2ef0e717ce7de7b68ce5299f8457c35d912248198111c9eab6aa09e34f7d8d3013762e74941b4fc3a949a7b39b8cfb583dd29ab4b1fbcb9cf02e47415d888033d70d713270d1e6366ff8fa8d6c62124abbebf30744e1ec852a693a4402b4cdc1d7c5b5c3f63beeecc2ffa417358e73925768431e009ae2cd23dfe86a61b30314c1666ae88647ae9a67c3a8812103a90cd448e4dc8014b3bc4b9b211572", 0xd0, 0x7}, {&(0x7f0000000480)="cac54ec607d7618643f18c285ba4aa6be6b6fddeccb35f4325d2878adfe26902d2feafcb0529e93cc58801f27bd5bfdffc7a3247214f041025b6404516b0ea520eebd7ae3d9870d8538e81cd065d4268eeeddb7f11cd71ced45f7998b197f5af4c4e1ab07d1f7015fc094a8599a4e70e847c4eecd58a829166e7d3a44eac0b38172419fca3488db7865d5c7687fa1be53cb6445a63974e17e36d16ba077e7ff68b4acf767e631f786a", 0xa9, 0x2}, {&(0x7f0000000540)="142f04892fbee2f82cc148303a6bb874978814be1bc93e1869434cc1b715a14c2b863227688934b0b42cbd7dffc01b38151d025b0dbcbe51ff5e2c2c7326cdd8021db22528c9ddab9c405eef4fcec87e2a257cb92107525e3b838f3a940692b4422b59446c7c39035947311e439bfd4cf7d874ae2f2ea66d33fbf0a41c04e1902cac0833e38f49e18172f7f27f1dd1de3dcd8a250e1fa8f90b8db50f23404f07bac5051f857feba9c9061ac6514c060ba05bfe94e05a82bfb5341bbd08", 0xbd, 0x8}, {&(0x7f0000000600)="e6e184fe9792888f92a37f1ecaf0519afcb3c5535ce0c2db5c0db7a82da195918c7b11772c584d1c6610f08711cffe740b07ff80e6c995d5188854c79f771d1d1abc05ea2f8dc078533d206a3afce6906e595e6750f01fd953828439866172cb6824ac8d96f6736038e68a35687b4adc700f3dd03cb085fb509974cc34e1b9f28a55fe1bda80920339e4583eaae853221d23574a0eae8a1adb42d60d5f16aba7235c4c54130844670049c989ef31181b4311936e91cdd9888786b9fde7daa5988d17990720370fb20b", 0xc9, 0x1}, {&(0x7f0000000700)="f68b106be42a7ecc3b63fa51f2f089d6c030341a8db3c34a01d3ea1acd088b0cf6e6062f9a552e756bfcb8edc19d3acb473f9da8913dbefb9f71669a0c015f9df3d01d4a879884046452827c99fd3873e900c4eb099d25d88b475fc5940450d22afd536406ad26547aa879de75ed4e10", 0x70, 0xeb2}, {&(0x7f0000000780)="38a016b9279b3c8bd101f47912", 0xd, 0x8b}], 0x800000, &(0x7f0000000a80)={[{@data_journal='data=journal'}, {@jdev={'jdev', 0x3d, './file1'}}, {@nouser_xattr='nouser_xattr'}, {@tails_on='tails=on'}, {@acl='acl'}, {@noquota='noquota'}, {@tails_small='tails=small'}], [{@seclabel='seclabel'}, {@uid_lt={'uid<', r1}}, {@smackfshat={'smackfshat', 0x3d, ']2$H'}}, {@uid_gt={'uid>', r2}}]}) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) unlinkat(r3, &(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) 09:14:25 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xb) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="23213f2c2ae6696c65300af401710633d0e80ea09fcf5006a0ea9904499be6c6527646bcb9cc212d0625db031d2735b422fab74a90a3ce34d725ff74d4f575405097ddb230a4218081c78bbe5f0112fac23bf5001c7fb765a81d3840a6d0b3b8f5838ea8e0b6f1968990096832488f1d697e0edaa877155d964c254fddba2abba9fd000f49f39fc9ea9fe0ededd6af2687f121eade4cd6f4808f"], 0x10094) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x2}) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) close(r0) 09:14:25 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x4000000000004, 0x0) 09:14:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x3, 0x0) kcmp(r1, r3, 0x2, r4, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x8004, 0x7fff) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x0) 09:14:25 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffa}) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x2, 0x1000, 0x20, 0x7, 0x0, 0x7, 0x109418, 0x8, 0x8, 0x7fff, 0x80000002, 0x5, 0x3, 0x695d73a6, 0x0, 0x4, 0x3, 0x8, 0x8, 0x5, 0x5, 0x10000, 0x1f, 0x800, 0x7ff, 0x1000, 0xffffffff, 0x4, 0xde7, 0x9, 0xb865, 0x800, 0x0, 0x0, 0x2, 0xfffffffffffff000, 0x0, 0x3ff, 0x0, @perf_config_ext={0x1, 0x1}, 0x22000, 0x2, 0x61, 0x6, 0xffffffff831b4a13, 0x8, 0xec4}, r1, 0x10, r2, 0x12) clone(0xffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000800)='])+\xe4\x00\x19I0z\xf9\xdc~\xb0\xba\r\x9f\xf1q\xe5\x19\xa3\xf4R\xf6yae+\xa1\xbc\x1dqP\xcd|\xbf(\xe0L\x87\xbf\xc26\xaa\xf2Hb\xa7\xae\xd7\xb9\xfb\xf1+\xea\xd6\xfa\xf9\xc4}\xb6\x14{\x91\x86B\xbc\x91\x9d:\xedx\x1fIK B\xd8@\xe7\xa9\xc8\xdd)\x91.\x83\xbfo\xa0\a\xb5&\xfd\xb5W\x8f\xfeN\xeaH\xf8\xc3%<\x7f\xdc\xa9\xa6Uua\xaf\xc6L\xbd\xbfz@z\x84`\x8e\xa4\x1b\x82\xb0\x99Oe\xde\v\xd3\xadg\x96\xf0g\v\x8f_\x94\xda\xbd\xf9\x80\xb4\xd0C\xdd<\x96\xea\x98\x7f\xb3', 0x0) [ 196.437093] audit: type=1400 audit(1568538865.263:39): avc: denied { create } for pid=7638 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 196.450272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 09:14:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x1b5, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002544caacd7b967c66069cd581bcabc94ec4e9ede803112072fba51dd19702479e23ba34db10cdcec3fc271203a0000000000000000000000000000000000000000000000000000231169e7e7a39a0070da23d3399ce558093f129ffb3326618d2a036e8efec7e4962169324dadef3f3f19d20c2114e0522c443a7e10be6ba19777d1b39f612c99907445913c2621d909958dd777b20142b0469d91abc839fb37", @ANYRES32=r10, @ANYBLOB="00000000ffff000100000000240008001c00010000000000000000000000000000000000000000000000000004000200"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, r10}, [{0x0, 0xb, 0x9}, {0x0, 0xb, 0x8}, {0x0, 0xb, 0x1000000}, {0x0, 0xb, 0x1}, {0x0, 0xb, 0x7fff}]}, 0xfe26}}, 0x40) 09:14:25 executing program 3: timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f000006b000)={{r1, r2+10000000}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) 09:14:25 executing program 5: mkdir(0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) accept$alg(r2, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x308002, 0x4) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000140)=[0x4, 0x2], 0x2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x10001, 0x4) [ 196.554987] audit: type=1400 audit(1568538865.263:40): avc: denied { write } for pid=7638 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 196.582275] hrtimer: interrupt took 45304 ns 09:14:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0x0) r2 = gettid() r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r4 = accept(r3, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000000)=0x314) getpeername$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) rt_tgsigqueueinfo(r1, r2, 0x0, 0x0) r5 = getpgid(r2) rt_sigqueueinfo(r5, 0x5, &(0x7f0000000080)={0x1c, 0x80000001, 0x6}) r6 = socket$inet6(0xa, 0x800, 0x5) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000280)={0x6, 0x20000000000000, 0x35, 0x100}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.stat\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f0000000240)=0x313, 0x12) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) 09:14:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={0x0, 0x0, &(0x7f00000daff0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c01000010000302000000000000000000000000000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014006d6435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}}, 0x0) [ 196.653878] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 196.679871] audit: type=1400 audit(1568538865.263:41): avc: denied { read } for pid=7638 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 09:14:25 executing program 0: syz_emit_ethernet(0x83, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaa9aaaaaaaaaaaa86dd60d8652b004d0600fe8000000000000000000d00000000aafe8000000000000000000000000000aa000000000401907800040080c03cd77728c582176258c43245aba82bb81d11442323d30feef6570c05d20bca6d876c4e1c3bb01399bc5a79da4370086c44841d435a3176220f2ef175a3b8d88b339c19e7e5cb7e4906d4e1ea8a2fcaec769a22437b52e25d249ae86443a2fec5f6fa27cb4eac17c52f0230a161"], 0x0) [ 196.717789] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 196.818546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17445 sclass=netlink_route_socket pig=7670 comm=syz-executor.1 [ 196.847351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:14:25 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000001340)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r2, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000080)={0x8, 0x3, 0x7f, 'queue1\x00', 0x1ff}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x0, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000240)="0f20c40f01ca67653e650f01ca650f01cb3ed063d4b9830800000f320f01c466baf80cb882b2828aef66bafc0c66b80f0066efb96f0a0000b800000000ba008000000f30f081a508000000e8000000", 0x4f}], 0x1, 0x828c8c34db490ba3, &(0x7f00000002c0)=[@cr4, @cstype3={0x5, 0xc}], 0x2) r6 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000200)=0x4) ioctl$BLKPG(r0, 0x1269, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r8 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r8) 09:14:25 executing program 0: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x8000, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc040565f, &(0x7f0000000800)={0x2, @pix={0x0, 0x0, 0x0, 0x300}}) [ 196.887000] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 09:14:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") clock_gettime(0xb, &(0x7f0000000000)) open(&(0x7f0000000040)='./file0\x00', 0x10002, 0xa) 09:14:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x220101, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="f255a86d472f9765d7532021179f1ba771b8adf55c772051", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r2, 0x0, 0x0) 09:14:25 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x1ff}}], [{@subj_type={'subj_type'}}, {@smackfshat={'smackfshat', 0x3d, 'devtmpfs\x00'}}, {@obj_user={'obj_user', 0x3d, 'devtmpfs\x00'}}]}) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, 0xffffffffffffffff, 0x200000000000) [ 196.939919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17445 sclass=netlink_route_socket pig=7670 comm=syz-executor.1 09:14:25 executing program 0: ioperm(0x5, 0x6b4, 0x4cc1a1e5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x200000000000, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_MULTICAST_ROUTER={0x8, 0x19, 0x1}]}}}]}, 0x44}}, 0x0) 09:14:25 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x30000084, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000006a0a00fe000000008500000012000000b70000000000000095000000000000004e62"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x70) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8e054804fa8fd5d4, 0x0) connect$rds(r1, &(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="000000000000ffffffff00001000", 0x0, 0xdc}, 0x21) 09:14:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001000000040400a6ec189cd6d30001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl(r0, 0x101, &(0x7f0000000280)="11b194838087492d7e308734f90f9f7e7d6f2e4013f6f3569f3259be4b5c92a3d453b729c831fc688d2569f19bb72dd5015708ba21462d99971da90887001aa495cf760ac16287baa128192ed3a576fefb64c427735ce449950160c175c9bbff0abb7a90a6e122ec240f72d1d6a30190310e4599a455f05b076494ba2e5f83867d") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd01000005a4004000ffa377fbac14140ce9", 0x0, 0x100}, 0x28) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000040)={0x100000, 0x10000, 0x5, 0xfffffffffffffa00, 0x8}) 09:14:25 executing program 3: epoll_create(0x5f) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0104307, &(0x7f0000000400)=0xfffffffffffffe01) 09:14:26 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='smaps\x00') r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/cachefiles\x00', 0x402, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000002800)=0xffffffffffffffff, 0x4) exit(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') [ 197.191227] netlink: 'syz-executor.0': attribute type 25 has an invalid length. 09:14:26 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$TCXONC(r1, 0x540a, 0x81) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x4) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000140)={{0x3, @addr=0x8}, 0x8, 0x8, 0x960}) preadv(r0, &(0x7f00000017c0), 0x375, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x40, 0x4) 09:14:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001000000040400a6ec189cd6d30001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl(r0, 0x101, &(0x7f0000000280)="11b194838087492d7e308734f90f9f7e7d6f2e4013f6f3569f3259be4b5c92a3d453b729c831fc688d2569f19bb72dd5015708ba21462d99971da90887001aa495cf760ac16287baa128192ed3a576fefb64c427735ce449950160c175c9bbff0abb7a90a6e122ec240f72d1d6a30190310e4599a455f05b076494ba2e5f83867d") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd01000005a4004000ffa377fbac14140ce9", 0x0, 0x100}, 0x28) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000040)={0x100000, 0x10000, 0x5, 0xfffffffffffffa00, 0x8}) 09:14:26 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe11a, 0x80000000}, 0x80, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400000000000159, 0x0) 09:14:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'nr0\x01\x00', 0x1002}) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='Y\xd0rH\xd2\x9e*\xf8\x19\x1d\xe5otH0=\xb10x0, 0x2e, "2abb8d4dbaf334039670516674cd87137a25a3d60a29a9015f82db6c7ebaf74d44dac3c6c8e011524e7a4a65ed4f"}, &(0x7f00000002c0)=0x36) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000300)={r9, 0x100}, &(0x7f0000000380)=0x8) [ 197.277260] netlink: 'syz-executor.0': attribute type 25 has an invalid length. 09:14:26 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x2) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[], 0xffffffffffffffd0}, 0x1, 0x0, 0x0, 0x4004084}, 0x0) [ 197.401935] audit: type=1400 audit(1568538866.223:42): avc: denied { map_create } for pid=7748 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 09:14:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="1b7ae606ccbca6c6f29b3687bcbe97813d90ca5bce28b8351e774e920b2cf626eefcd09aadaefbddd8af9aef2a3dd6e6fafdc9a350e6c7c836515563649b598c5094dc4a714b98446df31066649b0a54fdee4308b0ab89048b9cfa8a8b742c2e60009bee818f7a3ce5732bb2aafbaef1bc9751149ea5710bdef31269475d6a50f9179965c254cea3dcc2e02a776825d596d64d3864", 0x95, 0xfffffffffffffffa) r4 = add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="fca6f481d11ab2b5193769dca05d363bc5aac8b92476ec62af3ffd27f00187223aae28d9c98985ce4ebab90936cfd319fa906d02be30b745f385a78ed6b897ab4ecc4cb9dc9cfb876b4934306fe41da6f00be206bd141d66cde9d09c8e07f166e642aa96b5185e2f1b1bc393359bec7ae532f44c6726", 0x76, 0xfffffffffffffffd) r5 = request_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='/dev/radio#\x00', 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r3, r4, r5}, &(0x7f0000000400)=""/134, 0x86, &(0x7f0000000580)={&(0x7f00000004c0)={'sha256-arm64-neon\x00'}, &(0x7f0000000500)="56cd9a91325183accb0020beba9c615f32da273714d96a3d6b3a9625fe1bdd0a7d2027380ca430e379d65bca3df4b5c2de36b871056d5b8b264be7adb82a24bfa15276c46cdade240c12eb0147", 0x4d}) getsockopt$sock_cred(r2, 0x1, 0xc, &(0x7f0000caaffb), &(0x7f0000000080)=0xffffffffffffffc6) r6 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$PIO_FONTRESET(r6, 0x4b6d, 0x0) [ 197.513176] audit: type=1400 audit(1568538866.323:43): avc: denied { create } for pid=7760 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 09:14:26 executing program 0: r0 = socket$inet6(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x5, 0x8, 0x1, r0}) ioctl(r1, 0x6, &(0x7f0000000040)="11dca50d5e0bcfe4cf5bfe") sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="5500000018007f5300fe01b2a4a280930a58000000a8430891ed000039000100fc000000000000001900a30700000000000000dc1338d54400009b841338caaee86ef75afbe30109a3de44656b0000000000000000", 0x55}], 0x1}, 0x0) 09:14:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in, 0x0, 0x0, 0x0, 0x3, 0x34}, 0x98) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-monitor\x00', 0x105200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x40, r5, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, '\nblcr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x40}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, r5, 0x808, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffc}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffffd}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r5, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x98}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100000000}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 09:14:26 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000040)=""/41) [ 197.633993] IPv6: Can't replace route, no match found 09:14:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x200001f1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x2f, 0x4, 0x0, {0x1, 0x7fff, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001e2, 0x0) [ 197.655428] IPv6: Can't replace route, no match found 09:14:26 executing program 0: socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) io_setup(0x7ff, &(0x7f0000000140)=0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000000)={0x80000001, 0xff}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000980)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="1c1b8b0f46990541d1f64056bf3fb18ced5027fb6bba168bbd43b231d286ee300be1a20f25a02a44741f558d772396c7d0eb73972ea00b48e2a7de23748cc116c6d3e4bd220b9b1a", 0x48}]) exit(0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) [ 197.764891] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 09:14:27 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$TCXONC(r1, 0x540a, 0x81) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x4) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000140)={{0x3, @addr=0x8}, 0x8, 0x8, 0x960}) preadv(r0, &(0x7f00000017c0), 0x375, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x40, 0x4) 09:14:27 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x2, r1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x101000) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000240)={0x0, @frame_sync}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000000)={0x13}) 09:14:27 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$TCXONC(r1, 0x540a, 0x81) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x4) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000140)={{0x3, @addr=0x8}, 0x8, 0x8, 0x960}) preadv(r0, &(0x7f00000017c0), 0x375, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x40, 0x4) 09:14:27 executing program 1: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0xfcfc65803932b1f2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc04c6100, &(0x7f0000000040)) 09:14:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x1, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000180)=0x10) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) io_cancel(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x80, r3, &(0x7f00000001c0)="d1ad1ba36b58c3d2644d8c9d590b0515d175ad0a90537b605c720dfd0cf89e7231b5ca202be440e76103b3ed43e61bfa4b71818a8206d756bae7dbe236e3093512f88570ea9ac84d2be81fae2768fc88f0b7d39c417e6ee80e87ec949666cb27fc5b7ff69379f8f1d4688efa3ac86e949f9a461b9f6dd11839e6d86a5e77cd52303d5c57fad26c1ed24f53e807742545fecd99f51d7b55dbcd4ccf0bcf5bac9cb4fc209f494904fd4f4c89685c33e32e61ab6534bd9eea27fcf7912c25ca741c138b0535cd6be2a7296dbf", 0xcb, 0x200, 0x0, 0x48aec32cb3c1778a}, &(0x7f0000000080)) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000340)={0x0, 0x5, 0x1000, &(0x7f0000000300)=0x4}) 09:14:27 executing program 3: perf_event_open(&(0x7f00000008c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x538d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3997, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x6c, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x709, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) gettid() ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x7, 0x778b3a0f, 0x3, @discrete={0x6, 0x3}}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x37, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x26b, &(0x7f0000000f80), 