[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
Starting mcstransd: 
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c.
[   70.519862][   T26] kauditd_printk_skb: 8 callbacks suppressed
[   70.519876][   T26] audit: type=1400 audit(1575396297.536:41): avc:  denied  { map } for  pid=9694 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.196' (ECDSA) to the list of known hosts.
2019/12/03 18:05:04 fuzzer started
syzkaller login: [   77.083917][   T26] audit: type=1400 audit(1575396304.106:42): avc:  denied  { map } for  pid=9703 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
2019/12/03 18:05:06 dialing manager at 10.128.0.26:35703
2019/12/03 18:05:13 syscalls: 2712
2019/12/03 18:05:13 code coverage: enabled
2019/12/03 18:05:13 comparison tracing: enabled
2019/12/03 18:05:13 extra coverage: extra coverage is not supported by the kernel
2019/12/03 18:05:13 setuid sandbox: enabled
2019/12/03 18:05:13 namespace sandbox: enabled
2019/12/03 18:05:13 Android sandbox: /sys/fs/selinux/policy does not exist
2019/12/03 18:05:13 fault injection: enabled
2019/12/03 18:05:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/12/03 18:05:13 net packet injection: enabled
2019/12/03 18:05:13 net device setup: enabled
2019/12/03 18:05:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2019/12/03 18:05:13 devlink PCI setup: PCI device 0000:00:10.0 is not available
18:06:58 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
unshare(0x28000400)
r2 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0)
flock(r2, 0x0)

[  191.291899][   T26] audit: type=1400 audit(1575396418.316:43): avc:  denied  { map } for  pid=9719 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=19146 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
18:06:58 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(&(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000240))
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0)
write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x124a2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r2)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)

[  191.524963][ T9720] IPVS: ftp: loaded support on port[0] = 21
18:06:58 executing program 2:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000003200015819aad20200ffffffff0000001400010010000100050003000000030000000000669a81243862356c2148a1bca9bb7cc7a1752ca3f5aa42598e130dd3adae4fce984a556534e4a4b83e7e5b8e054a8e2a29134c8036eb2b21d3f3d634e642874e9774333d31c89104155bc2cb8c65a648be4206810905dc89e4d27a621a7f65544e97177257b8712688db6d557334ab54"], 0x28}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492540, 0x0)

[  191.703387][ T9723] IPVS: ftp: loaded support on port[0] = 21
[  191.703409][ T9720] chnl_net:caif_netlink_parms(): no params data found
[  191.809792][ T9720] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.818292][ T9720] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.827242][ T9720] device bridge_slave_0 entered promiscuous mode
[  191.838769][ T9720] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.846809][ T9720] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.855372][ T9720] device bridge_slave_1 entered promiscuous mode
[  191.883258][ T9720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.897033][ T9720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.978657][ T9720] team0: Port device team_slave_0 added
[  192.005644][ T9720] team0: Port device team_slave_1 added
[  192.025993][ T9726] IPVS: ftp: loaded support on port[0] = 21
[  192.034111][ T9723] chnl_net:caif_netlink_parms(): no params data found
18:06:59 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500028cfc000543280000000000421ba3a20400ff7e280000001100ff", 0x2b}], 0x1}, 0x0)
r2 = socket$inet(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000040)="240000001e005f3814fffffffff807000000000000000000000008000800080000b70000", 0x52)

[  192.114914][ T9720] device hsr_slave_0 entered promiscuous mode
[  192.172803][ T9720] device hsr_slave_1 entered promiscuous mode
[  192.312716][ T9728] IPVS: ftp: loaded support on port[0] = 21
[  192.335538][ T9723] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.346387][ T9723] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.355038][ T9723] device bridge_slave_0 entered promiscuous mode
[  192.367540][ T9723] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.375376][ T9723] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.386080][ T9723] device bridge_slave_1 entered promiscuous mode
18:06:59 executing program 4:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000985000/0x1000)=nil, 0x1000, 0x0, 0xfffffffeffffffff, 0x0)