0x1fa}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0xffb7) socket$l2tp(0x18, 0x1, 0x1) 09:14:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$usbmon(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = gettid() r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0152be6a0c820ff6b576ed44c5ff2705e4f58c46a93968fdcafe5a1ac93ae105620cc5209077fc35f43ea44dacf10a24d419bcbedea909d15dc42c46d5e2b51bb4b9524f4383c1c9b6bc840ccf2760825672ac3ecf76767cd394ec21c2413c6e09733d89e84fdeafc2a4267663f940dc5408636a7ef27f5a179bbb866e60fb9b07d2fc9ccd7dcccf6e39de6216a4d8f32377705a0f6a4ab759fc60e517a83df4a6070bacf5bb36100711883b9afeeead8f9ce7"], 0xb3) prctl$PR_SET_PTRACER(0x59616d61, r2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0xfffffffffffffff9, 0x2, 0xce, 0x20, 0x3f, 0x6, 0xb}) ptrace$setopts(0x4206, r2, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) [ 198.645923] audit: type=1400 audit(1568538867.473:44): avc: denied { map } for pid=7815 comm="syz-executor.1" path="socket:[28933]" dev="sockfs" ino=28933 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tcp_socket permissive=1 09:14:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) getgroups(0x0, 0x0) r5 = getpid() ioprio_set$pid(0x2, r5, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000000)=0x1) r6 = getpid() ioprio_set$pid(0x0, r6, 0x0) r7 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0044dff, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) getpgid(r5) r8 = getpid() ioprio_set$pid(0x0, r8, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r3, 0xffffffffffffffff, 0x0, 0x8d, &(0x7f00000002c0)='\xa8?d>\x82\x8e |\x18\x1bp\xcf\xbe9\xe0\xa8\xd7uq\f\x180\x86\xe2hJ\xee\x92\x9a\x1eT\xe8\xd6*z\xa7\xa5\xb4\xa9=T\xe2\xb1{\x82}\x92D\xb3\x1c\xa3$\xbc\xe5\xcc\xb1{\x14\x81\x1a\xb1$\xfa\xc5{;\xf2\x1b\xe5\xf15\xcd\x90\xd4;U\xfd\xcd\x89\x7f\xa9~r\x1fU%\xd8\x19\xd8\x17\xcd\x85\xd0\"\xd5^\xda\x8b\x91\xa6=f\\\xa0\xe05p\x9e\xc3\x1a\x86\xbb\xa1\x1b%h\x8f\xda{\x16P\xa5u\xe0D\xb4\b\x9e\xd2f_DH\xbbCm\xde=\xc7K\x96', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000380)='/dev/mixer\x00', r9}, 0xffffffffffffffe2) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x5, r0, r1, r4, 0x0, 0x10, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, r10}) 09:14:27 executing program 0: socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) io_setup(0x7ff, &(0x7f0000000140)=0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000000)={0x80000001, 0xff}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000980)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="1c1b8b0f46990541d1f64056bf3fb18ced5027fb6bba168bbd43b231d286ee300be1a20f25a02a44741f558d772396c7d0eb73972ea00b48e2a7de23748cc116c6d3e4bd220b9b1a", 0x48}]) exit(0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) 09:14:27 executing program 2: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) socket$rds(0x15, 0x5, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000080)={0x81, 0x40000000000000, 0x0, 0x0, 0x0, 0x200000000000000}) 09:14:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={0x74}, &(0x7f00000000c0), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}) 09:14:28 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0x17c, 0x0}, 0x0) write(r0, &(0x7f0000000040)="0f42", 0x51) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000180)=ANY=[@ANYBLOB="79d4a6d1301d6c134cea02b67e1af88d422ddd62676ea32cde0d54f7c969e9853a7f2eb9708ea411c6c50dcc182d80b6f8bae4a72de8828bd0cb8b37e05c34277334ab8b49c1f6cdf05d624d40440f16eb920f8bdce5"]) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0)='TIPCv2\x00') ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x3, 0x0, 0x3, 0x6, 0x0, &(0x7f0000000780)=""/4096, 0x6, 0x0, 0xffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$TCSBRKP(r3, 0x5425, 0xfffffffffffffff9) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 09:14:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) getgroups(0x0, 0x0) r5 = getpid() ioprio_set$pid(0x2, r5, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000000)=0x1) r6 = getpid() ioprio_set$pid(0x0, r6, 0x0) r7 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0044dff, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) getpgid(r5) r8 = getpid() ioprio_set$pid(0x0, r8, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r3, 0xffffffffffffffff, 0x0, 0x8d, &(0x7f00000002c0)='\xa8?d>\x82\x8e |\x18\x1bp\xcf\xbe9\xe0\xa8\xd7uq\f\x180\x86\xe2hJ\xee\x92\x9a\x1eT\xe8\xd6*z\xa7\xa5\xb4\xa9=T\xe2\xb1{\x82}\x92D\xb3\x1c\xa3$\xbc\xe5\xcc\xb1{\x14\x81\x1a\xb1$\xfa\xc5{;\xf2\x1b\xe5\xf15\xcd\x90\xd4;U\xfd\xcd\x89\x7f\xa9~r\x1fU%\xd8\x19\xd8\x17\xcd\x85\xd0\"\xd5^\xda\x8b\x91\xa6=f\\\xa0\xe05p\x9e\xc3\x1a\x86\xbb\xa1\x1b%h\x8f\xda{\x16P\xa5u\xe0D\xb4\b\x9e\xd2f_DH\xbbCm\xde=\xc7K\x96', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000380)='/dev/mixer\x00', r9}, 0xffffffffffffffe2) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x5, r0, r1, r4, 0x0, 0x10, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, r10}) 09:14:28 executing program 5: getcwd(0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) getrlimit(0xf, &(0x7f0000000180)) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000140)=0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0xc4800) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f01caf30f1bf00f20d835080000000f22d865f30f531af30f1ec80fc7770066ba2100edf30f09eae9ee00006600670f01cf", 0x32}], 0x1, 0x40, &(0x7f0000000100)=[@dstype3={0x7, 0x1}], 0x1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f00000001c0)=""/122, &(0x7f0000000240)=0x7a) 09:14:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x8000, 0x105082) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x91ae, 0xfffffffffffffffe, 0x65f40}) accept(r1, &(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000380)=0x80) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000005c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00}) getsockopt$inet_dccp_buf(r3, 0x21, 0x4164e00130a607f8, &(0x7f00000000c0)=""/184, &(0x7f0000000200)=0xb8) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000300)={0x4, 0x4, 0x8, 0x1, 0x3}) bind$alg(r4, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200000) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000000)={0x2, 0x0, 0x1}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000000)={0x1e2, 0x1, 0x0, 0x2, 0x0, 0x3, 0x1}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000440)={0x0, 0xff}, &(0x7f0000000500)=0x8) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x22b, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000040)=0x80000001, 0x8) io_setup(0x40, &(0x7f0000000480)=0x0) io_submit(r7, 0x0, 0x0) r8 = syz_open_dev$mice(0x0, 0x0, 0x8100) syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x4, 0x40c0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40, 0x0) io_cancel(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f00000003c0)="830981000000000000", 0x9, 0x0, 0x0, 0x1, r9}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x6000000000000000}, 0x28) [ 199.211898] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 199.352667] audit: type=1400 audit(1568538868.173:45): avc: denied { write } for pid=7846 comm="syz-executor.4" name="net" dev="proc" ino=28996 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 09:14:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = dup(r0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x2}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000080)=0xe6e4f07d2984686b) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {}, 0x9}, 0x5) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$RTC_VL_CLR(r3, 0x7014) 09:14:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) getgroups(0x0, 0x0) r5 = getpid() ioprio_set$pid(0x2, r5, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000000)=0x1) r6 = getpid() ioprio_set$pid(0x0, r6, 0x0) r7 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0044dff, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) getpgid(r5) r8 = getpid() ioprio_set$pid(0x0, r8, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r3, 0xffffffffffffffff, 0x0, 0x8d, &(0x7f00000002c0)='\xa8?d>\x82\x8e |\x18\x1bp\xcf\xbe9\xe0\xa8\xd7uq\f\x180\x86\xe2hJ\xee\x92\x9a\x1eT\xe8\xd6*z\xa7\xa5\xb4\xa9=T\xe2\xb1{\x82}\x92D\xb3\x1c\xa3$\xbc\xe5\xcc\xb1{\x14\x81\x1a\xb1$\xfa\xc5{;\xf2\x1b\xe5\xf15\xcd\x90\xd4;U\xfd\xcd\x89\x7f\xa9~r\x1fU%\xd8\x19\xd8\x17\xcd\x85\xd0\"\xd5^\xda\x8b\x91\xa6=f\\\xa0\xe05p\x9e\xc3\x1a\x86\xbb\xa1\x1b%h\x8f\xda{\x16P\xa5u\xe0D\xb4\b\x9e\xd2f_DH\xbbCm\xde=\xc7K\x96', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000380)='/dev/mixer\x00', r9}, 0xffffffffffffffe2) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x5, r0, r1, r4, 0x0, 0x10, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, r10}) [ 199.467674] audit: type=1400 audit(1568538868.213:46): avc: denied { add_name } for pid=7846 comm="syz-executor.4" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 09:14:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000180)={0x0, @ctrl={0x0, 0x0, @value64}}) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r0, 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000080)={{0x76af, 0x0, 0xfff, 0x100, 0x1, 0x8}, 0x8001, 0xb58, 0x1}) recvmmsg(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000280)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/187, 0xbb}, {&(0x7f0000000480)=""/33, 0x21}, {&(0x7f00000004c0)=""/84, 0x54}, {&(0x7f0000000540)=""/76, 0x4c}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/64, 0x40}, {&(0x7f0000000700)=""/57, 0x39}, {&(0x7f0000000740)=""/223, 0xdf}, {&(0x7f0000000840)=""/38, 0x26}, {&(0x7f0000000880)=""/236, 0xec}], 0xa, &(0x7f0000000a40)=""/100, 0x64}, 0x3}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/213, 0xd5}, {&(0x7f0000000bc0)=""/23, 0x17}, {&(0x7f0000000c00)}], 0x3, &(0x7f0000000c80)=""/2, 0x2}, 0x10001}], 0x2, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000240)={0x4, 0x2, 0x1}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'bond0\x00', 0x1}, 0x18) [ 199.562038] audit: type=1400 audit(1568538868.213:47): avc: denied { create } for pid=7846 comm="syz-executor.4" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 09:14:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) set_mempolicy(0x2, 0x0, 0x200001) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:14:28 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000040)={0x10}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/816]}, 0x3a8) 09:14:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 09:14:28 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_vif\x00') r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r3, 0x0) preadv(r2, &(0x7f00000017c0), 0x33d, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$TCSETSF(0xffffffffffffffff, 0xc08c5102, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002fc0)='/dev/sequencer2\x00', 0x402, 0x0) connect$bt_sco(r4, &(0x7f0000003000)={0x1f, {0x3f, 0x1, 0xfffffffffffffffa, 0x5, 0x4, 0x1}}, 0x8) 09:14:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) getgroups(0x0, 0x0) r5 = getpid() ioprio_set$pid(0x2, r5, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000000)=0x1) r6 = getpid() ioprio_set$pid(0x0, r6, 0x0) r7 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0044dff, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) getpgid(r5) r8 = getpid() ioprio_set$pid(0x0, r8, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r3, 0xffffffffffffffff, 0x0, 0x8d, &(0x7f00000002c0)='\xa8?d>\x82\x8e |\x18\x1bp\xcf\xbe9\xe0\xa8\xd7uq\f\x180\x86\xe2hJ\xee\x92\x9a\x1eT\xe8\xd6*z\xa7\xa5\xb4\xa9=T\xe2\xb1{\x82}\x92D\xb3\x1c\xa3$\xbc\xe5\xcc\xb1{\x14\x81\x1a\xb1$\xfa\xc5{;\xf2\x1b\xe5\xf15\xcd\x90\xd4;U\xfd\xcd\x89\x7f\xa9~r\x1fU%\xd8\x19\xd8\x17\xcd\x85\xd0\"\xd5^\xda\x8b\x91\xa6=f\\\xa0\xe05p\x9e\xc3\x1a\x86\xbb\xa1\x1b%h\x8f\xda{\x16P\xa5u\xe0D\xb4\b\x9e\xd2f_DH\xbbCm\xde=\xc7K\x96', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000380)='/dev/mixer\x00', r9}, 0xffffffffffffffe2) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x5, r0, r1, r4, 0x0, 0x10, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, r10}) 09:14:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x20000000003, 0x0) close(r4) r5 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x800, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8c00}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x108, r7, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xf4, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @mcast1, 0xa0a}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x64}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @mcast2, 0x1f}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40064}, 0x20000000) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f00000000c0)={0x7, 0x3, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000000)=""/42) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x0) 09:14:28 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x80000001) 09:14:28 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0xfffffe09) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f00000002c0)=@nl, 0x322, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x469}}], 0x8000000000003bf, 0x2, 0x0) 09:14:28 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x100800400, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x80000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuaccv.usage_p\x00', 0x26e1, 0x0) r1 = dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x2}) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000200)={0x80}, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x2}) write(r2, &(0x7f0000000180)="aa14c7429186f9e262c9ee327fd706b4a5d7d321e38d198e0b473e1fc045f3b8424d6c46a7568be7c1a58d0b70c140f41124b084027c794f21b4de98a67be9fd762dcf0021f23ca32ccfe4dc47363035e541a9886cb8e7037a79efd1dbf753", 0x5f) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000500)={@dev}, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xb24) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x2, 0x400) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000380)={@local}) syz_open_pts(0xffffffffffffffff, 0x0) listen(r4, 0x4440) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x840, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000300)={'irlan0\x00', {0x2, 0x4e22, @broadcast}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, &(0x7f0000000100)) [ 200.101823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=7907 comm=syz-executor.1 [ 200.151572] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 200.188412] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:14:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01001809002f5300010000d0"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0x0, 0x0, 0xc0010140], [0xc1]}) 09:14:29 executing program 0: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x800, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xfffffe, 0x12, r0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) [ 200.333678] audit: type=1400 audit(1568538869.163:48): avc: denied { map } for pid=7922 comm="syz-executor.0" path="socket:[29153]" dev="sockfs" ino=29153 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=socket permissive=1 09:14:29 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) read(r1, &(0x7f0000000080)=""/11, 0x13) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180)) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000000140)={r3, r1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:14:29 executing program 0: r0 = socket$inet(0x10, 0x1, 0x6) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="23000000110007031dfffd946fa2830020200a0008000000001d85680c1ba3a20400ff", 0x23}], 0x1}, 0x0) 09:14:29 executing program 4: sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000270700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000340)=ANY=[@ANYBLOB="0400000003000000ff000000000000007f000000000000000000010000000800000001000d000000000000009b0d00000000000000000000ff7f0000"]) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="07470bfa6ae6bc050000f2846281aa82c53de33a05f179e41d58dc624481e7c11341522123009e1d27ed2d7c38798dc897b5e04cda8be82c81da50f52e8f333b565517336983705492010574325e42913f62a43b2b2d661d1ed7a02741ecb9b3e09302603e41c34a017c22a7285bd58d303eb3404531bb9384be6812c528239d206e5d8dcaa52b6e239386bcd710f2ff472280e781953bed588bb98b6bcb879379406f754291", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={r1, 0x0, 0x0, 0x0, 0x3}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) write(r2, &(0x7f0000000540)="1cc21950e14cfb24bdd28498aad3bfbc4000efdfc65ae65b64c3bb900a2673a38b5a6fe1b68e70f454f044a5849aacd9e1c5c6517b66f77bd490b5d13c707c9c85ea4b89ba83994acada7cbbad66fe42b188ea4858b57a41a25ad6bfdfd8e9e15aafa59d7e1b34393077be36ce8619b89e16edfa31644e86d11854dd619bcf6c3a9c1a239ddb1e6cff3ae5b7de10c8a39998f98debfb9c02d08621", 0x9b) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x867d, 0x9, [0x8, 0x100, 0x5, 0x9, 0xee, 0x1ff, 0x48, 0xfffffffffffffff9, 0x4]}, &(0x7f0000000300)=0x1a) connect$netlink(r0, 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x41800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000380)=""/37, 0x25, 0x40, &(0x7f00000006c0)={0xa, 0x4e20, 0x9, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x24}}, 0x3}, 0x1c) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="d8b613e684ec0debe5286b79edce17462222dc6f47342444c34fc4f4c2b05efb2a41690b44e5636039335657feda88d4dd90b80f4c66d12c", @ANYRES16=0x0, @ANYBLOB="010700000000000000001300ffff"], 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x41090020}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffa}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000740)={0x7, {{0xa, 0x4e23, 0x20, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xabc}}, {{0xa, 0x4e21, 0x8001, @loopback, 0xffffffffffffffff}}}, 0x108) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000200)=0xff, 0x4) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000d11000)=0x3fb, 0xa5) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 09:14:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)={0x82ff, [0xffff, 0x5059, 0x800, 0xfffffffffffffecd, 0x1, 0x5]}, &(0x7f00000000c0)=0xfffffffffffffdd5) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:14:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000040)={0x0, "7780dbb84b09453f4d292106f5f5339039081a4cb3f3c249f3463d737dcc43fc", 0x1, 0x42, 0x4, 0x100000000, 0x2, 0x2, 0x7, 0xcf}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0xaa, 0x0) fchdir(r0) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xe8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x2, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x6, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40011) creat(&(0x7f0000000600)='./bus\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000d65000)={&(0x7f00000000c0), 0x9, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0xd, 0x1, 0xfffffffffffff9f7}, 0x14}}, 0x0) [ 200.702591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7952 comm=syz-executor.4 09:14:29 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000bf) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="3f00000056749d66fb71a7b4cb4f30dde314ce1a00464212feb25f0098ffb633728b1a415bc2f4815d781e7f7f", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r2}, 0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r2}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x7ff}, 0x8) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2}) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xffffffffffffff81, 