[  192.410791][   T26] audit: type=1400 audit(1575396419.426:44): avc:  denied  { create } for  pid=9720 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  192.452146][ T9720] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  192.459893][   T26] audit: type=1400 audit(1575396419.426:45): avc:  denied  { write } for  pid=9720 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  192.485122][   T26] audit: type=1400 audit(1575396419.426:46): avc:  denied  { read } for  pid=9720 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  192.512429][ T9720] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  192.579296][ T9720] netdevsim netdevsim0 netdevsim2: renamed from eth2
18:06:59 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_addrs=@can})
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags})

[  192.652152][ T9723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.681472][ T9720] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  192.696124][ T9730] IPVS: ftp: loaded support on port[0] = 21
[  192.743692][ T9723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.865615][ T9723] team0: Port device team_slave_0 added
[  192.904973][ T9723] team0: Port device team_slave_1 added
[  192.948773][ T9734] IPVS: ftp: loaded support on port[0] = 21
[  193.062754][ T9723] device hsr_slave_0 entered promiscuous mode
[  193.140961][ T9723] device hsr_slave_1 entered promiscuous mode
[  193.200581][ T9723] debugfs: Directory 'hsr0' with parent '/' already present!
[  193.224291][ T9726] chnl_net:caif_netlink_parms(): no params data found
[  193.325905][ T9726] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.333081][ T9726] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.342677][ T9726] device bridge_slave_0 entered promiscuous mode
[  193.351858][ T9726] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.358922][ T9726] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.367042][ T9726] device bridge_slave_1 entered promiscuous mode
[  193.385264][ T9728] chnl_net:caif_netlink_parms(): no params data found
[  193.449844][ T9726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.472610][ T9730] chnl_net:caif_netlink_parms(): no params data found
[  193.486442][ T9726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.495667][ T9723] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  193.555835][ T9723] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  193.598420][ T9723] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  193.676368][ T9728] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.683576][ T9728] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.691780][ T9728] device bridge_slave_0 entered promiscuous mode
[  193.698967][ T9723] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  193.754921][ T9726] team0: Port device team_slave_0 added
[  193.763561][ T9728] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.771056][ T9728] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.778840][ T9728] device bridge_slave_1 entered promiscuous mode
[  193.818279][ T9730] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.825809][ T9730] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.836466][ T9730] device bridge_slave_0 entered promiscuous mode
[  193.847185][ T9726] team0: Port device team_slave_1 added
[  193.872009][ T9728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.886219][ T9730] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.894144][ T9730] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.902324][ T9730] device bridge_slave_1 entered promiscuous mode
[  193.973929][ T9726] device hsr_slave_0 entered promiscuous mode
[  194.010828][ T9726] device hsr_slave_1 entered promiscuous mode
[  194.071362][ T9726] debugfs: Directory 'hsr0' with parent '/' already present!
[  194.081302][ T9728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.137364][ T9730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.149091][ T9730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.204188][ T9728] team0: Port device team_slave_0 added
[  194.212728][ T9728] team0: Port device team_slave_1 added
[  194.245884][ T9720] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.262004][ T9730] team0: Port device team_slave_0 added
[  194.273117][ T9730] team0: Port device team_slave_1 added
[  194.292630][ T9734] chnl_net:caif_netlink_parms(): no params data found
[  194.354107][ T9730] device hsr_slave_0 entered promiscuous mode
[  194.410916][ T9730] device hsr_slave_1 entered promiscuous mode
[  194.480645][ T9730] debugfs: Directory 'hsr0' with parent '/' already present!
[  194.494350][ T9726] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  194.553553][ T9726] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  194.618361][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  194.626841][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  194.704076][ T9728] device hsr_slave_0 entered promiscuous mode
[  194.761195][ T9728] device hsr_slave_1 entered promiscuous mode
[  194.800703][ T9728] debugfs: Directory 'hsr0' with parent '/' already present!
[  194.808329][ T9726] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  194.863136][ T9726] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  194.907731][ T9720] 8021q: adding VLAN 0 to HW filter on device team0
[  194.995664][ T9734] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.003272][ T9734] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.011396][ T9734] device bridge_slave_0 entered promiscuous mode
[  195.018930][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  195.032042][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  195.040502][ T3211] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.047705][ T3211] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.058072][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  195.066910][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  195.075425][ T3211] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.082515][ T3211] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.092590][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  195.106401][ T9728] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  195.149451][ T9728] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  195.203128][ T9728] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  195.262691][ T9734] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.269786][ T9734] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.278668][ T9734] device bridge_slave_1 entered promiscuous mode
[  195.306458][ T9734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.318564][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  195.328223][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  195.347458][ T9728] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  195.412561][ T9734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.425771][ T9723] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.433584][ T9730] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  195.493100][ T9730] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  195.533804][ T9730] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  195.595670][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  195.605270][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  195.614455][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  195.623030][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  195.632676][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  195.641674][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  195.649917][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  195.683715][ T9734] team0: Port device team_slave_0 added
[  195.691422][ T9734] team0: Port device team_slave_1 added
[  195.708096][ T9730] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  195.758295][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  195.766721][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  195.788829][ T9723] 8021q: adding VLAN 0 to HW filter on device team0
[  195.817002][ T9720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  195.863912][ T9734] device hsr_slave_0 entered promiscuous mode
[  195.890798][ T9734] device hsr_slave_1 entered promiscuous mode
[  195.940514][ T9734] debugfs: Directory 'hsr0' with parent '/' already present!
[  195.948340][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  195.956722][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  195.996707][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  196.006333][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  196.015344][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.022513][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.030495][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  196.039043][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  196.047917][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.055063][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.064516][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  196.106223][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  196.134225][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  196.143290][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  196.153349][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  196.161843][ T9734] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  196.222400][ T9734] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  196.278546][ T9734] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  196.315943][ T9726] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.331812][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  196.340353][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  196.349992][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  196.360603][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  196.368884][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  196.377745][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  196.385485][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  196.400030][ T9723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  196.412520][ T9723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  196.420272][ T9734] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  196.491387][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  196.499824][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  196.528899][ T9720] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.543086][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  196.555528][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  196.563732][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  196.572171][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  196.582536][ T9726] 8021q: adding VLAN 0 to HW filter on device team0
[  196.598327][   T26] audit: type=1400 audit(1575396423.616:47): avc:  denied  { associate } for  pid=9720 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1
[  196.619268][ T9728] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.644727][ T9723] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.682908][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  196.696842][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  196.706255][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.713393][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.727583][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  196.736413][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  196.744852][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.751934][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.761905][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  196.771576][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  196.828903][ T9734] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.875302][ T9728] 8021q: adding VLAN 0 to HW filter on device team0
[  196.883110][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  196.893282][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  196.903691][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  196.912604][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  196.922053][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  196.930356][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  196.939199][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  196.947851][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  196.956135][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  196.964144][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  196.972699][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  196.991596][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  197.021118][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  197.029234][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  197.039584][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  197.047509][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  197.057589][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  197.066117][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.073231][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.081233][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  197.089946][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  197.098500][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.105607][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.113983][   T26] audit: type=1400 audit(1575396424.126:48): avc:  denied  { open } for  pid=9744 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1
[  197.137564][   T26] audit: type=1400 audit(1575396424.126:49): avc:  denied  { kernel } for  pid=9744 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1
[  197.137799][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
18:07:04 executing program 0:
pipe(0x0)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x6)
socket(0x10, 0x803, 0x6)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}]}, 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="08000200e00000020800040000000200"], 0x3}}, 0x0)