0x200000) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000140)={0x9, 0x3, 0x8, {0x8001, 0x6, 0x10, 0x4}}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000040)={0x5, 0x1, @raw_data=[0x800000000000006, 0x8, 0x0, 0x8, 0xbee, 0x5, 0x2, 0x0, 0x7ff, 0x5, 0x80, 0x10000, 0x99a, 0x5, 0x6c]}) 09:14:29 executing program 2: clone(0x4000200000041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpgrp(0x0) r4 = gettid() rt_tgsigqueueinfo(r3, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffa}) ptrace$getsig(0xf, r4, 0x0, &(0x7f0000000000)) 09:14:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.u'}, 0x15) r3 = open(&(0x7f0000000040)='./file0\x00', 0x406201, 0x40) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x440, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77666f6e994a", @ANYRESHEX=r2, @ANYBLOB=',loose,\x00']) [ 200.954626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19681 sclass=netlink_route_socket pig=7957 comm=syz-executor.4 [ 201.020514] 9pnet: Insufficient options for proto=fd [ 201.028466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7952 comm=syz-executor.4 [ 201.048533] 9pnet: Insufficient options for proto=fd 09:14:29 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r1, &(0x7f0000000140)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @dev}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_tables_targets\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) write$P9_RATTACH(r3, &(0x7f00000001c0)={0x14}, 0xffffffde) dup3(r3, r4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000700)) fstat(0xffffffffffffffff, &(0x7f0000000500)) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1}, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000500)) fchownat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) socket$unix(0x1, 0x400040000000001, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c20000001daac9c1a0d680913d7d06db2fd52effff"], 0x0) r6 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 09:14:29 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000180)='blacklist\x00', 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', 0x0, 0x0, 0xfffffffffffffffe) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x912bebd9e1225fc8) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000240), 0x0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = request_key(&(0x7f0000000340)='asymmetric\x00', 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, r2, 0x1) timer_create(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000540)='./file0\x00', 0x27e, 0x0) fsync(0xffffffffffffffff) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) 09:14:30 executing program 1: socket$netlink(0x10, 0x3, 0x10) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0x3, 0xfffffffffffffef0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) write$P9_RLCREATE(r1, &(0x7f0000000040)={0xfffffecf, 0xf, 0xfffffffffffffffe, {{0x2, 0x3}, 0x6}}, 0x18) 09:14:30 executing program 0: mq_open(&(0x7f0000000000)='\x1fS\xd1\x1cW\nN\xa9J}\xb4\xa7\x92\xa9\x19\x82\xa6\xb9`#\x80\x12\xec\xe4\xb2\x05M\x91\x03\xbbS3\xf7\xe6\xad\xf4 \x8a%\xe2Y#?\xf5\xa1;P\x18\x19\x84\x14\vo\fP\xe6\xb2\xe93\xb78{]\x9b\x7f\x99i\xac0*\xc4\xf3\"3I\x13\xe0P\xcfr\xfd\xea\x18\xb2,R\xc6\xcb2[M\n{\xc1\xdb \x1c}\xbc\xe3\t\x8d\x03\x8fV\x99\xbe<\\,\x9dz3\xael\xfbW\xdf%Ugo\x828u\xe8\xc4\\\x1f0\xf8l\x1f\x88\xbf\xbb\x04\x0fGn\xe8\x85\xa2\xef\xb8\xfe\xf3sJ\xecg\xe5\xf8\x1a8\xd5\xdb\xde\xbb\xbd\xcew\x1e \xaaD\xd2\x9cS\xca\xc0w`\xda\x9e\xee\x01\xaf\xc3\x95\xa1\x9f\xfb\x88\x9cO\x16?\"Ov\xf6\x93\xd4\x82&\xc3\xf7^\xd8\xc6\xae\x0e\'F\xfe\xa0\x1c\xb3\xd8\xb0\xc1.\x94\x19\x15\x80[\v\xac\xd6=\x82\x01\xa3\xc79o\xfe\x90Q\x14\xb8O\xaa\xddoz\xf4\xe4GQ\x1d\xc4\xaf\x804V\xb3\xa8\x16\n`\x16i\xdaD\x935\x9e\xe4\xcf\x8e\xbek\xab\xbc\xdc4\xdeg\xe0g\xd3V\x13\x82\xbaU\xc2\xd7b\xa5\xde\xb8\xb3\x80?k\x12\x88\x03\x12\xf2\xafq\xbam\xe0\x1d\xe2\x99\xea\xf6S\x8d\xea\xa8\xed*?\x98\xa0\xbb\x93h_1\b\xf6\xdco\x14\xb0 \x8f\xf5\xbc\xe3\x86#\xebeR\xcco\xc1\x02Q\xd9)@\'x\xd4#\xc1\xe7\xee\xc0\x00\xf4\x1e\xb7#$3_\x16\xc9W\xe6T\xfc\x12z|\x88yy/\xecJ\xd5\x9a\xbb\xa7\a\xfd~\xa9\xf7\xfa\xd5)\x016\xee\v\x01\xd3\xb1.]9\xe8\xd2\x8e\xff\xcc\x1c', 0x442, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x3}, 0xc) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000200)) 09:14:30 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x18, 0x36, 0x829, 0x0, 0x0, {0x3, 0x1000000}, [@nested={0x4}]}, 0x18}, 0x1, 0xffffff7f0e000000}, 0x0) 09:14:30 executing program 1: ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000000003d11c2, 0x0) pwritev(r0, &(0x7f0000001380), 0x0, 0x0) fallocate(r0, 0x1, 0x0, 0x2af005a3) socketpair$unix(0x1, 0x900080003, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0xfffffffffffffffd}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x3300, 0x0) 09:14:30 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x18, 0x36, 0x829, 0x0, 0x0, {0x3, 0x1000000}, [@nested={0x4}]}, 0x18}, 0x1, 0xffffff7f0e000000}, 0x0) 09:14:30 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) connect$caif(0xffffffffffffffff, &(0x7f0000000000), 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x400) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) fallocate(r0, 0x11, 0x0, 0x9000000) [ 201.726526] device eql entered promiscuous mode [ 201.743772] kauditd_printk_skb: 4 callbacks suppressed [ 201.743786] audit: type=1800 audit(1568538870.573:53): pid=8014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16536 res=0 09:14:30 executing program 5: close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="bd325d2ec1804125569f0c4639de9f585aba04cbb05b4276d0a874923db890fdb9", 0x21}], 0x1, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x48}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)="f71fd9fedc21a75fb7b6f03cc232cb84d437d36b409dbcfa48ca6d9666034f4453871bc37a04b271e62983c481b832f33ab3521218bf0930ab1fe97a0ea1ca2e78fbabd126d1bf5c3fcd6fe79add0ed127a66fca9906f98ec3bc96b884d4a18ebf33aecd53af3b12cf2122e0228599d11089b8f8db8de850666d00432a6b717d", 0x80}, {0x0}, {&(0x7f0000000340)}, {&(0x7f00000004c0)="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", 0x2ad}], 0x5, &(0x7f0000001540)=[@timestamping={{0x14}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) setgroups(0x48c, &(0x7f0000000200)) r1 = syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0xfffffffffffffff9, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7) connect$x25(r1, &(0x7f00000003c0)={0x9, @null=' \x00'}, 0x12) [ 201.847016] device eql entered promiscuous mode 09:14:30 executing program 2: setreuid(0x0, 0xee00) r0 = geteuid() setreuid(0x0, 0x0) mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setreuid(r0, 0x0) removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@random={'user.', '-$-\x00'}) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@empty, @in6=@rand_addr="49bfc7e5eb1ac788430b4c4349443b03", 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x20, 0x29, 0x0, r1}, {0x3, 0x40000000002, 0x0, 0x0, 0x7, 0x0, 0x100}, {0x9, 0x4, 0x2}, 0x7, 0x6e6bbc, 0x1, 0x1, 0x0, 0x2}, {{@in=@empty}, 0x0, @in=@empty, 0x3501, 0x3, 0x0, 0xffe00, 0x0, 0x2}}, 0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@empty, @in6=@rand_addr="49bfc7e5eb1ac788430b4c4349443b03", 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x20, 0x29, 0x0, r2}, {0x3, 0x40000000002, 0x0, 0x0, 0x7, 0x0, 0x100}, {0x9, 0x4, 0x2}, 0x7, 0x6e6bbc, 0x1, 0x1, 0x0, 0x2}, {{@in=@empty}, 0x0, @in=@empty, 0x3501, 0x3, 0x0, 0xffe00, 0x0, 0x2}}, 0xe8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x7, 0x4, &(0x7f0000000340)=[{&(0x7f0000000140)="7777db4412f08f5976b1f7793f71e91b2c0ffbdbb5992e2e9aa50126e5cf335b9f63b64e93d787af31767fe31936bd2c713b77d03ac727c54b6c09f12978c3ab48e987f7bb5f98f1202eab8fe8e02aafdc9b7740a1b5312a23f1bd3c46671200f2d34b4ce1837a9e28e498c73af24ef3e6", 0x71, 0x2}, {&(0x7f00000001c0)="45237e0b7697d37215843b41de880b270ca388d969aeee490a3b9d085ebc72c5dc920860d30967cd477056689eb58dfef2ff31362c1ad3f57d4186807e2200ebb208a35a0f292ae3b995d5f1306908e8fb5dbcba444a8e884ce6ba878a46bd1e8ebb02c0d2242b54595617d946efd1e7c939a781080c3d977d456c9a1dec77c124155bc79f25bc29e134447f07dcb818", 0x90, 0x40}, {&(0x7f0000000600)="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", 0x1000, 0x1}, {&(0x7f0000000280)="43c651ab23d27512b28bd8e73409c0b2f21ad6da2b4a64f531cb1639e9b22e3b47f05da7b6d5aebf5a283e37e2119c703a6729357ef4a0a3c985a8a4fade67d9a5685bc4fb47ca6dfb1e4fe8e3d11fdf46e7ee183f426ae6dbac1223271852423b4e663b652a4fb531ee3700c244b11bdfb611b181", 0x75, 0x4}], 0x140008, &(0x7f0000000500)={[{@bsdgroups='bsdgroups'}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5cef}}, {@minixdf='minixdf'}, {@nouser_xattr='nouser_xattr'}, {@noacl='noacl'}, {@delalloc='delalloc'}, {@noauto_da_alloc='noauto_da_alloc'}, {@orlov='orlov'}, {@i_version='i_version'}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@euid_eq={'euid', 0x3d, r2}}, {@obj_role={'obj_role', 0x3d, 'user.'}}]}) r3 = geteuid() setreuid(r1, r3) 09:14:30 executing program 5: close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="bd325d2ec1804125569f0c4639de9f585aba04cbb05b4276d0a874923db890fdb9", 0x21}], 0x1, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x48}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)="f71fd9fedc21a75fb7b6f03cc232cb84d437d36b409dbcfa48ca6d9666034f4453871bc37a04b271e62983c481b832f33ab3521218bf0930ab1fe97a0ea1ca2e78fbabd126d1bf5c3fcd6fe79add0ed127a66fca9906f98ec3bc96b884d4a18ebf33aecd53af3b12cf2122e0228599d11089b8f8db8de850666d00432a6b717d", 0x80}, {0x0}, {&(0x7f0000000340)}, {&(0x7f00000004c0)="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", 0x2ad}], 0x5, &(0x7f0000001540)=[@timestamping={{0x14}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) setgroups(0x48c, &(0x7f0000000200)) r1 = syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0xfffffffffffffff9, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7) connect$x25(r1, &(0x7f00000003c0)={0x9, @null=' \x00'}, 0x12) 09:14:30 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) connect$caif(0xffffffffffffffff, &(0x7f0000000000), 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x400) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) fallocate(r0, 0x11, 0x0, 0x9000000) 09:14:30 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) setsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000000)="19256a760a10399005c9829c5a44694314d04bbb7342b7c3eeb325aa420f072f463c102844eeec74dd26877d5057a6e27348a767332bd369a1e7aca0c15a1b7e4b3b1e5dcf19d744b121a4739420c801f63220456e44591978187e254b95fa9778166585ef5f0e45b201efd454c3162a2d22ba4029c93ccac94c", 0x7a) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@initdev, @in=@dev}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) [ 202.141792] audit: type=1800 audit(1568538870.963:54): pid=8040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16575 res=0 09:14:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x205, 0x4, 0x0, {}, [@IFA_ADDRESS={0xffffffffffffffba, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 09:14:31 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/\xab\x80v/d\xffp#\x00', 0x28001, 0x1000) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xac, 0x20a0a0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) fstat(r0, &(0x7f0000000300)) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000380)={{{@in=@loopback, @in=@initdev}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r4) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r5) r6 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000000380)=""/170, 0xaa}], 0x1, 0x0, 0x279}, 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) fstat(0xffffffffffffffff, 0x0) fcntl$getown(r7, 0x9) [ 202.264973] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 09:14:31 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$KVM_NMI(r1, 0xae9a) preadv(r0, &(0x7f00000017c0), 0x375, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x5) 09:14:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffffffffffd, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x190) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f0000001000)) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000200)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) socket$alg(0x26, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x69) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) eventfd2(0x0, 0x800) write$eventfd(0xffffffffffffffff, &(0x7f0000000140)=0x2a7ecfc4, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x400000, 0x0) symlink(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file0\x00') r2 = openat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="6d6111cf6cb7abc1d4e422b3f100000000000000a90000000000000700000000000000000000b0070000b802000038040000380400000000000038040080e0060000e0060000e0060000e0060000e00600000600000026569cad0cf71b000000000000000000001cd7e5e6d8744fdce1f7bae2902cb12b1a3ba2ae0d1552fe25e5497c4cebc8a70e92c8c246e1188f7c14d300633720692826f08edd90de44", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="00004000000000002300000000000000000000000800000000000000e70000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000800"/96], @ANYBLOB="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"], 0x810) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) 09:14:31 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1304a4e038673975bbf17933de1b1bec286789e2279e40cf91e2781e35906c29e722bdc6116ec6d91b82f01963f342ab0135b242503b00b5fcb5136adc3840a6", "85b275a6570d6826e4729b6a31b9687b7b5120ec9dff0128e13989b55cb1395232ec33dfb697010b5d853daf1fc23a585d5bc59b5cadabef302b4c20b4dc33b0", "18057d1eb07e50ce17b5f0e681c3a5b1c34b266b10b8de9ea2896513285fef79"}) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="00fbee0401d4b0d5472f487e4860287f24c3e8ef0d04ad0d18e50774b7fe92dcf51c0a3044286190a8b16f7c52d77145707ee07d8ae9e7ca8432fd0b2343e52ba41e47ea012cd075a763f3c4aac3e864aaadac59518ea0d8d2a5978e25bc4bca064f81cbc63cf25623a0e0ad9aa479936a24acc0ca677caa3ffecc38ef4ceb949d0605c0aa34093e4af92a085889a773747ed67f07206f3c1853f904cd09a1a24cf41c98ef3665ee5ab8ccc3d17c7678f267b1891ba174086af76c3e23da143ef3dab09fc18b815e66823323d5cd126e79d9ff6f95d1b75795d8a7365dc3"], 0xee, 0x1) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000180)={@local}, &(0x7f0000000300)=0x14) 09:14:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f000004bfe4)={0xa, 0x4e20, 0x4000000000, @ipv4={[], [], @local}, 0x6}, 0x1c) r2 = syz_open_dev$radio(&(0x7f0000000040)='\a\x00\x00\x00\x00\x00\x00\x00io\b\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000080)={0xffff, 0x18, [0x0, 0x0, 0x0, 0x6, 0x800, 0x7]}) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f00000001c0)={0x0, 0x6, 0xfffffffffffffffb, [], &(0x7f0000000180)=0x4}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)={0x88, 0x1, 0x6, "215b36117abb86e83ae62a77651cdd53c9add136f524f06470aa05dd7b80ed8ffb5bfef3e4e865f7d469c10c7d198cd90dfd239be7f2bcba5a9a276392ffe53cb8704613dc3c206e7f90fb0a35ab1f6e48ec23d05ba0a383eb745b487bf35006c4f29a99ec570abe5eee858c7269d0ffe0c4a2ebf81f18a558b0fc70fd51bced37fba1ade4039c60"}) 09:14:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000003, 0x10, r0, 0x0) 09:14:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffffffffffd, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x190) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f0000001000)) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000200)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) socket$alg(0x26, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x69) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) eventfd2(0x0, 0x800) write$eventfd(0xffffffffffffffff, &(0x7f0000000140)=0x2a7ecfc4, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x400000, 0x0) symlink(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file0\x00') r2 = openat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="6d6111cf6cb7abc1d4e422b3f100000000000000a90000000000000700000000000000000000b0070000b802000038040000380400000000000038040080e0060000e0060000e0060000e0060000e00600000600000026569cad0cf71b000000000000000000001cd7e5e6d8744fdce1f7bae2902cb12b1a3ba2ae0d1552fe25e5497c4cebc8a70e92c8c246e1188f7c14d300633720692826f08edd90de44", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="00004000000000002300000000000000000000000800000000000000e70000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000800"/96], @ANYBLOB="ff020000000000000000000000000001fe8800000000000000000000000000010000000000000000ffffff000000000000000000000000ff0000000000000000697064647030000000000000000000007465716c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b000501000000000000000000000000000000001001580100000000f8ffffffffffffff000000000000000000000000480069626800000000000000000000000000000000000000000000000000000001000000040102000000050003003f0000020500001008000000050003000700010009003f000c004800534e505400000000000000000000000000000000000000000000000000007f0000010000000000000000000000000000fa58000000000000000000000000120a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200160010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000000004d3000004d201000000000100002800727066696c74657200000000000000000000000000000000000000000000030000000000000040004552524f52000000000000000000000000000000000000000000000000006fb142332e784b094244afa58c06c1da04832de5aa9b4aea1879f08469b80000fe80000000000000000000000000002600000000000000000000ffffe00000028cd467b9ffffffff010000ff00000000ffffffff0000000000000000ffffff00766574683000000000000000000000007465716c300000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003600ff017200000000000000000000000000000038018001000000000000000000f0ffffff000000000000000000000048006862680000000000000000000000000000000000000000000000000000000080000000000900c15e20000200000002002d000200ff7f00000000000093006f000200000407002800727066696c746572000000000000000000000000000000000000000000000a000000000000004800444e50540000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000003b10000000000000fe88000000000000000000000000010135aa1ba02f79f874f7911df42225331200000000000000007fffffff000000ffffffffffffffff0000000000ffffffff726f736530000000000000000000000065716c000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000cc00010484000000000000000000000000000000f00038010000000000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000000000000000000004800444e50540000000000000000000000000000000000000000000000000000e0000002000000000000000000000000ac14140e0000000000000000000000003535400000000000fe8000000000000000000000000000aaff02000000000000000000000000000100000000ffffffff000000ff00000000ff00000000000001000000ff000000006e723000000000000000000000000000726f7365300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000008a000304080000000000000000000000000000002801700100000000000000000000000000000000000000000000000030007372680000000000000000000000000000000000000000000000000000000009320308000001000800000000000030007463700000000000000000000000000000000000000000000000000000004e244e204e224e2300010000000000004800444e50540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000133200180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000ad15e95e2fefaec025439cacd3f72b5ddf79a65f"], 0x810) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) 09:14:31 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x6, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x3, 0x57}}, &(0x7f0000281ffc)='G\xffL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffed1}, 0x48) 09:14:31 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r0) getgroups(0x1, &(0x7f0000000080)=[r0]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') setresgid(0x0, 