[  197.173930][ T9730] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.200124][ T9734] 8021q: adding VLAN 0 to HW filter on device team0
[  197.211049][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  197.225766][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  197.286530][    C0] hrtimer: interrupt took 57712 ns
[  197.307268][ T9726] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.328291][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  197.338925][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  197.347298][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  197.364886][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  197.376537][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  197.385835][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  197.401681][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  197.417554][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  197.426295][ T2613] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.433423][ T2613] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.449460][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  197.458433][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  197.472143][ T2613] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.479194][ T2613] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.490159][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  197.498163][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  197.511628][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
18:07:04 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(&(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000240))
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0)
write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x124a2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r2)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)

[  197.519413][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  197.527490][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  197.536187][ T2613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  197.565432][ T9730] 8021q: adding VLAN 0 to HW filter on device team0
18:07:04 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(&(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000240))
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0)
write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x124a2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r2)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)

[  197.744624][ T9728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  197.764551][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  197.785376][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  197.815574][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  197.842445][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  197.877520][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
18:07:05 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(&(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000240))
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0)
write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x124a2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r2)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)

18:07:05 executing program 0:
pipe(0x0)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x6)
socket(0x10, 0x803, 0x6)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}]}, 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="08000200e00000020800040000000200"], 0x3}}, 0x0)

[  198.147603][ T9734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  198.206124][ T9734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  198.248136][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  198.262691][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  198.277282][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  198.305826][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  198.315180][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  198.323974][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  198.332454][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.339518][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.347259][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  198.357335][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  198.365920][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.373039][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.381648][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  198.390229][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  198.398853][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  198.406548][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  198.415327][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  198.423876][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  198.432568][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  198.442503][ T9764] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
18:07:05 executing program 2:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000003200015819aad20200ffffffff0000001400010010000100050003000000030000000000669a81243862356c2148a1bca9bb7cc7a1752ca3f5aa42598e130dd3adae4fce984a556534e4a4b83e7e5b8e054a8e2a29134c8036eb2b21d3f3d634e642874e9774333d31c89104155bc2cb8c65a648be4206810905dc89e4d27a621a7f65544e97177257b8712688db6d557334ab54"], 0x28}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492540, 0x0)

[  198.458722][ T9775] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
18:07:05 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(&(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000240))
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0)
write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x124a2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r2)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)

18:07:05 executing program 0:
pipe(0x0)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x6)
socket(0x10, 0x803, 0x6)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}]}, 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="08000200e00000020800040000000200"], 0x3}}, 0x0)

[  198.666405][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  198.679784][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  198.688571][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  198.715274][ T9728] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.748736][ T9778] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
18:07:05 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(&(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000240))
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0)
write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x124a2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r2)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)

[  198.765949][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  198.783170][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  198.824472][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  198.881578][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  198.890374][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  199.130801][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  199.138865][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  199.153771][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  199.174096][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  199.181940][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  199.189421][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  199.198832][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  199.210322][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  199.253792][ T9734] 8021q: adding VLAN 0 to HW filter on device batadv0
18:07:06 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500028cfc000543280000000000421ba3a20400ff7e280000001100ff", 0x2b}], 0x1}, 0x0)
r2 = socket$inet(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000040)="240000001e005f3814fffffffff807000000000000000000000008000800080000b70000", 0x52)

[  199.310309][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  199.318564][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  199.327134][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  199.345944][ T9730] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.425708][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  199.703860][ T9819] mmap: syz-executor.4 (9819) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
18:07:06 executing program 4:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000985000/0x1000)=nil, 0x1000, 0x0, 0xfffffffeffffffff, 0x0)

18:07:06 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_addrs=@can})
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags})

18:07:06 executing program 2:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000003200015819aad20200ffffffff0000001400010010000100050003000000030000000000669a81243862356c2148a1bca9bb7cc7a1752ca3f5aa42598e130dd3adae4fce984a556534e4a4b83e7e5b8e054a8e2a29134c8036eb2b21d3f3d634e642874e9774333d31c89104155bc2cb8c65a648be4206810905dc89e4d27a621a7f65544e97177257b8712688db6d557334ab54"], 0x28}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492540, 0x0)

18:07:06 executing program 0:
pipe(0x0)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x6)
socket(0x10, 0x803, 0x6)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}]}, 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="08000200e00000020800040000000200"], 0x3}}, 0x0)

18:07:06 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500028cfc000543280000000000421ba3a20400ff7e280000001100ff", 0x2b}], 0x1}, 0x0)
r2 = socket$inet(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000040)="240000001e005f3814fffffffff807000000000000000000000008000800080000b70000", 0x52)

18:07:06 executing program 1:
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(&(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000240))
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0)
write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x124a2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r2)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)