0x0, r2) setregid(r1, r2) r3 = getpgrp(0x0) r4 = gettid() rt_tgsigqueueinfo(r3, r4, 0x0, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0xa, 0x1, @tid=r3}, &(0x7f0000000040)=0x0) timer_getoverrun(r5) 09:14:32 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x30, &(0x7f0000000000)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}]}, &(0x7f0000000080)=0x10) 09:14:32 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000040)={{0x10001, 0x0, 0x7ff, 0x3ff, 0x6, 0x1}, 0xfffffffffffffffe}) syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaa0f5f35c8d9ba02ef71"], 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0x2, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7, 0x400000}}}) 09:14:32 executing program 4: write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x121502, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) io_setup(0x7, &(0x7f0000000140)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000189063e0000000100c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe57) 09:14:32 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x4, 0x800) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000240)={@nfc_llcp={0x27, 0x1, 0x1, 0xa, 0x80000000, 0x3, "065704f21595badbb9eb8961a4b132291fa8f4ede0322d8b32fa8e00cc06ae309266d35b51ee6f1fd3bf9088894479e9f8b2d9a6379a922c7beb95179ab0f6", 0x1e}, {&(0x7f0000000140)=""/99, 0x63}, &(0x7f00000001c0), 0x12}, 0xa0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x2}) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000380)={0x8, 0x0, [{0x0, 0x2, 0x0, 0x0, @irqchip={0x7}}, {0x5, 0x1, 0x0, 0x0, @sint={0x516, 0x1000}}, {0x6, 0x3, 0x0, 0x0, @adapter={0x4, 0x0, 0x4, 0x9a}}, {0x200, 0x1, 0x0, 0x0, @msi={0x1000, 0x10001, 0x5}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0x91, 0x47d}}, {0x7, 0x2, 0x0, 0x0, @msi={0xffffffffffff8000, 0x5, 0xbc}}, {0x3, 0x2, 0x0, 0x0, @irqchip={0x0, 0x7}}, {0x5, 0x1, 0x0, 0x0, @adapter={0x7, 0x7, 0x1ff, 0x9, 0x1000}}]}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) r5 = fcntl$dupfd(r2, 0x0, r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, r7, 0x78a8e6cd1b85014d, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r7, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40000) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0xe0, @rand_addr=0x5d}}, 0x45) 09:14:32 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$KVM_NMI(r1, 0xae9a) preadv(r0, &(0x7f00000017c0), 0x375, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x5) 09:14:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x60a457997f0bb5b4, 0x23, &(0x7f0000000080)="fffff71da5c1e7554dd39baaf793545fe73d1af76f8474cec1222c60c111253ea5f7dd"}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x632001, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x3ef}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) r3 = syz_open_pts(r2, 0x40000000002) fcntl$dupfd(r2, 0x0, r2) r4 = dup3(r3, r2, 0x0) bind$bt_sco(r4, &(0x7f0000000180)={0x1f, {0x6, 0x80000000, 0x48, 0x200, 0x2, 0x80000001}}, 0x8) write$UHID_INPUT(r4, &(0x7f0000001340)={0x8, "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", 0x1000}, 0x1006) 09:14:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpgrp(0x0) r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3ca1, 0x2, 0xf13, 0x6b, 0x0, 0x400, 0x100, 0x440fb12c5e4c5471, 0xa585, 0x80000001, 0x8000, 0xaa, 0x6, 0x21c5, 0x100, 0x821b, 0x8001, 0x40, 0x401, 0x6, 0x4, 0x9, 0x10000, 0xffff, 0x2, 0x3, 0x4, 0x1, 0x3, 0x10000, 0x800, 0x7, 0x1, 0x9, 0x7d8, 0x7b89183f, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x30bb2, 0x4, 0x9, 0x0, 0x80bd, 0x2, 0x4e}, r3, 0x7, r4, 0x8) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r5, 0x0) 09:14:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0xac, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x7ffffffff06b}]) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000000)={0x10001, 0x0, [], {0x0, @bt={0x7, 0x0, 0x2, 0x0, 0x7, 0x10001, 0xffffffffffffffe0, 0x30000, 0xfff000, 0x1f, 0x9, 0x0, 0x7, 0x2, 0x10, 0xdf579946a30cfe28}}}) sendmsg$sock(r3, &(0x7f0000000380)={&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x3, 0x0, 0x26}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)="18bd61ac039eb65783d218b00a56149edaf5b8a0c8b815b33f9272d735a682447c30b3f25f2d59e3b958edd04b1c309ccb765323d04516ce9dbc423c41fb8ef180f3165108acf3", 0x47}], 0x1}, 0x21) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400007, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) r6 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r5, r6, 0x0) close(0xffffffffffffffff) io_setup(0xac, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:14:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4c, "efaecbebaa7efbe62e659b3f3f13476b17c9ed04445e949a86527119269b6164239638b4deb1fca209ea2f04d3b13eeb5f4bd24a980bcf75e45ba81de1b1d47ded5877845392566f69ab7709"}, &(0x7f00000000c0)=0x70) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x408000, 0x0) 09:14:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000010701ffef000000000000000000000027c82c10a5bcfe5832ba0d1d7635b5bb6dff29cb9b6f403e7c95d9d5a620de81e53f4f63bce351b95205b9985aaab97166673482"], 0x20}}, 0x0) 09:14:32 executing program 5: pipe(&(0x7f0000000080)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) splice(r0, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x9, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000780)={&(0x7f0000000300)={0x468, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER={0xdc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @remote, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3981a123, @mcast1, 0x42c}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x126}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x10c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xecb3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffff01}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72c}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @empty, 0x2d2}}}}]}, @TIPC_NLA_MEDIA={0xec, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc77}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6fa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x468}, 0x1, 0x0, 0x0, 0x841}, 0x10000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000280)) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xbc, r5, 0x320, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffffa}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3419c000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) [ 203.894736] input: syz1 as /devices/virtual/input/input5 [ 203.951451] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:32 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000100)={0x8, 0x4, [0x8]}) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000180)={0x6c, {{0xa, 0x4e23, 0x3f, @dev={0xfe, 0x80, [], 0x28}, 0x7}}, {{0xa, 0x4e22, 0x3, @loopback, 0x1}}}, 0x108) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, [], &(0x7f0000000080)={0x980905, 0x0, [], @p_u8=0x0}}) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0x0, 0xf02}) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000000)={0x2}) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f00000002c0)=0x0) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000300)=r6) 09:14:32 executing program 5: r0 = socket(0xa, 0x80a, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'\x00', @ifru_settings={0x0, 0x10009, @fr_pvc=0x0}}) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 09:14:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004200003800000000002f9078ac1414bbac1e00008a030000ffff110000000000000000000000000000000000000000000000000000000000707c25f5d9e2b1080bf9c88d2821fd0744e242a0211525183077920a670b1b387539d415db11c1c072ae478c106b99069b8d5b90f9438ed9a577fbdb4617054d9dc04f32ff33daaae358f8ddb2715395c59e206a77b770b1a865c16fd010f700"/180], 0x0) 09:14:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) r3 = getpgrp(0x0) r4 = gettid() rt_tgsigqueueinfo(r3, r4, 0x0, 0x0) ptrace$getregs(0xc, r4, 0xffffffff, &(0x7f00000000c0)=""/111) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000080)={0x670, "be748d83cfe372577583146fa8cae8cc8c7a988e384bf76dbeb8650d8010a253", 0x5, 0x2}) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-monitor\x00', 0x105200, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x40, r7, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, '\nblcr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x40}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, r7, 0x808, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffc}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffffd}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100c0201}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20010000}, 0x8000) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x19) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140)=0x9, 0x4) r8 = syz_open_dev$radio(&(0x7f0000000240), 0x3, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r8, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) write$P9_RXATTRWALK(r8, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x10000}, 0xf) r9 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r9, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$KVM_GET_CLOCK(r9, 0x8030ae7c, &(0x7f0000000040)) 09:14:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") symlink(&(0x7f0000000040)='..', &(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000100)='./file0\x00', 0x8000, 0x60) r1 = inotify_init() r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000140)) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0xa5000036) [ 204.272117] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 09:14:33 executing program 2: setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x7, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000680)) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000000)=[0x1ff], 0x1, 0x4, 0xfffffffffffffffe, 0x6000000000, 0xfffffffffffffffa, 0x5, {0x6, 0x2, 0x8, 0x5, 0x0, 0x62, 0x0, 0x7, 0xf04d, 0x400, 0x3, 0xfff, 0x5e09, 0x461, "de3905337f772d7524896395a274525851fddee480a50316465e7ce674a1267a"}}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000540)=0xe8) fsetxattr$security_capability(r1, &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000600)=@v3={0x3000000, [{0x7, 0x62}, {0x1, 0x9}], r2}, 0x18, 0x3) r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r4 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x420000) r5 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x2000) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)={0x1a0, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfc}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9a9c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xca, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x10}, 0x44004) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x7) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r3, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 09:14:33 executing program 1: setgid(0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8001, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x481, 0x80, 0x6, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000340)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}}) listen(0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x840, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0xb3810100, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x80000000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYBLOB="e20000007a7ba1bf36e2cd24b3383af204211e3c76ca1e57557baf9c5d6101a5bbb4812f9d7c07f08aa72e204f5a29d0c82539784f99a9735181990de1f0d3f0a28c3918aaa1ddf829bad77561a957e9ac31e0b7060028dc6f08d7e15eadda67a3282071baaf394d3c68c1058173b200f407a3e2b4b61e843ea89c0f03d3d9c462c1dfd91003547e45122bf26891415c12c7c00973404839bff5e616c3893e2aa72a72232ada49c04f3261c714048ae3aa5ef7b0f5392db19e34520220f2dd74db7a0d6f5c873ecd38f1c1c461c500d8e1d4271e1f4e77b4db595e4aba23fcd321b31654aad915"], &(0x7f0000000280)=0xea) request_key(0x0, &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000600)='/dev/null\x00', 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000002c0)={0xfffffffffffffffb, 0x6c50bd0e, 0xd92fe5420910064e, @stepwise={0x6, 0x5e5, 0x3, 0x78af1657, 0x5, 0x6}}) [ 204.323691] audit: type=1400 audit(1568538873.153:55): avc: denied { ioctl } for pid=8154 comm="syz-executor.4" path="socket:[29517]" dev="sockfs" ino=29517 ioctlcmd=0xae03 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 09:14:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x30, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x200200, 0x5) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000100)={0x8, @multicast1, 0x4e20, 0x3, 'nq\x00', 0x34, 0xffff, 0x58}, 0x2c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055effcfe47bf070") r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) [ 204.633242] input: syz1 as /devices/virtual/input/input6 09:14:33 executing program 0: setrlimit(0x400000000000007, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x612400) 09:14:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000005000)={&(0x7f0000000540)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x14, 0x207, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}}, 0x14}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x4) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000080)={0x2000, 0x10e000}) read(r1, &(0x7f0000000340)=""/131, 0x74) 09:14:33 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x80) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) r0 = open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x0) lseek(r0, 0x0, 0x1) 09:14:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x6685, &(0x7f0000000140)={0x1, 0xf313, 0x1000, 0x85, &(0x7f0000000000)="2228ae60697cc119d1874cd4775ca7e74253ece450a6b080fb5577cbb9e0a726fe5249a424dcb4b246cd8cfc93e9b94938668460e729dec4907387b9eafe740073da6a7ec4671605b8ffb365410d619c0eca512018b53ce7d713a77541aa4aade8d6685ef04f3e1748fff80f14ed1efccb03f6ff8f1db26abe1eecea1984cebd14fc7fa08c", 0x1000, 0x0, &(0x7f00000004c0)="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"}) timer_create(0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0xc0000101, 0x0, 0x40000084]}) 09:14:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x6685, &(0x7f0000000140)={0x1, 0xf313, 0x1000, 0x85, &(0x7f0000000000)="2228ae60697cc119d1874cd4775ca7e74253ece450a6b080fb5577cbb9e0a726fe5249a424dcb4b246cd8cfc93e9b94938668460e729dec4907387b9eafe740073da6a7ec4671605b8ffb365410d619c0eca512018b53ce7d713a77541aa4aade8d6685ef04f3e1748fff80f14ed1efccb03f6ff8f1db26abe1eecea1984cebd14fc7fa08c", 0x1000, 0x0, &(0x7f00000004c0)="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"}) timer_create(0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0xc0000101, 0x0, 0x40000084]}) 09:14:33 executing program 5: r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9d, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x80000000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r3, 0x6, 0x7, [0x937, 0xb8bb, 0xbca, 0x100, 0x100000001, 0xb8, 0x2]}, &(0x7f0000000240)=0x16) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='(^\x00', 0xfffffffffffffffe) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) tkill(0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60d8652b00140600fe8000000000000000000d00000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50afd6a061c6172e29d9ab461f2db3fc313f3ff3a668a8e1727f1adb6ac2a4f542c5355486dfe61582148c08ea93d25360db899dc79c061f223b25bf25368eaffd5b7db2e484fb6e5869c35d5c7103a6f35330b1cd870ceb3e62ba6bdc80d737492d53fb6b2d14e336d8f419c524e24c0343b5"], 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80002, 0x912bebd9e1225fc8) r4 = gettid() timer_create(0x0, &(0x7f0000001ec0), &(0x7f00009b1ffc)) r5 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f00000004c0)={{0x2, 0x4e20, @local}, {0x1, @dev={[], 0x1f}}, 0x2, {0x2, 0x4e20, @remote}, 'ip6tnl0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) tkill(r4, 0x15) open$dir(&(0x7f0000000540)='./file0\x00', 0x27e, 0x0) 09:14:34 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @raw_data=[0x1000, 0x6, 0x6, 0x739a, 0x75c4, 0x3ff, 0x20, 0x0, 0xfffffffffffffffe, 0x3, 0xffffffff, 0xfffffffffffffffe, 0x3, 0x3, 0x100000000000006, 0x7, 0x0, 0x40, 0x40, 0x7, 0x0, 0x2, 0x200, 0xdf22, 0x1, 0x40, 0x80, 0x7, 0x8, 0x4, 0x5, 0x763fc4c7]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@random={'btrfs.', '%ppp1selinux$/\x00'}, &(0x7f0000000340)=""/40, 0x28) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0x5, 0xffffffffffffffe0}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) setsockopt$inet_opts(r7, 0x0, 0xd12bc1ad312593de, &(0x7f0000000200)="0e99a0774d8e1790a3510b15aa84e8777c69489e30c9db3b6114bf891e3d7e92ed6736a56ee70bfe3194e439dfa63595bc70e67dc1bd2500d2c5796876f7bc847ed49e607a5a10aa8b6b17a7e7f936bc81bbae2884a0befb1b64ac8aa19e00b90f334462295d74443723972760d94e2bc2c79786a481360be5ef658c420ba0faeea40d2bd735a0da1c1ee9", 0x8b) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r9, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$LOOP_SET_CAPACITY(r9, 0x4c07) dup3(r4, r6, 0x0) dup2(r2, r8) 09:14:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x25e, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x6) 09:14:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x6685, &(0x7f0000000140)={0x1, 0xf313, 0x1000, 0x85, &(0x7f0000000000)="2228ae60697cc119d1874cd4775ca7e74253ece450a6b080fb5577cbb9e0a726fe5249a424dcb4b246cd8cfc93e9b94938668460e729dec4907387b9eafe740073da6a7ec4671605b8ffb365410d619c0eca512018b53ce7d713a77541aa4aade8d6685ef04f3e1748fff80f14ed1efccb03f6ff8f1db26abe1eecea1984cebd14fc7fa08c", 0x1000, 0x0, &(0x7f00000004c0)="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"}) timer_create(0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0xc0000101, 0x0, 0x40000084]}) 09:14:34 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0xbe08d70199518250) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000000)={0x2, 0x82ffff, 0x0, 0x0, 0x1000020000006, 0x7ff0bdbe}) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@empty, @in6=@rand_addr="49bfc7e5eb1ac788430b4c4349443b03", 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x20, 0x29, 0x0, r3}, {0x3, 0x40000000002, 0x0, 0x0, 0x7, 0x0, 0x100}, {0x9, 0x4, 0x2}, 0x7, 0x6e6bbc, 0x1, 0x1, 0x0, 0x2}, {{@in=@empty}, 0x0, @in=@empty, 0x3501, 0x3, 0x0, 0xffe00, 0x0, 0x2}}, 0xe8) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000001180)={{&(0x7f0000000180)=""/4096, 0x1000}, &(0x7f0000000100), 0x10}, 0x20) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000011c0)='\x00\x00\x00p\vs\xdd+D\xb7\xa8\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000080)={{0x6, 0x100, 0x101, 0x5}, 'syz0\x00', 0x8}) 09:14:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, r0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2400c1, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000000000000000000000000000002008000000000000140400000c5134e6bee411d91401e0c961461be1d7000000000000000aaaaaa90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c77"]}, 0xa08) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x3) r3 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x1001, r3) keyctl$read(0xb, r4, &(0x7f0000005340)=""/4096, 0xd900) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040), 0x10) [ 205.399094] audit: type=1804 audit(1568538874.223:56): pid=8225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir653402738/syzkaller.DNSzYU/19/file0" dev="sda1" ino=16601 res=1 09:14:34 executing program 2: perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x1, 0x4, 0x7ff, 0x3, 0x0, 0x9, 0x20, 0x6, 0x8, 0x400, 0x0, 0x9, 0x7f, 0x6, 0x6, 0x20, 0x4, 0x8, 0x6, 0x8000, 0x6, 0x9a, 0x7, 0x101, 0x3ff, 0x3ff, 0x401, 0x6, 0x7, 0xfffffffffffffffd, 0x7, 0x800, 0x7, 0x8, 0x3, 0x40, 0x0, 0x3f, 0xb, @perf_bp={&(0x7f0000001380), 0x17}, 0x440, 0x1, 0x9dbc, 0x3, 0x5, 0x101, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0xf04a0aad636f4846) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000001540), &(0x7f0000001580)=0x8) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x2007, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003300050ad25a80648c6394fb0124fc0010000b400c000200053582c137153e370900018003001700d1bd", 0x2e}], 0x1}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000001440)={0x0, @speck128}) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000001480)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000040)=@rc={0x1f, {0x3, 0xa73, 0x800, 0x2, 0x2}, 0x7ff}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="25c9e7690ed18a7190921de0dafb85f59fb09943ac2d546e84b4985239c11dbc8eb5d6c812eb0925890985dde894618355db505322bb59bac6a32a7c7c4f14538b6f5f85fa282f31ac2328658d61d58de8f5e3590692ca700269ce31bc9e63b93adb118ba800087b6adf96089cc2e2939425eca39e4dfd0ad4ab495d25db4830a56dc7cd53b0d51893dec45696bf6adb3d6e3e454722eb2ab861640a2bdaa5f0b4f8e6aae56956bc2f60800a2c0ae350ad623aac25b148a37da69fe74579cb2dc622c2534a35d9cd9ed5d82483774df4f190bc3fb7aa857fece11031ff22006f8f79", 0xe2}, {&(0x7f00000000c0)="ee52061029b42829a781c3202a62450d9dea1ae3e0924272012bff38d0c5dfdcb376260f3543d0cd3c24a85624290ea42802c877d550d4", 0x37}], 0x2, &(0x7f00000002c0)=[{0x1010, 0x113, 0x1, "db7034d9b07a30249e10d6b3ce158660f6bcb7b1e98c1258433cf7d8476eca335ef052e98863691cbd8983a33769fb79a212318ffb2d111c0cd499fdb33382616203e69a55eb55d49bcefae4984cbdd102bae23bf9ae6c75d47b5f30eb3562a636826593ed34f342d8e509a1cbf2a30db1d895a24444aef8cfc5c11a621acb4ed4c9d1ad8683ba1d9a2078392ec433e81ae6d6ed73eeeccd5b8c90924ce678acc3e4072022c10f54a6db4639d595fcc46f8315723ef94e195c390be11e7ece77952c806c889dc19e67a255631b9959f8a4ca09c159805529bd6a7cd95ad3cacda619eaa2182ea412be4ca0bb8fbf0bdb31e177c4614c13c0a36c9eb135a7ed656ee9d7c051c449a7d35bd3b3e4d0425dc1cdfcbdb84628ac4adbff6a62d567d0eea7feba210c6b2da4aaf6d630a66110bb324192b36a8933032698542da8f98e9782ed2c15f0cdc2b55080c65122b736f9b43da8b7127a0baa63e1e5edbdd6c657e0a3769d7d0448c5279e1b89a6fb06d1b3feb4a840bf63a25de032d1fd9fc6351766f778d12ca4dc28cc53e4d21c351c0686701040be962f25c97841aa2f127e228399d0068311b9fe2bde8f57bb23f5200ae36852677d1b732ff70fee29db89c51ad5dc1a36bd57a2812ecc483730dc9f585a117851b9851288beb9d7c8b978aff714a5aa2db864698f2d22fe51706d8e5e636e45f5c6d51296d5955c5de1b35665ee11553ea37ce3244937b594cf75a0e9fac0c153c215e893c206eae06c12eaf7a33e7b66520f8fe89d547cb94862301a00e521453bf38387aa4d57b596538c007db65cc1ad5d11cbc156f61fcfde6b6187b3542152b679ae65c6a69d93a62e8dee22e736181b8017b0fb741ecc830e918c02b0d54884bdffe68954d959f6249c8718125d7ded2500179bcd7741d967a7612589ee397875257f8666347f3803a0db5b66145a65290961c5ff7c32cd605e7d473d7c578d192f1713f2fef2a55ab4f7175c953f632515faeab3fbdbb41f685e1a8b12068219bce34998970bfaae4ddedecc95ecdafd4bb783ecbfe39f4f9d6b0391778944f5fcdc149aaa145474ae81257e999ba21c4c6c6b9121cd64c9c8a4e7606f9bdd88c442c7052d29fcf50c71978160bb656a4cae5b5fe385371bab502494a424bc8c6942711e4a5f614dd2322e8a330388933f16695832e677ca5061c9ca1c641afcc30168445b8eb8b62bb24bfcfcf4ae8a2d933509035f60a3eb46344b9481f31beb798562440c7482c8b3986ede7af27a93308cea64958c37b650f1a24560a3857a2ebf955b0ec4c794bc52f24ba38af83c77a23d9d2d3475ab58eed571bfbd460ef71f9bc6d31270d7fbfa4b85427e2c34b9bd0ff9cfa5a40f5d38d6c0379d4357e6f8897a31f21a16e030472fee2e4f6ca1b666cdb312801e5d1e9c62c412a3768d61b2ff3e0522e86e7286a2318770d38c33cfbd9f355e5717d48dfbb50fd1145b5b956dab927e9fa5be1e1dc73d5fb6908bfe3609c854501ee9e93be5cdee29058624195c342e3050fb524c098e4cb98c40c28fb8eec0b04178235109151f69d473c63ae63cddb862b7086e99473f45fab6fc14d12fa2b0ec739ebf11dd414c347e1675154958462ac19a9da411dcb83ff63eaba73c8e82aed4ddaad1fd7a24e0884180b7218db46dadb24fa3726f47d124df643a7a254e47117345021d395e021e3fd0435bc264cd3f25ed8d40d5f60a6c3d6749e2a4fcdaabd0930aff7e12be0d9668f0f3422b286f9553ad5d9e5af3b46fcb53989a7c3b6a1e80a76454cef308eae506b6b25c7ac433f6c8ee1c053b8cdee4cd9e639f30abeedd304ab787e67e31c163faea566f7369cc5edb25ccfe0e577121cafbdcb930d024a0e0fa43ff29220a30b716322eeb7fd515e218a5acf24607b9abd19a33e172db91fe8a28cd26ead7e42d9c42d5bf12bef325618cd46694949eaf0581a0c226a44c210c820d00e32510c73c14486dd359247c29f0a894629bac31f4a96bbf66be5a317b1e2a5e409e0df40fc1b03808e132653c908d39bb28f88271ef7e38ca176a9f3571af16806e1df1a6d79a430d68f38c4bcc930b229f31e647089819d4a6e1a82b4e7c6cb149dbcbab579548894a868593ae9ea9712bf527aa931dcab5f5f733d7cc1a89107e901b2c56ce2db6c20aa0a0cc7130a5181a7c610a4a5035f2b40efd1324d652b2f63d755f9a7c31305c5d7f7044f57800670709478e4633a16aa1320cc4888889633be0dc0d005fbf53ef4c9cf966f6d61cb1d57350ca4e44e8b958a6075ff2840ddc943f0cba84a46301d1165b9de48a0d4384b31662bbc8cec53abde76ad340271d4faa3fbfdfede1abd89d0d0c37edee64175afe32a8b82613a52f76cdadbecfdb6145a4bd0b6f4ca6ea075feceef98dcda45039d38911f752ce11045473a165d53bd4a687a6635fa9e43028ac2a529dc0a2924b39021f4535d87f4ba98137e8892d72c933b679b8bd616b44bb185886694d5a2b73f35b4800aa7437e02a294d82dc1840cf195868677aa8f1f9ee4bf8b56a74684272b8df43fea3eab001e974dce02f4a6f3dc33289050780623d9c949b3a4f0b6a103c30da6f3d7ddb5e68f4a93332b6249ae1fe08fc26c03354dc21feb81c462b810724a8be3fa4e44bfc8dcf0d4f3883c1163204bf9333e543bf22707bc4eafa97b5ee1a89b8958d5f4884f799f4277f2f19a3f39238cc3edbf40a22fa08db10e37fcddcefd8c6301667a4049645457d07be9b3fb85222bdd4666aa075952616999c6dd7cfb82d4ac4d2262a0f7a104b927d3759dea37799e912516a57dc96cc2bf3856c2bf2310cd23a19d9d4ea001f92279b6e268114ad442d69dd3299312ff211aa33dc8bca8559254d952bfe93335425c0859138adf20822acbe715b500be784f79ed92abf71670c3c9f8d04b775aa66452b1092af0c5032d0bce478481f161f6b5ed7817431ac196840f2cf9894b596c1c4890ee7ef07548f9f3c50fc6c1a9115d5d516afd0b1e4f84e548649fded8ca8c4742f704afd6678eeda579f6d7675242f17e46a86973afd98cf16411c2bf3126e8acdae0d8ec6508e3f283a5b209abbd60056c155c83f30ebfe07093bd0376f1a78e93ebd0633187a78e71093c2ef78f3e6bfb11441e242ffe0814fabbafd9e3fed2a5612d5d115abde25ddcb1461437116c50e4ad9102fa015969b76b90d9f5d0938fe68f9c09f3134d21ca9d8b93a419e9c4ec16c1409cb22d6573c9f3fb8953a3c78b87ee7f2f2e664d21d454b788f96958d21946df8e79218e2f76f472ddcce01d6e9c305ccde31d83dba94f09b1eaa5b3b304438bcfd2eaeabff98cedccdc91b3c8c8a3283b69a1e428bf0fd976b38c0ee111854d76cb77d2016c482f98f7ec6109d1caa9a62c2bcc9bcb5cdd0a6685fe071337142591e24c7dd31a9ff29379846a7222cd537e8da8051585cce82ac08a90c75827083c0f64dd43d1fa2b8fcc08a1531ea3de80744328a42f4e02d591dcd8aba930326cab06bd1aaf4f3388719a5f5d46453bec4cb7ce760a91727f783b8b55a59c8af9f05a50de4b755d5aae204e93fe33229a9f0a77ff587e98e35cf6815d09ec536777a50246773f9f393c05a2328d7b47e6049edf0d90c16884d68873c8aa411026cf6b0649a7ca456320d2f7634e5d850c329e40debf4b358ce000da824dddfa0c932f8d0e2305fc19fbf09805eae15ee9760de9e114301b95893a096b1d7c8aeb42d5197b1b08229a4e6b3f734c41348c70888089abc20d2b93d3878a9584927677a327422fbf8e038176b30a4032e27d16744ddfd9d07d7aaabcaf3c18a6cc806806f35e71920579093f7b1600522add4bd62676652f578ceab913cfa2a38926f51412016eab9545cca67cbf03382dd7d6a1ee147ce240b1cf19f3c30d1fd22d505e7a7db7217a2f5a590467cabe807d8d961c6a7a08d552c6b37cc296fcf3031b22b77b765a16277738d6f48e9183e1d870e1214e067dfb345d59c056bd69500b0f4a7ed784c04b3a47a5c0da04fef284ac1c4c6ddeebb1c405808866386ede75f9f9e1a8a52bc91cc690769c30e1473e6dbd08a1d71fd5eed807594677938c4ee9c7dddcad83bf5d04c1f7da4c9ae13864a97e3293f18bf310747652daca660aa00f74fc798efd49027fc7d76377b00a535c764be19a33c7448b06860015cd67d67ddacda6ad1f3e7375426444006e6490b5f337f8558187fa40f053771da2af4d326e95fe2743fde49ade7948dfb4f380df7ede69121b43c3c9b3d338ca10145484f8a47f85ca46399c1680608e5fd56563f04a9f4c3aa9fb205c9ed2ea9fd25ad9ee54a588916b68169b66658d675643c6d6c9792fa7f45fe47024b0fe2ef8959b8070818eff9583ba900582a9a607c975551059f44876b59d5b6d54feef5cd58a67b1bb3989d212a98ecb88d2fdd8ede95250418878cfae139a52ff9868fc30b4344841005bdb910a94c49e6da81b2de768af35226a47c0cd6c38fa636a4c3ebe514887f7226eea73c2d3e7d70d045b7ebec022067efe2384bda5d1600aef87617f7c380b96245f4a65e7e4f98bcb41b7820ad93c265947de92ceef3f53438e0bd10b5a82a3ecb77d9d4198039e2b3fc6de209329cb27756f30630bbf57681ac30f3e5c7c939206de09e6b5a5e09462345ec921ea3076e565b4cd4ce0f666d8b3e5924018557a150130beb9a02665f8c13f0dac32735a7f37c93eff9c727b784535825ebeec5e610ee7a85288d4c0e6ba1872c1434e198946c7bfe7bff9f472473c869a895ea18b1d6819edd27c8569400470971df04d5ed5307bbe9bfe2080695fac6668ffb196a2a23bd6d170d9dd61f23ac64c44a9355161523dee68b765acceed7f805ca1fd91a76137ecf816688b1c302439cb27ff62da0b32b64cf6fe3d2753ebfb23458e9a10fe9718ae789c9013469c1dfa7e3bb890dd8b713865932f943f9e98993b1b3fb8df59c067b7fcfc3e650cd675b4612dc0681c0e1e3e2aa4b357bf9072cd974d4693dacbc9bab4911ee0d89043e81d0d541a0c831db7023cf1f5763118a3fc37c9f8ddbb55971cdbfbddf7d1905fbb1564b7cc5c5f73a867673d24e02057f55da1020eb48ff35af723ae9479f2b01814d2107262ad3945df6e87f88b8987b5afd7284e37955f587281cbc2d52349c1d7ac3af48db4d75f4794b9f938795853ea4b95f915e231f76722c8dc1e6d4f9616d7633a05da16756dd283c9b5d1c863d566e40bd3e6222cbabd28e1b7f7024f58ff0c601739dd90c04cd769be1bddd17e2e62ee309f3ae0508d78dc54bad15928fd0096f004df2cd0d85456e7f98b88c08d2f4b338c665d0bdec95208e06a087768a342c41c96765e34b66c2f45503833f1b84f290269bcd964e56e2e8e964254f31803e5ab411c341d46ec6eb4a32282f54903984e5f7e9437db31ac8a50828ef6a928210ed392fde74660abce47cd5866fccb6a878f3a86880a66e007a5c735b0acc1662caac65a25801b381bf98e120b87c652f71f6da4a8807228f27eed6a6d2419449e7e134e14c1d4284f485b028665eb2af3bda88e5540ec6c82e8801d294b327b916a872cf98187b86cde4e7dcf29fc0ec6b0c08de093d717df6b1f2b854ea405c86869593147a24059722fb762ecdeecaca31d9530d3e569fb6aa301f9dcfedc612f944ffcf3e1cc1651740b64d3e207d9e2411f1bae909b912edcea22bb0da3eaf2032bf94e59bebaddfbafe8a0904ada7521928e58f0275734c3023f346e8"}, {0x58, 0x116, 0x7, "d3063438a20a25e47d13f7aa954e6dce05bb36080ba4c0de18f02c3d673cad795903b6e50799fe8fbcfd152e42cd6502f659db082fad9a8a223fdee479ad9bdaee"}], 0x1068}, 0x10000000) 09:14:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000041c1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) geteuid() r0 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0xf1, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000140)='eth0\x00') r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x40000) [ 205.576486] openvswitch: netlink: Message has 5 unknown bytes. [ 205.616548] openvswitch: netlink: Message has 5 unknown bytes. 09:14:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x2}, 0x2ee) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) 09:14:34 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = socket$isdn(0x22, 0x3, 0x3) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000100)=0x8) r2 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r2) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) readv(r2, &(0x7f00000002c0), 0x18f) 09:14:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x6685, &(0x7f0000000140)={0x1, 0xf313, 0x1000, 0x85, &(0x7f0000000000)="2228ae60697cc119d1874cd4775ca7e74253ece450a6b080fb5577cbb9e0a726fe5249a424dcb4b246cd8cfc93e9b94938668460e729dec4907387b9eafe740073da6a7ec4671605b8ffb365410d619c0eca512018b53ce7d713a77541aa4aade8d6685ef04f3e1748fff80f14ed1efccb03f6ff8f1db26abe1eecea1984cebd14fc7fa08c", 0x1000, 0x0, &(0x7f00000004c0)="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"}) timer_create(0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0xc0000101, 0x0, 0x40000084]}) 09:14:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r2, &(0x7f0000000480)="870a015427cfb2f15b4be7b78446265334a940bf160d0be9e645f95ed7d81e462295902892ee1d66a322b90784dd5e539411cc585bb08684061cab27013fa3c09e078948297c1a8a49b6a8f6dcfc73af9968511fac5dec83e77cd806cd344b1248b08a659ae0153aa0c60af5a308aa511a02609d835a1d3f55f0e737bd81ded8baa0115a8f61f8b66d9bd1f6838d4153b955b5e965c7cf298aa9a50149", &(0x7f00000005c0)=""/140}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x6, 0x0, [], [{0x6f16dd82, 0x3, 0x4, 0x80000000, 0x100, 0x2ae2}, {0x0, 0x40, 0x7f, 0x3, 0x9, 0xffffffffffff0eda}], [[], [], [], [], [], []]}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00^\x00\a\x00'/20, @ANYRES32=r5, @ANYBLOB="7fff00000000000000ecd18d7f55aa0c8bce93c4000000"], 0x24}}, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000540)={'IDLETIMER\x00'}, &(0x7f0000000680)=0x1e) 09:14:34 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @dev, [], {@ipv4={0x8100, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x42000, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000080)=0x4) 09:14:34 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x2}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000140)) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) 09:14:34 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x101000, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3a65, 0x4, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0xfffffffffffffffb, 0x4) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x800) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000040)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r4 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r4, &(0x7f0000000000)="98790dc24b3b2e38", 0xffffffffffffff85, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) 09:14:34 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0c00000c0000c2739803dd9d53cce2bd199a411028deff95a6a154cccfff39b22a46b5497bc2abc2855ee1a8cfb4b433b7939968d4e2f93e01808e1a2497aa5a658000a41f895f1c0969556f7d8573b0f887d24261b454bda830bcc57c4a280f3f0b13db24f49dd037cc8ad9022fa2db7216298f5855f220ee67dc0f056a41e84ebcf8030bc1a65951ce85de9051d45c85be8664e11058bbd18e9afae3477ff7d0f2a7df700cbc2c06ce51adb2385e273e9a6acfd6261067fe5c4e"], 0x6) read$eventfd(r0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x2}) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000040)=""/44, 0x2c}], 0x2, 0x0) 09:14:34 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vfio/vfio\x00', 0x48000, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) 09:14:34 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000240)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000440)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0x6, @win={{0x7, 0x0, 0x1, 0x8}, 0x6, 0x9, &(0x7f0000000180)={{0x8, 0xb11, 0x0, 0xff}, &(0x7f0000000140)={{0x3, 0x3, 0x967e, 0x6}, &(0x7f0000000100)={{0xf498, 0x6e1, 0x100000000, 0x5}}}}, 0x9, &(0x7f00000001c0)="98c910df6d5001aac89aa75a9d3e4d3989f39f2eb3872c70f5cacde23e551c5f38df72290de1c713a58d4883f329e81c2008d9c9fa8ea265c48fb4d2d293f434fbea10c0a151f883a5081901b84bedb88dd3621ff8e6c7ebc59a0ccbe11760473f1030f220a75b2ddbf04cb4a09cdad8d5234c26195b", 0xbf}}) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000480)={0x1, @pix_mp={0x0, 0x0, 0x32315559}}) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000280)) 09:14:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77bb2011ee5ad3f7, @perf_config_ext={0x435}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r2 = geteuid() ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f00000000c0)={0x3, @null, r2}) listen(r0, 0x800000fff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(0x0) keyctl$revoke(0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000200)) r3 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='g', 0x524, 0xfffffffffffffffb) keyctl$revoke(0x3, r3) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x0, &(0x7f0000000080), 0x0) 09:14:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x1) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000000)="d5", 0xfffffdc9) dup3(r2, r1, 0x0) 09:14:35 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x7, 0x101000) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000000)="a21f8818b9ae8f466e5be1216ec832bb", 0xffffffffffffffdc) 09:14:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/84, &(0x7f0000000040)=0x54) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup(r0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)) r2 = gettid() tkill(r2, 0x38) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)='\x00'}, 0x30) 09:14:35 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x812, r1, 0x0) pipe(&(0x7f00000001c0)) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$TCGETA(r2, 0x5405, &(0x7f00000000c0)) [ 206.406961] IPVS: length: 84 != 8 [ 206.438931] audit: type=1400 audit(1568538875.263:57): avc: denied { map } for pid=8299 comm="syz-executor.2" path="/dev/nullb0" dev="devtmpfs" ino=14696 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 09:14:35 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x99000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x1, 0x42, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000850}, 0x42004011) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) 09:14:35 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r2}, 0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000300)={r2}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000380)={r2, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}}, [0xffffffffffffff98, 0x8000, 0x100000000, 0x3, 0x20, 0x8, 0x7, 0x8000, 0x1000, 0x7, 0xbe, 0x6, 0x401, 0x9, 0x3ff]}, &(0x7f00000002c0)=0x100) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000280)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r3, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x978, 0x0, 0x0, 0x2, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x20, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext, 0x10101, 0x0, 0x0, 0x7}, r3, 0x0, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r6}, 0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r6}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r6}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f00000001c0)={r7, 0x62, "625186ad2db7d1f0bc94c09d9953a9deeb38887eb04e22c8614abbeba5c0b3dc119fd44be722760a5c85ed1e9c9c12d314098e3de6b46db23ccc9c7ea0ece9b6c4a33467e2daf75dd6b6c9f961a741ae2209e47dfa31b13c5c91a9da119486d068b8"}, &(0x7f0000000240)=0x6a) waitid(0x5, r4, 0x0, 0x1, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x7ffffff7) 09:14:35 executing program 2: r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = syz_open_procfs(r2, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000000)='net/igmp\x00') r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-monitor\x00', 0x105200, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x40, r7, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, '\nblcr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x40}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0xc0, r7, 0x808, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0xfffffcf4, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @rand_addr=0x80000001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffffd}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'bcsh0\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x48000) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x7) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x72}) r8 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2000) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000180)="11dca5055e0bcfe47bf070") close(r8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x8000, 0x0) accept$packet(r10, 0x0, &(0x7f00000002c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) [ 206.786981] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 206.801543] audit: type=1400 audit(1568538875.623:58): avc: denied { map } for pid=8313 comm="syz-executor.2" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=30915 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 09:14:35 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() kcmp(r1, 0x0, 0x4, 0xffffffffffffffff, r0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) r2 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroup.ime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xd}]}, 0x30}}, 0x0) 09:14:35 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4f, 0x0) close(r3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11d3a50d5e0bcfe47bf070") write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000000)={0x2, 0x0, @raw_data=[0x9, 0xffff, 0x7, 0xe26, 0x1, 0x8bd, 0x80000001, 0x6, 0x1, 0xad6, 0x6, 0x21, 0x2, 0x9, 0xa6, 0x3]}) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000080)={0x40, 0x6, 0x401, 0xfff, 0xff}) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000000)={0x2}) signalfd(r6, &(0x7f0000000140)={0x3}, 0x8) 09:14:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x40, &(0x7f0000000040)="11dca5055e0bcfe47bb070") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r1, 0x1f, 0x0) 09:14:35 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x1800, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000a00000/0x600000)=nil, 0x5000) shmctl$SHM_LOCK(r0, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='(),vboxnet0\x00') r1 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl(r1, 0xc2604110, &(0x7f0000000000)) shmget(0x3, 0x2000, 0x100, &(0x7f0000d1f000/0x2000)=nil) 09:14:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r2, 0xfffffffffffffffd, [0x305f, 0xa, 0x300, 0x1800, 0x6000000]}, 0x3c) syz_open_dev$sndseq(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getuid() socketpair$nbd(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000001200)={0xffffffffffffffff}) read(r3, &(0x7f0000ebcf48)=""/184, 0xfffffda6) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x5, 0x9ff71e68589afceb, 0x4, 0x0, {}, {0x3, 0x2, 0x200, 0x4, 0x876, 0x3, "ffb53501"}, 0xa, 0x7, @planes=&(0x7f00000000c0)={0x56, 0x6, @fd=r3, 0x8}, 0x4}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000012c0)) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 09:14:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xd0c8, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000100)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000240)=""/100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106, 0xc}}, 0x20) r2 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)="b7f5fc", 0x3, 0xfffffffffffffffb) keyctl$setperm(0x5, r2, 0xa000800) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) sendto$llc(r3, &(0x7f00000002c0)="9a0e4e1aa22ff3588f53c2c8b803336add55661a8836cb680beaefdac490257bdd74e528d5a0570ae54f0a8ce33ff702dc85280027bcc5185dd31b861850f0994b55635c0a974eb890137579e98c26d587cc2d8acc271b0b1f778816d416725d2dd48258bd4cf725b8825a2b0487e8965416ef91", 0x74, 0x40, &(0x7f0000000340)={0x1a, 0x204, 0x80000000, 0xffffffffffffffe1, 0x8001, 0x81}, 0x10) [ 207.245676] audit: type=1400 audit(1568538876.073:59): avc: denied { map_read map_write } for pid=8337 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 09:14:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$bt_rfcomm(0x1f, 0x2, 0x3) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$FICLONE(r1, 0x40049409, r2) socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0x10) syz_read_part_table(0xfffffffffffffbfd, 0x5, &(0x7f0000000780)=[{&(0x7f0000000380)="75da850e5a413b2e973d109b64cc6c896ef1d0165333044501d4ecdf552e30e5ec17d91122a07fd520de0eb8f731208ba4c71ad74ebf4252b5eca43c9545e2ba46cde179c0df82646e", 0x49, 0x8}, {&(0x7f0000000400)="b5d80dcc3ac96dcacd04fda4386785edce0382a5f30c51d18ac8ef17d182568add483179e9326d68bbb21285e755476ddad5695a76c1cf663ab0c30840497f64f01ffe29f1b3c32497040552dc6aea7d9c319da86dd1638328602aa42de5c26d0c09618d0bf3d56cf4ae517e4ad7976b55e80b0719920c709073e7202ba9bdcb5b6b69bbd4e405a651d97fec2497e87a45a9e5ef3cf28ab86d787516a292200f8712fda3a0e7d8b14c0a76ad5af056994ff6198a53294bd6eb937ba9cf95f3080e09362f81a2e41befa9874385bbfe501222ace2ba49ec16a47fbecc2a337f0a384a851711c21a29f72eef4365", 0xed, 0x100000000}, {&(0x7f0000000500)="030673473850a3b19c5a72a9270918f3c21497fd086976c604c472de24103a05ec60bedcc40df07d0c8e3653d66267682d24d391b98ba0482d98a739502b05562d5938c5e069cf3edc789ef151b18739c3ed5f8dbe46a231fa61731f406cb787752c3376e249ceeef6550b53833ed730b1a208619c94a24d4a7b96da47833ab88d4c70e7e715fe571f6d52fe1a96249eff7ab154ee574100a677b769991fcd6deeb98178d78bfdc3f24c74db4725aec8d51b81dd6c4400eadea01824093a87f8cc45bae9035ada7cbfaf05d2a8d283ce4b5796bfcc7e4d1932692970d8f8661272591687853d23d55c737d94123923c8a4ea42388c6054d6c0e8976dfde458", 0xff, 0x100000000}, {&(0x7f0000000600)="464bd5b31d8e8b8909c83cb36c31e0fefb1234f7b8824b53215951a8986c36e34f72b542f477433f4bee34aabb1a3b2162f8a60f65f802e73e4d03e149b0bcc0d4d260c1119feb47a8e345dd0276aeb1f92345806b1291099d3197e42f577cbb1eb03a81ec7a3625524330311a1ab154dcc5598df9764a29013c6bf8796e17f9d828c3c85430b5a82048ff836dcf6b45c4f942bc589158f3043a2b755d2fa0c0659796b6938ad2909185bd87cbb4f5e7408f7e1284b4f6124cfd", 0xba, 0xc2}, {&(0x7f00000006c0)="7ab1142d5c65c0f30c674e3172e8159810dac1658f3fdbcb7de0f8270ae58dd4932cacdd6cb8c3339674a9d40b4fa21c63844e2cad801162b74f2ef375e648fa94109ecb312e8c75c55100c254539542ee3d70b8d660f55bb85c3cc7d307091b6b273a24306f1002d9ec1d27343462956125afc03055ef6df377e64eba2b9b432b2676bb1d11357cf224af352d594c5fa6bb499eef4e1c2b7d2da5284b0c6ccc6d8a8305531d352e9f", 0xa9, 0x5}]) ioctl(r0, 0x21000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r4 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x80, 0x1) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x4800, 0x0) ioctl$UI_END_FF_ERASE(r5, 0x400c55cb, &(0x7f0000000180)={0x0, 0x8001, 0x3ff}) r6 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r7 = accept$ax25(r6, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) renameat2(r4, &(0x7f0000000280)='./file1\x00', r5, &(0x7f0000000300)='./file0\x00', 0x1) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = add_key$keyring(&(0x7f0000000880)='keyring\x00', &(0x7f00000008c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r9) socketpair(0x3, 0x3, 0x9, &(0x7f0000000140)) setreuid(r3, r8) 09:14:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='\x00)\xa2g\xc0\x06\xec\xf2\xc7(Rw\x8a\xaen<\xd7\x10\x1d\xf3\xb0\xcb\xcb\x86R$Bo\xc5\x14\x01R\xf7\xf3\xeb\xa3\xdf\xe5\xce\xbd\xab\xb7FtK7\x1cM\x1eU\x88\xacN\x87\xfa\xa1\x03\xd7\xd0\n\v\xb0\x1a\xa1\xd8;\xfd\x88\xf1\x13H\xc4\x8e\x1d\x9d\x11\xe8I\xe3\xde\xc7\x18\x18G\x11\xba@,\x94T\xf5@\x81\x81L\x8d\xf1\x8c^\xa4\xb8\xe3]#\xa79\xc4\x95N4\f\xaa\xcd\xf7\f\xdb\x86\xa9\xf5Jn^7 \xde\x0e\xd6\xde1?@\x90\x1bE\x00\xf1\x88+{w\x98\xeb\xb1\x01\xff.\x00\xe0\xff\xff\xdf\xd7\xda\xaf\xbd-\xe4\x90\x88R\x9c\xf2S!rC\'\xea\xdf\x87Q\xf6\xe8D\x01\x04\xd7\xf9B\xcd\xff\x1e/U\x00\xa27\xdc(', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x101100, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x7b7b5029fb3fa4c4) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000080)={0x4, 0x5}) sendfile(r2, r2, &(0x7f0000000200)=0x2000000, 0x100008010a000201) [ 207.546016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:14:36 executing program 2: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x227, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0xd64950b401679ea}, 0x80000) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000180)='X', 0x1, r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0xbde9, @dev={0xfe, 0x80, [], 0xc}, 0xf349}, @in={0x2, 0x4e23, @rand_addr=0x1}, @in6={0xa, 0x4e22, 0x40, @empty, 0x8}], 0x48) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)=@builtin='builtin_trusted\x00') r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x109080, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0)) 09:14:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7bf070") capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000240)='setgroups\x00') r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0xad12, @empty, 0x8000}}, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x7f, 0x2, 0x45d}, &(0x7f0000000080)=0x98) 09:14:36 executing program 0: unshare(0x24020400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1000000000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400001, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x100000000, 0x8, 0x1, r2}) shutdown(r0, 0x0) [ 207.938281] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:14:36 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x80006000005008, 0x0) 09:14:36 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() kcmp(r1, 0x0, 0x4, 0xffffffffffffffff, r0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) r2 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroup.ime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xd}]}, 0x30}}, 0x0) [ 208.079400] syz-executor.4 (8321) used greatest stack depth: 22752 bytes left 09:14:37 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000074c0)=ANY=[@ANYBLOB="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"/666], 0x2) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x400000, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="0deef3ffd4610266decf0ff9c5a5405f5d750f265a9845074c1df0e471bfb116c66807cd9a93ab7592ed816de6a21666282374aadf9951cf2a22d39e0722e0d1f0252558d053915467ed3d0dd9a4794237c28ddf4de9bca99b46a324b9418c753cebd06dec2d282c6c4621c523049ba0a18a75d8c3d29876118d470f2c401d", 0x7f}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @loopback}}}], 0x20}, 0x95) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:14:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x150, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0xfffffffffffffffd}, @TCA_RED_PARMS={0x14}]}}]}, 0x150}}, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000040)='red\x00', &(0x7f0000000080)='nodev\x00', &(0x7f0000000100)='bridge_slave_1\x00', &(0x7f0000000140)='bridge_slave_1\x00'], &(0x7f0000000540)=[&(0x7f00000001c0)='bridge_slave_1\x00', &(0x7f0000000200)='ppp1em0\x00', &(0x7f0000000400)='proctrusted,ppp0-cgroupmime_type[.-&\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='red\x00', &(0x7f00000004c0)='{vboxnet1\x00', &(0x7f0000000500)='bridge_slave_1\x00']) 09:14:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockname(r7, &(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delqdisc={0x114, 0x25, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, r8, {0xffeb, 0x3}, {0xd}, {0xfff2, 0x1}}, [@TCA_RATE={0x8, 0x5, {0x2, 0x4}}, @TCA_RATE={0x8, 0x5, {0x2, 0x2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x800}, @TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0xa4, 0x8, [{{0x1c, 0x1, {0x9, 0x7b, 0xffffffffffffffff, 0x4, 0x4, 0x9, 0x1, 0x8}}, {0x14, 0x2, [0xf3, 0x4, 0x4, 0x401, 0x5, 0x9, 0x0, 0x0]}}, {{0x1c, 0x1, {0x3, 0x6, 0x9, 0x7fffffff, 0x2, 0x100, 0xed, 0x4}}, {0xc, 0x2, [0x3, 0x7, 0x6, 0x9]}}, {{0x1c, 0x1, {0x6, 0x1, 0x9, 0x0, 0x2, 0xa3b5, 0x400000000000003, 0x2}}, {0x8, 0x2, [0x5, 0x2]}}, {{0x1c, 0x1, {0xfffffffffffffffc, 0x200, 0x9, 0x1000, 0x2, 0x0, 0x6d02c6c7, 0x1}}, {0x8, 0x2, [0x401]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x20}, @qdisc_kind_options=@q_fq={{0x8, 0x1, 'fq\x00'}, {0x1c, 0x2, [@TCA_FQ_QUANTUM={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x100}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x3}]}}]}, 0x114}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002500070500000b000000000000000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000240008001c00010000000000000000000000000000000000000000000000000004000200"], 0x48}}, 0x0) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r6}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 09:14:37 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240), 0x4) 09:14:37 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x2400) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000040)={{0x0, @multicast1, 0x4e22, 0x4, 'lblcr\x00', 0x20, 0xfffffffffffffffc, 0x80}, {@loopback, 0x4e20, 0x0, 0x1ba, 0x2, 0x8}}, 0x44) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f00000000c0)=0x81, 0x4) 09:14:37 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@link_local, @dev={[], 0xa}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @mcast2, @local, {[], @tcp={{0x0, 0xc204, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x14000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0x100000001, 0x0, 0x1000}) 09:14:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x2}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40, 0x0) tee(r1, r2, 0x2, 0x1) faccessat(0xffffffffffffffff, 0x0, 0x24, 0x0) 09:14:37 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x0, 0x5}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1205531, &(0x7f0000000000)) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) write$P9_RSTAT(r1, &(0x7f0000000040)={0x71, 0x7d, 0x1, {0x0, 0x29, 0x5, 0x20000000000, {0xb003a371c5a504ee, 0x3, 0x800}, 0x2280000, 0x9, 0x7e, 0x0, 0x5, '\xe2ppp0', 0xc, 'ppp1security', 0x13, '/dev/snd/controlC#\x00', 0x13, '/dev/snd/controlC#\x00'}}, 0x71) 09:14:37 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x40, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) setregid(0x0, 0x0) r1 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfffffe55, 0x100100002) [ 208.770898] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.865582] audit: type=1400 audit(1568538877.683:60): avc: denied { map } for pid=8411 comm="syz-executor.2" path=2F6D656D66643AB3202864656C6574656429 dev="tmpfs" ino=31086 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 09:14:37 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x40, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) setregid(0x0, 0x0) r1 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfffffe55, 0x100100002) [ 209.112517] syz-executor.5 (8386) used greatest stack depth: 22464 bytes left 09:14:38 executing program 0: socket$inet6(0xa, 0x803, 0x80000000000000f) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89a2, &(0x7f0000000240)={'bridge0\x00\x00\x00\x00\x80\x00', 0x0}) 09:14:38 executing program 4: clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000014, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getsig(0x4209, r0, 0x0, 0x0) ptrace$getsig(0x4202, 0xffffffffffffffff, 0x5, &(0x7f0000000000)) 09:14:38 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x94000, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000000c0)) r1 = memfd_create(&(0x7f0000000280)='/dev/input/event#\x00', 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46000000d2000000000000000003003e0000001000000000000000000040000000000000000000000000000000000000100000380002000000000000000300000000000000000000000000000000000000000200000000000000b58000f800000000000000"], 0x68) write$P9_RGETATTR(r1, &(0x7f0000000380)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}}, 0xa0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 09:14:38 executing program 5: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.max\x00', 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x12000) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000000c0)) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r2 = accept$alg(r0, 0x0, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x2}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000000240)={0x74, "dd06be1e37e35fb3a3ce45512f477d9e9b605a194ca2d2e9197fcb269efbc2c1764c121aca084e54720979dddbd71aad9214b456ad2ffef482cbaa1567bd76fd31d89382b0ffa414cf05c7e6c52c219d4c6de86741094315788ccaeab4714c17b0dff98f9f86643120b313cd139648f508bac3dd340dc6240f18260b11e3d3bf"}) prctl$PR_SET_FPEMU(0xa, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaab6e, &(0x7f0000000200)=[{&(0x7f0000000140)="25bca274769e620aa734fa95e0612687463915e3a702a9d8aea872943afd87422f0fb5790300000014650ef4706cffa8c63cd7dcc6910253ef0b2a20a602210318bf7f3f303f51d2afd31c34951dc119dac04eab9c68842086234a45fbe202d60000000002", 0x65, 0x400}], 0x401, 0x0) 09:14:38 executing program 2: mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) r2 = getegid() mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x8, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xd000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x25f}}], [{@context={'context', 0x3d, 'staff_u'}}]}}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f00000002c0)={[], [{@context={'context', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'staff_u'}}]}) [ 209.458132] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 209.460995] SELinux: duplicate or incompatible mount options [ 209.498568] SELinux: duplicate or incompatible mount options 09:14:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002e40)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde6G]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xb4\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\x0f\b\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xf0\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\x06\x00\x00\x00\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4260f68, 0x7, 0x10000, 0x9, 0x6, 0x7}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x2}) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x80, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRESOCT=r1]) [ 209.663059] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 69603176 (only 16 groups) [ 209.698683] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 69603176 (only 16 groups) 09:14:38 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) keyctl$assume_authority(0x10, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c001ecdc633f36efaa780df4ca28fb48c1a3c31eabd546f66516a7863493a8f5a23caf72e5d915ba17aeb01eb9fb183fb1d20c65bc4e34571de819a2121311f67d81539cb0e41bd49ec6412dcf702dc653343c735bbe122eb40e4d05f60d243f26b86224ca2a80b85cb56dfaad45d53258de7a67674b3ee115dd78f4a74a5e2704ca4d9dbfbc43f841333fa247bfa2ab74075ba9e614c444d391630a90ea757ac9e7a3502cc4d288c551199f0a2138cccb927771a7146cba03e408d57cccd2c0647567812420980794f7c2630a90156bdf7d97c22402100"/229]) 09:14:38 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000040)='Mdev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x105000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000085a1d5759b4454667d3100e052896766d850ec4e3c01b8bf11564cede1c8219e090286e1000000000000000000000000000000769b0e468f37dbe07c7e00f04e4cfb5d2fb42f1f6615ffa32075c952bc", @ANYRES16=r4, @ANYBLOB="010000000000000000000f000000180007000c000300000000000000000008000100ff0f0000"], 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa00000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x829}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @remote, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x4100) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r5, 0x501, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7c66}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80080d6}, 0x4) r6 = socket(0x10, 0x802, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) write(r6, &(0x7f0000000040)="240000001a0025f0006bb404faff141c020b5a63515e48d851ff5f10b5fbff116ce20825fdde50e7f5a45c111885fa22a2bac4d198f8975c94bb8ebeb1304deb3a4478f6c185a3281784c2df73fa1ba749d8f8ad671850490775f515a1557d5616685326c9172f895b0a2525d50df969015b6125634bf62cb59f84229ff362e03c190931ce546a52f07dfbc313491e5fa56fd4fd37e6e2a453929f7eb740a21769043f742dbd2f04387ec0857541f538dfb0cb331f3e98f7b5af0d5be8ee2a77cc0633be662aecec4c47c198a5d5c532256aac7bab06c79d477586", 0x89a7f840dc8faae5) [ 209.840378] SELinux: policydb magic number 0x15 does not match expected magic number 0xf97cff8c [ 209.854318] SELinux: failed to load policy 09:14:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6d7e2cf0ff00c3c4556d751426c15c9a9b75bf7a3d1d0dcf11e304b6a69b66a4981341a89944af0a23eff57f", @ANYRES16=r1, @ANYBLOB="150000000000000000000a000000180004000400010062726f6164636173742d6c696e6b0000"], 0x2c}}, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) [ 209.904185] SELinux: policydb magic number 0x15 does not match expected magic number 0xf97cff8c [ 209.929839] SELinux: failed to load policy 09:14:38 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2\x1d\xd7)\x03sag!^D\x8a;\t\x8c\x00n_byt\xb2s', 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000040)='&@[\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='threaded\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp6\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000200), 0x4) 09:14:38 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000100)=""/247, &(0x7f0000000200)=0xf7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) recvmmsg(r2, &(0x7f0000002c80)=[{{&(0x7f0000000440)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x4000) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 09:14:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0x1b) close(r3) r4 = socket(0x10, 0x2, 0xc) write(r4, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r5 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) ioctl$DRM_IOCTL_MODESET_CTL(r6, 0x40086408, &(0x7f0000000180)={0xfffffffffffeffff, 0x3dffda2a}) r7 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, r7}) r9 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r9, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r8, 0xc0000, r9}) write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x17) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 210.110014] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 09:14:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000400)=0x6e) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000540)=ANY=[], 0x0, 0x0) waitid(0x1, r2, 0x0, 0x2, 0x0) setxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)='TRUE', 0x4, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x400, 0x4) r4 = open(&(0x7f00000001c0)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0) r5 = open(&(0x7f00000001c0)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r5, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000480)={@host}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r6 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000900)='X', 0x1, r6) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000040)='\x00', 0x1, r6) add_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)={'s9\x80', 0x2}, &(0x7f0000000640)="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", 0xc00, r6) openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x500580, 0x0) open(0x0, 0x0, 0x0) [ 210.198028] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 09:14:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/connector\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r2}, 0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x0, 0x1, 0x39b, 0x246c, 0x32f5, 0x3, 0x7, r2}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x100000001}, &(0x7f0000000200)=0x8) r4 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x4) read(r4, &(0x7f0000000140)=""/126, 0x7e) r5 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000040)={0x1, ';'}, 0x2) 09:14:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) mmap$perf(&(0x7f00002b8000/0x4000)=nil, 0x4000, 0x0, 0x1010, r0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 09:14:39 executing program 5: r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffff7fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x32}}, 0x0, 0xf, r0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000), 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000140)=""/4096, 0x200000, 0x1000, 0x4}, 0x18) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01004e58", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r2}, 0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r2}, 0x8) recvmsg$kcm(r0, &(0x7f0000001680)={&(0x7f00000011c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001240)=""/203, 0xcb}, {&(0x7f0000001340)=""/130, 0x82}, {&(0x7f0000001400)=""/41, 0x29}, {&(0x7f0000001440)=""/198, 0xc6}, {&(0x7f0000001540)=""/7, 0x7}, {&(0x7f0000001580)=""/18, 0x12}], 0x6, &(0x7f0000001640)=""/38, 0x26}, 0x1141) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001140)={r2}, &(0x7f0000001180)=0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r3, 0x0, 0x0) connect$l2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto$inet6(r3, 0x0, 0xfffffffffffffe07, 0x0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x1a}}, 0x1c) sendmmsg(r4, &(0x7f0000005fc0), 0xa9, 0x0) 09:14:39 executing program 2: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/158, 0x9e) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000000c0)={0x57, 0x2}) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x1) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000180)) fcntl$setlease(r1, 0x400, 0x2) 09:14:39 executing program 5: fanotify_init(0x12, 0x101000) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='fdinfo/3\x00') sendfile(r0, r2, 0x0, 0x1000000000e6) 09:14:39 executing program 2: socket(0x40000000015, 0x5, 0x0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x25a0c1, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0x6, 0xba, 0x800000000002b5}, &(0x7f00000004c0)=0x5) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in={{0x2, 0x0, @dev}}}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80040, 0x0) r3 = fcntl$getown(r2, 0x9) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, @perf_config_ext}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000000)={0x2}) r8 = dup3(r7, 0xffffffffffffffff, 0x32e7e724c5134ee3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r9}, 0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r9}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e21, 0xda, @loopback, 0x7}}}, &(0x7f0000000040)=0x84) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r5, 0x5) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x36) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) mkdir(&(0x7f0000000040)='./file0/file1\x00', 0x0) setuid(0xee01) rmdir(&(0x7f0000000100)='./file0/file1\x00') socket$inet6_sctp(0xa, 0x5, 0x84) accept4(r5, 0x0, 0x0, 0x0) [ 210.683027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=8500 comm=syz-executor.5 09:14:39 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) setsockopt(r1, 0x4, 0xffffffff, &(0x7f0000000000)="2fe9be13c27b1bd39dc98f8d6ce9a4768b50296ed52af5a48c88bb609009373074b47156fee5ab91949d743fc4365ac0148c89445bf6cddb290f9ac176948370dab52888dc7950a5a962a51775939a2a411e84ac08fc6e61221dd0ee7cc8eaf42c541fb1a6bd96cfc05a9269", 0x6c) 09:14:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x1, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000109090268fe07002b00000001000a0014000200450001070300001419001a00120002000e00010005000300"/57, 0x39}], 0x1) [ 210.971373] audit: type=1400 audit(1568538879.793:61): avc: denied { setopt } for pid=8507 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 210.976112] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. 09:14:39 executing program 5: clone(0x1200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 211.109835] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. 09:14:40 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="fc00000048000703ab092500090007000a010000000000000000e293210001c000000000000000000000000000039815fa2c1ec28656aaa79bb94b46fe000013bc00020000036c6c256f1a272fdf0d11512fd633d44000000007008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190215b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41000000", 0xfc) socket$inet6_udp(0xa, 0x2, 0x0) 09:14:40 executing program 3: clone(0x4400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="0000c7a8acddbf1d49833eb669fbbf00753f47cceeaa134c8e5ab447dc32bc91f966528714566eb1b7b21e2d1f91f324430799b5c8df35f4f44a7433ece75bd8ca4741ff44d00ba11b903a685142", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r1}, 0xc) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x8, 0x7d09, 0x2, {0x9, @raw_data="6d140468d0dd0391732489e7f65621d8b13bcfb925fcabf2e02682fc68499796dd33429dd7cd974d21ad695a7bab6c22367464e5ac2e7f6b94fc54de89fb089da85c0ff103744ada04ace2b225dff05b4071c03fd23f07ca93b32f2b4b3aeb2659aebe56da92976881d7b304ab9cdc462556b9d23f3e6680729f8927549e9be97490f66c7090d3911c41678d114cd372153534e3c7f4d2d2f29e37a3f692bc386e0ec1113a5a14b94ba3be29522536f63e16d88043f0ca96f993c51b44b02fa7597d940f24a6d2b9"}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'ip6erspan0\x00', 0x1000}) r3 = shmget$private(0x0, 0x2000, 0x1800, &(0x7f0000ffd000/0x2000)=nil) shmat(r3, &(0x7f0000a00000/0x600000)=nil, 0x5000) shmctl$IPC_RMID(r3, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000640)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f00000002c0)=0xe8) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@empty, @in6=@rand_addr="49bfc7e5eb1ac788430b4c4349443b03", 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x20, 0x29, 0x0, r7}, {0x3, 0x40000000002, 0x0, 0x0, 0x7, 0x0, 0x100}, {0x9, 0x4, 0x2}, 0x7, 0x6e6bbc, 0x1, 0x1, 0x0, 0x2}, {{@in=@empty}, 0x0, @in=@empty, 0x3501, 0x3, 0x0, 0xffe00, 0x0, 0x2}}, 0xe8) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000000)={0x2}) r9 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000000)={0x2}) fstat(r9, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000580)=0x0) r12 = getpgrp(0x0) r13 = gettid() rt_tgsigqueueinfo(r12, r13, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffa}) shmctl$IPC_SET(r3, 0x1, &(0x7f00000005c0)={{0x400, r5, r6, r7, r10}, 0x6, 0x9, 0xbb, 0x1, r11, r12, 0x2}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r1}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={r1, 0x0, 0x81, 0x5, 0x1, 0x4853, 0x2, 0x1, {0x0, @in6={{0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, [], 0x29}, 0x949}}, 0x3, 0x1, 0x81, 0x2, 0x100000000}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={r14, 0xabbc}, &(0x7f0000000140)=0x8) 09:14:40 executing program 4: sysinfo(&(0x7f0000000040)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001000)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\n\xea:\x01\x00\x00\x03', @ifru_flags=0x14}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@empty, @in6=@rand_addr="49bfc7e5eb1ac788430b4c4349443b03", 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x20, 0x29, 0x0, r1}, {0x3, 0x40000000002, 0x0, 0x0, 0x7, 0x0, 0x100}, {0x9, 0x4, 0x2}, 0x7, 0x6e6bbc, 0x1, 0x1, 0x0, 0x2}, {{@in=@empty}, 0x0, @in=@empty, 0x3501, 0x3, 0x0, 0xffe00, 0x0, 0x2}}, 0xe8) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x81, 0x40000) connect$caif(r2, &(0x7f0000000080)=@dbg={0x25, 0x5, 0x9}, 0x18) r3 = add_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000001c0)="003b849495d57633513dea67b4325fe68f3b22e60c5b3e7991a4c73cc16e522f64703698715da63f74c3e16c15212546c82bbfc594359ce4167a141661d9941c97ee23df4ddd4b05a3da6441c95065b6fcb9091cae4a2e74257fc490579a01dae1298505b4b8f59c9d84e7840000000001000000ff1694f13a9d50e7000000", 0xfffffffffffffe31, 0x0) r4 = add_key(0x0, &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000800)='S', 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r4) keyctl$update(0x2, r4, &(0x7f0000000100)="9a2f74736fc033be773ff1c0d6e2ebe9552283ea89c69356883e7384ba07d424157a810fc4e1972cc4c46d980488e6745149896a38105a40d8e0a8ed36d6f6ff0c82cb7a6bba2bb6eeed98a552676dedd940e3", 0x53) keyctl$revoke(0x3, r3) keyctl$get_persistent(0x16, r1, r3) 09:14:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x100020) socket(0x11, 0x4, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000080)=0x8d) r2 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r2, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x0, r2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x2}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x28802, 0x0) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000240)={0x100, "0d531b0c6da7c122e4f91a6d6206b6b1f83eeb80f1f3d1b5be965aa070691199", 0x40, 0x6, 0x6, 0x1, 0x2}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) 09:14:40 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) memfd_create(0x0, 0x0) socket(0x840000000002, 0x3, 0xff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x2}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x2}) tee(r1, r2, 0x1, 0x4) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0xc0000, r3}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x101500) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000180)={r6, &(0x7f0000000080)=""/247}) ioctl$DRM_IOCTL_GET_CTX(r5, 0xc0086423, &(0x7f0000000140)={r6, 0x1}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000140)={r6, 0x34}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) io_submit(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000840}, 0x3886a8a7fca6d47b) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf60300000000ff00}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 09:14:40 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x1c) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0xaad699c8ab81cc9c, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x22440002}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x19}, 0x20000000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xfa93a9639afab525}, 0x4004008) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2b7069647320412c5ec7b5d90762f8ba9fe8ee7e083311af7cb115b708409b4e3fa972722ab7c89206bb6f6aee370fb8e7572bcd829a59c0e4e9af796410d43ec8818253da71fa1b6b4ed383c004ca276a75e6c87304b63b98dab37664c98904cb9639bf4b91d78f4ce4a35762ba803bb0aa07717d5c3e909d253ce3ef52d352ed9e0518d43a170ea8f70daf282682ea5e5a29ae1266f169f0dcd24a3d11c633af74dd3ac2ac46fd62ad075e989e5ab6f14a1d6e8f0d35ea51e18be5672af0"], 0xbf) write$cgroup_subtree(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="2d7069647320171998fc238a409effd59ae17b84c4d7ae14e180c3988da3138972def5c9fcf30f151305a1440ba94487909528260516fc74e725bfb460b602fc8bfad2308022f2ecc387467bd909dcd9c3784b6e740e2c12e51ae4e400"/108], 0x6) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = signalfd4(0xffffffffffffff9c, &(0x7f0000002880)={0x1}, 0x8, 0x80800) r5 = syz_open_dev$vcsa(&(0x7f0000001640)='/dev/vcsa#\x00', 0x400, 0x8242) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f00000016c0)=0xfffffffffffffffb) ioctl$FICLONE(r4, 0x40049409, r5) accept4$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002800)=0x14, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001740)={r5, 0x1b, 0x0, 0x6, &(0x7f0000001700)=[0x0], 0x1}, 0x20) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @pic={0x3, 0x0, 0x1000, 0x6, 0x8, 0x356f, 0x2, 0x0, 0x10000, 0x3, 0xcb, 0x3, 0x8020000000000000, 0x0, 0x0, 0x10000}}) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4e", 0x3b, 0x11, 0x0, 0x0) [ 212.120670] overlayfs: failed to resolve './file1': -2 [ 212.173546] overlayfs: failed to resolve './file1': -2 09:14:41 executing program 5: rt_sigprocmask(0x0, &(0x7f0000000080)={0xfffffffffffffffd}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x2, &(0x7f0000000180)=0x0) io_submit(r2, 0x1ffffd0a, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0}]) 09:14:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x8b}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={r1, 0x2}, &(0x7f0000000140)=0x8) pipe2(&(0x7f0000000880)={0xffffffffffffffff}, 0x4000) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000008c0)={0x0, 0xcd3}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000940)={r5, 0xffffffff, 0x93a, 0xf56, 0x6, 0x7fff, 0x4, 0x9, {r2, @in6={{0xa, 0x4e22, 0x1, @mcast1, 0xfffffffffffffff8}}, 0x0, 0x4, 0x4, 0x1, 0x21}}, &(0x7f0000000a00)=0xb0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef622b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae557511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac000000000000", 0x6ae4, 0x4000002, 0x0, 0x25) 09:14:41 executing program 2: setresuid(0x0, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f00000002c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000300)) 09:14:41 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x5, 0x7}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) [ 212.462632] protocol 88fb is buggy, dev hsr_slave_0 [ 212.468074] protocol 88fb is buggy, dev hsr_slave_1 09:14:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440fbf79007dd09386b8bba9b40670a02d3bd7b5324ef81cdd7c0d70c191b6c5232313520d184ab5dbc7122277dba85f924869c4392d4caece9d983d0853f8638b80293e3878c0ac1d6d1c207937df18d71b559ab940ecba6a247a5b0fa034fb2e178f654cf1768e2086def7a0276b0d7532b5e195b6f1a12afb399d802b8bbcae125cbb9943dce9d9d1f752aac1b33ada8f701a230a9f6152dd145ac8bc0ecac1802cd1dac"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000380)=[@clear_death={0x40046306, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) [ 212.669442] audit: type=1400 audit(1568538881.473:62): avc: denied { set_context_mgr } for pid=8560 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 09:14:41 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x9943}}) 09:14:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{&(0x7f0000000440)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/223, 0xdf}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/195, 0xc3}, {&(0x7f0000000240)=""/53, 0x35}], 0x4, &(0x7f0000001800)=""/198, 0x36c}, 0x9}], 0x1, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) 09:14:41 executing program 5: r0 = add_key(0x0, &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000800)='S', 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r0) r1 = add_key(0x0, &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000800)='S', 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r1) r2 = add_key(0x0, &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000800)='S', 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r2) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setreuid(0x0, r6) r7 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r8 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r8, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0xa) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000100)={0xd4, 0x7}) keyctl$chown(0x4, r4, r6, 0x0) [ 213.344587] protocol 88fb is buggy, dev hsr_slave_0 [ 213.351066] protocol 88fb is buggy, dev hsr_slave_1 [ 213.405876] device bridge_slave_1 left promiscuous mode [ 213.411902] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.497567] device bridge_slave_0 left promiscuous mode [ 213.522558] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.755621] device hsr_slave_1 left promiscuous mode [ 213.816979] device hsr_slave_0 left promiscuous mode [ 213.877849] team0 (unregistering): Port device team_slave_1 removed [ 213.902807] team0 (unregistering): Port device team_slave_0 removed [ 213.931110] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 213.998036] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 214.109097] bond0 (unregistering): Released all slaves [ 216.561989] IPVS: ftp: loaded support on port[0] = 21 [ 216.728101] chnl_net:caif_netlink_parms(): no params data found [ 216.801499] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.813644] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.820958] device bridge_slave_0 entered promiscuous mode [ 216.834228] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.840730] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.853906] device bridge_slave_1 entered promiscuous mode [ 216.879666] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 216.895339] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 216.919999] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 216.933536] team0: Port device team_slave_0 added [ 216.939422] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 216.952064] team0: Port device team_slave_1 added [ 216.959730] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 216.967893] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 217.034464] device hsr_slave_0 entered promiscuous mode [ 217.072834] device hsr_slave_1 entered promiscuous mode [ 217.113050] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 217.120089] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 217.135053] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.141420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.148102] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.154473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.188205] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 217.194967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.204194] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 217.213904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.221096] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.228003] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.235341] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 217.245529] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 217.252039] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.262888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.270497] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.276889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.288085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.295874] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.302314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.317560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.328411] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.342609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.352499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.363131] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 217.369826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.378253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.386053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.398982] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 217.405733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.417512] 8021q: adding VLAN 0 to HW filter on device batadv0 09:14:46 executing program 4: clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) 09:14:46 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000540)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES16]]], 0x1}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) msgget$private(0x0, 0x8c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000340)={0xdf, 0x0, {0x0, 0x0, 0x0, 0x1}}) msgctl$IPC_RMID(0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="840000ca", @ANYRES16=r4, @ANYBLOB="000200000000fcdbdf2516000000500004002c000700080003000000000008000400ffffffff0800020062010000080002000000008008000200909900000c00010073797a30000000001400010062726f6164636173742d6c696e6b00001c0004000c00070008000100110000000c00010073797a30000000b706000000"], 0x84}, 0x1, 0x0, 0x0, 0x21}, 0x2002c0da) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0xe8, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa31}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x309}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd8}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd906}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800000000000}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x42081) 09:14:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000300)={0x3, &(0x7f0000000180)=[{0x8, 0x2, 0x2}, {0x80000000, 0x8, 0x0, 0x1ff}, {0x100000000, 0xee9, 0x100, 0x1}]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r4, 0xfffffffffffffffe}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x20c}}, 0x20) r5 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x8000, 0x0, 0x2, 0x8001}) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000000100)={0xe21, r6}) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0xf, 0x10f, {0x0, r1, 0x2}}, 0x18) 09:14:46 executing program 2: clone(0x206, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x1) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000001ac0)=""/11, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) execveat(0xffffffffffffff9c, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) 09:14:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80000, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x7, {0x100000000, 0x5, 0x0, 0x6, 0x80}, 0x1ff, 0x200}, 0xe) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/vcs\x00', 0x42002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x95, 0x209e1e, 0x2000003, 0x1, r3}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x28, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r5}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r5, 0x7, 0x10}, 0xc) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={r5, 0x4, 0x20}, 0xc) r7 = getpgrp(0x0) gettid() rt_tgsigqueueinfo(r7, 0xffffffffffffffff, 0x14, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r8, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xff00, 0x65f40}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r10) r11 = getpgrp(0x0) r12 = gettid() rt_tgsigqueueinfo(r11, r12, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffa}) r13 = getpgid(r12) stat(&(0x7f0000000740)='./bus/file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = getpgrp(0x0) r18 = gettid() rt_tgsigqueueinfo(r17, r18, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@empty, @in6=@rand_addr="49bfc7e5eb1ac788430b4c4349443b03", 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x20, 0x29, 0x0, r19}, {0x3, 0x40000000002, 0x0, 0x0, 0x7, 0x0, 0x100}, {0x9, 0x4, 0x2}, 0x7, 0x6e6bbc, 0x1, 0x1, 0x0, 0x2}, {{@in=@empty}, 0x0, @in=@empty, 0x3501, 0x3, 0x0, 0xffe00, 0x0, 0x2}}, 0xe8) r20 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r20, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r20, 0x4020565a, &(0x7f0000000000)={0x2}) fstat(r20, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f00000009c0)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x20, 0x29, 0x0, r23}, {0x3, 0x40000000002, 0x0, 0x0, 0x7, 0x0, 0x100}, {0x9, 0x4, 0x2}, 0x7, 0x6e6bbc, 0x1, 0x1, 0x0, 0x2}, {{@in=@empty}, 0x0, @in=@empty, 0x3501, 0x3, 0x0, 0xffe00, 0x0, 0x2}}, 0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r24) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r25) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r26) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r27) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r28) getgroups(0x6, &(0x7f0000000a00)=[r24, 0xffffffffffffffff, r25, r26, r27, r28]) r30 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r30, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r30, 0x4020565a, &(0x7f0000000000)={0x2}) r31 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r31, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r31, 0x4020565a, &(0x7f0000000000)={0x2}) r32 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r2, &(0x7f0000000b40)={&(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x90040248}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="20000000190000022bbd7000fddbdf2508001100", @ANYRES32, @ANYBLOB="08000f08", @ANYRES32=r6], 0x20}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r16, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r18, @ANYRES32=r19, @ANYRES32=r21, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r22, @ANYRES32=r23, @ANYRES32=r29, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r30, @ANYBLOB="24010000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r31, @ANYRES32=r32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x40000}, 0xf5300f28b55d0870) r33 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r33, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000000000)={0x200000002, 0x70, 0x200e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f0000000140)='bfs\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x4, &(0x7f0000000580)=[{&(0x7f00000001c0)="3adf9c689e9ca9ac20079bc8e1b120beb512d2fa077215be92416fc6790128b753c4175ad43d43ff24bae9abd64933a5de41bf348061b2000fafb57e869dc7f3cc6e2535c2181b9c7c37caff49df97a10de49434c383be91dcbab93b9add8842eb59b4828879e7a30ef2fea6e3262504aef30132217ea4fc3e515ddc5f3561455dbd7af486d7a0d4c3e2d912d8", 0x8d, 0x7}, {&(0x7f0000000300)="806488655c2968f1e8e36e9ce5a3c86cb784c2d7e0879a21235accb1ac851ddf00649b4f4665c3096aa3b5f76ee90c3bb7676a395a83f060c39cd30f9ff00ce5a5c02fef6d2eaa999eecba7f1afebf84e670698b9fc4196fc9b805325a4941acfa97d5d54dfda3449d5af04a9a81d022c87b45b0e266ddf89c7436935c4ab66bc2955c7a1819a7edd7", 0x89}, {&(0x7f00000003c0)="ec81ff79fac89175b674a04a9956ad83d9740f68dfadc1333f705f53773c0905f1eaab24923f1d983484fe2f77c3547725e05f4cd510babd959a67aee5d63e9b2f7011c490d27a8c94331488e76aa9321e1c460843154e7faec1942dda5b5ce2f5b42690ba7f4375", 0x68, 0x8}, {&(0x7f0000000480)="3d8ac2ef44edc8575c3b841f48a58a1fa2adc79c70223a6c64feecdd03350a33e3940fef17daef2f5d5a1e2148fca70dfc1b39fcdfa3bf58bf62d51e6795792b9b6ef31f58dba5b278cfd4cf515d8cacedf2091d29de345a7be2e337c85d199d9725fd1539908be83445685d1a8a4e55c034ea5343a460b60177d8fa7fd1a5c4e21626899b0b0a89081640041d2bfbe2cc4bd900f746ac09826a5a6156bb8a7d06e6e7cb109d3c4d99a131b066a647439eaae0615329c92fccaba0a8", 0xbc, 0x3}], 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) stat(0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r33, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r34, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r33, &(0x7f0000000800)="371d848c24591792863b2d5d6bc3c76a000001000000000079e6ae1a07de1d42fd46fdfada485aaea1cda588838353786b2ff4f7b644e0839054fcd3486dfe9795b35eae35042b0ae441065b6570a16e9f59424cf705c5958d33fbfcec4080876e65ccb6cc4a9a8e6a0f46559eb725fdab41865ab93895a77a3e494f920e9617dc006dcbe35e9ff7112f2a58bbd9f7123b6661186821900b092f90a53e27d726e56671cc23bf1472b65c3131051de54ab9b1fe6b7b515163790da97ebdaf688dc5b30aed84cbb5c86c3c0a64548106e6a4bfd61442897160333d8ad0b914906fb8839422a3", 0x2c84e1972a71ed36}]) r35 = inotify_init1(0x0) r36 = inotify_add_watch(r35, &(0x7f00000002c0)='./file0\x00', 0x1000001) inotify_rm_watch(r35, r36) inotify_rm_watch(0xffffffffffffffff, r36) 09:14:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{&(0x7f0000000440)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/223, 0xdf}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/195, 0xc3}, {&(0x7f0000000240)=""/53, 0x35}], 0x4, &(0x7f0000001800)=""/198, 0x36c}, 0x9}], 0x1, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) lchown(0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') 09:14:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "001300", 0x8, 0x87, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 09:14:46 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000008880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/62, 0x3e}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountinfo\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000e1, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) [ 217.591618] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000) 09:14:46 executing program 4: 09:14:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x0, &(0x7f00000000c0)=0x0) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x60ffffffffff, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)="10000040040000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d44954", 0x86}]) io_submit(r1, 0x1, &(0x7f0000000340)=[0x0]) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xc000000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 217.929006] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000) 09:14:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@dev}, {@in6=@empty, 0x0, 0x33}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) 09:14:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) 09:14:46 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffffffffffffffa, 0x4, {0x2, @raw_data="f79dd9524c61a7945790ca039664a46fa42cebdb98d059820d5a05496951095404dc369b487724b2cff745d5d908c9f0ea97b24954fbbd2f2ec1168573f130109611459c0df2733e93be33680e0e1fa26ffc8b668ecb501a181f33f5f0ee6b24d43cac905e9d1d35204a1084bd03ee2a4976b814f77784ab1a762ea8ed910b2b9dd87991ab05725ba663e0e4e37f7583203f4e144fdce1d512a0a3a0c2f611c52f4a9f9fc5f87d3258c77dd06c829e577151783ee64c56779e260d180578c6980e0d09c002f75222"}}) ioctl$VIDIOC_S_FMT(r0, 0x40045612, &(0x7f00000001c0)={0x2}) [ 218.261176] ================================================================== [ 218.268815] BUG: KASAN: use-after-free in v4l2_ctrl_grab+0x159/0x160 [ 218.275318] Read of size 8 at addr ffff888081e3c3e0 by task syz-executor.5/8662 [ 218.282772] [ 218.284410] CPU: 1 PID: 8662 Comm: syz-executor.5 Not tainted 4.19.72 #0 [ 218.291249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.300725] Call Trace: [ 218.303338] dump_stack+0x172/0x1f0 [ 218.306993] ? v4l2_ctrl_grab+0x159/0x160 09:14:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) [ 218.311158] print_address_description.cold+0x7c/0x20d [ 218.316643] ? v4l2_ctrl_grab+0x159/0x160 [ 218.320810] kasan_report.cold+0x8c/0x2ba [ 218.324961] ? vidioc_querycap+0x110/0x110 [ 218.329308] __asan_report_load8_noabort+0x14/0x20 [ 218.334248] v4l2_ctrl_grab+0x159/0x160 [ 218.338237] ? vidioc_querycap+0x110/0x110 [ 218.342482] vicodec_stop_streaming+0x158/0x1a0 [ 218.347171] ? vicodec_return_bufs+0x220/0x220 [ 218.351779] __vb2_queue_cancel+0xb1/0x790 [ 218.356023] ? vidioc_querycap+0x110/0x110 [ 218.360279] ? dev_debug_store+0x110/0x110 [ 218.364530] vb2_core_queue_release+0x28/0x80 [ 218.369036] vb2_queue_release+0x16/0x20 [ 218.373115] v4l2_m2m_ctx_release+0x2d/0x40 [ 218.377448] vicodec_release+0xc0/0x120 [ 218.381433] v4l2_release+0xf9/0x1a0 [ 218.385152] __fput+0x2dd/0x8b0 [ 218.388430] ____fput+0x16/0x20 [ 218.391702] task_work_run+0x145/0x1c0 [ 218.395591] exit_to_usermode_loop+0x273/0x2c0 [ 218.400171] do_syscall_64+0x53d/0x620 [ 218.404056] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.409302] RIP: 0033:0x4135d1 [ 218.412514] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 218.431515] RSP: 002b:00007ffd310731a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 218.439220] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004135d1 [ 218.446478] RDX: 0000001b2ce20000 RSI: 0000000000000000 RDI: 0000000000000003 [ 218.453736] RBP: 0000000000000001 R08: 000000005027f4bc R09: 000000005027f4c0 [ 218.460999] R10: 00007ffd31073280 R11: 0000000000000293 R12: 000000000075bf20 [ 218.468267] R13: 000000000003546c R14: 0000000000760670 R15: ffffffffffffffff [ 218.476578] [ 218.478192] Allocated by task 8663: [ 218.481814] save_stack+0x45/0xd0 [ 218.485276] kasan_kmalloc+0xce/0xf0 [ 218.488977] __kmalloc_node+0x51/0x80 [ 218.492776] kvmalloc_node+0x68/0x100 [ 218.496564] v4l2_ctrl_new.part.0+0x214/0x1450 [ 218.501135] v4l2_ctrl_new_std+0x22d/0x360 [ 218.505359] vicodec_open+0x1a8/0xb30 [ 218.509145] v4l2_open+0x1b2/0x360 [ 218.512669] chrdev_open+0x245/0x6b0 [ 218.516370] do_dentry_open+0x4c3/0x1210 [ 218.520424] vfs_open+0xa0/0xd0 [ 218.523692] path_openat+0x10d7/0x45e0 [ 218.527585] do_filp_open+0x1a1/0x280 [ 218.531398] do_sys_open+0x3fe/0x550 [ 218.535111] __x64_sys_openat+0x9d/0x100 [ 218.539176] do_syscall_64+0xfd/0x620 [ 218.542968] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.548145] [ 218.549760] Freed by task 8662: [ 218.553029] save_stack+0x45/0xd0 [ 218.556471] __kasan_slab_free+0x102/0x150 [ 218.560707] kasan_slab_free+0xe/0x10 [ 218.564493] kfree+0xcf/0x220 [ 218.567585] kvfree+0x61/0x70 [ 218.570681] v4l2_ctrl_handler_free+0x4a8/0x7e0 [ 218.575338] vicodec_release+0x6b/0x120 [ 218.579321] v4l2_release+0xf9/0x1a0 [ 218.583040] __fput+0x2dd/0x8b0 [ 218.586312] ____fput+0x16/0x20 [ 218.589588] task_work_run+0x145/0x1c0 [ 218.593473] exit_to_usermode_loop+0x273/0x2c0 [ 218.598048] do_syscall_64+0x53d/0x620 [ 218.601928] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.607101] [ 218.608716] The buggy address belongs to the object at ffff888081e3c3c0 [ 218.608716] which belongs to the cache kmalloc-256 of size 256 [ 218.621450] The buggy address is located 32 bytes inside of [ 218.621450] 256-byte region [ffff888081e3c3c0, ffff888081e3c4c0) [ 218.633276] The buggy address belongs to the page: [ 218.638197] page:ffffea0002078f00 count:1 mapcount:0 mapping:ffff88812c3f07c0 index:0x0 [ 218.646462] flags: 0x1fffc0000000100(slab) [ 218.650695] raw: 01fffc0000000100 ffffea00026f2a48 ffffea00023e1f08 ffff88812c3f07c0 [ 218.658571] raw: 0000000000000000 ffff888081e3c000 000000010000000c 0000000000000000 [ 218.666463] page dumped because: kasan: bad access detected [ 218.672156] [ 218.673765] Memory state around the buggy address: [ 218.678681] ffff888081e3c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 218.686043] ffff888081e3c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 218.693389] >ffff888081e3c380: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 218.700732] ^ [ 218.707301] ffff888081e3c400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 218.714650] ffff888081e3c480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 218.721994] ================================================================== [ 218.729349] Disabling lock debugging due to kernel taint [ 218.745626] Kernel panic - not syncing: panic_on_warn set ... [ 218.745626] [ 218.753033] CPU: 0 PID: 8662 Comm: syz-executor.5 Tainted: G B 4.19.72 #0 [ 218.761420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.770761] Call Trace: [ 218.773348] dump_stack+0x172/0x1f0 [ 218.776968] ? v4l2_ctrl_grab+0x159/0x160 [ 218.781101] panic+0x263/0x507 [ 218.784285] ? __warn_printk+0xf3/0xf3 [ 218.788158] ? v4l2_ctrl_grab+0x159/0x160 [ 218.792298] ? preempt_schedule+0x4b/0x60 [ 218.796478] ? ___preempt_schedule+0x16/0x18 [ 218.803934] ? trace_hardirqs_on+0x5e/0x220 [ 218.808242] ? v4l2_ctrl_grab+0x159/0x160 [ 218.812377] kasan_end_report+0x47/0x4f [ 218.816353] kasan_report.cold+0xa9/0x2ba [ 218.820501] ? vidioc_querycap+0x110/0x110 [ 218.824724] __asan_report_load8_noabort+0x14/0x20 [ 218.829651] v4l2_ctrl_grab+0x159/0x160 [ 218.833613] ? vidioc_querycap+0x110/0x110 [ 218.837835] vicodec_stop_streaming+0x158/0x1a0 [ 218.842508] ? vicodec_return_bufs+0x220/0x220 [ 218.847088] __vb2_queue_cancel+0xb1/0x790 [ 218.851317] ? vidioc_querycap+0x110/0x110 [ 218.855536] ? dev_debug_store+0x110/0x110 [ 218.859756] vb2_core_queue_release+0x28/0x80 [ 218.864239] vb2_queue_release+0x16/0x20 [ 218.868288] v4l2_m2m_ctx_release+0x2d/0x40 [ 218.872595] vicodec_release+0xc0/0x120 [ 218.876555] v4l2_release+0xf9/0x1a0 [ 218.880258] __fput+0x2dd/0x8b0 [ 218.883532] ____fput+0x16/0x20 [ 218.886801] task_work_run+0x145/0x1c0 [ 218.890678] exit_to_usermode_loop+0x273/0x2c0 [ 218.895260] do_syscall_64+0x53d/0x620 [ 218.899139] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.904316] RIP: 0033:0x4135d1 [ 218.907507] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 218.926483] RSP: 002b:00007ffd310731a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 218.934178] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004135d1 [ 218.941429] RDX: 0000001b2ce20000 RSI: 0000000000000000 RDI: 0000000000000003 [ 218.948683] RBP: 0000000000000001 R08: 000000005027f4bc R09: 000000005027f4c0 [ 218.955938] R10: 00007ffd31073280 R11: 0000000000000293 R12: 000000000075bf20 [ 218.963209] R13: 000000000003546c R14: 0000000000760670 R15: ffffffffffffffff [ 218.972120] Kernel Offset: disabled [ 218.975801] Rebooting in 86400 seconds..