[  199.886462][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  199.957177][ T9830] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
18:07:07 executing program 2:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000003200015819aad20200ffffffff0000001400010010000100050003000000030000000000669a81243862356c2148a1bca9bb7cc7a1752ca3f5aa42598e130dd3adae4fce984a556534e4a4b83e7e5b8e054a8e2a29134c8036eb2b21d3f3d634e642874e9774333d31c89104155bc2cb8c65a648be4206810905dc89e4d27a621a7f65544e97177257b8712688db6d557334ab54"], 0x28}}, 0x0)
r0 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492540, 0x0)

18:07:07 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500028cfc000543280000000000421ba3a20400ff7e280000001100ff", 0x2b}], 0x1}, 0x0)
r2 = socket$inet(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000040)="240000001e005f3814fffffffff807000000000000000000000008000800080000b70000", 0x52)

18:07:07 executing program 4:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000985000/0x1000)=nil, 0x1000, 0x0, 0xfffffffeffffffff, 0x0)

18:07:07 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_addrs=@can})
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags})

[  200.223191][ T9844] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  200.266561][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
18:07:07 executing program 0:
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(&(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000240))
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0)
write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x124a2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r2)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)

18:07:07 executing program 4:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000985000/0x1000)=nil, 0x1000, 0x0, 0xfffffffeffffffff, 0x0)

18:07:07 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_addrs=@can})
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags})

18:07:07 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7, 0x3, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48)

18:07:07 executing program 1:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfa\x81\x00\x00\x00\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7.\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x10000f48b, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000), 0x23f)

18:07:07 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x24, &(0x7f0000000000), 0x20a154cc)

18:07:07 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x23, &(0x7f0000000000), 0x20a154cc)

[  200.701608][   T26] audit: type=1400 audit(1575396427.726:50): avc:  denied  { prog_load } for  pid=9867 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
18:07:07 executing program 5:
r0 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0xb)
sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000b40)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)='a', 0x1}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

18:07:07 executing program 1:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfa\x81\x00\x00\x00\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7.\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x10000f48b, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000), 0x23f)

[  200.812671][   T26] audit: type=1400 audit(1575396427.836:51): avc:  denied  { prog_run } for  pid=9867 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
18:07:07 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x24, &(0x7f0000000000), 0x20a154cc)

18:07:07 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7, 0x3, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48)

18:07:08 executing program 0:
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(&(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000240))
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0)
write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x124a2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r2)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)

18:07:08 executing program 4:
r0 = socket$kcm(0x10, 0x400000003, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000002b008163e45ae087002401010d0f00000000e0fc4cc91b4dd65b2f0580cb7023072a556d1c958c000000", 0x2e}], 0x1}, 0x0)

18:07:08 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x3})

18:07:08 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x24, &(0x7f0000000000), 0x20a154cc)

18:07:08 executing program 1:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfa\x81\x00\x00\x00\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7.\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x10000f48b, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000), 0x23f)

18:07:08 executing program 4:
r0 = socket$kcm(0x10, 0x400000003, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000002b008163e45ae087002401010d0f00000000e0fc4cc91b4dd65b2f0580cb7023072a556d1c958c000000", 0x2e}], 0x1}, 0x0)

18:07:08 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7, 0x3, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48)

18:07:08 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x24, &(0x7f0000000000), 0x20a154cc)

18:07:08 executing program 1:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfa\x81\x00\x00\x00\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7.\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x10000f48b, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000), 0x23f)

18:07:08 executing program 4:
r0 = socket$kcm(0x10, 0x400000003, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000002b008163e45ae087002401010d0f00000000e0fc4cc91b4dd65b2f0580cb7023072a556d1c958c000000", 0x2e}], 0x1}, 0x0)

18:07:08 executing program 0:
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(&(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000240))
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0)
write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x124a2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r2)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)

18:07:08 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x3})

18:07:08 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7, 0x3, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48)

18:07:08 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000280)={0x2, 0xd, 0x0, 0x0, 0x210, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@mcast2}}, @sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_x_sec_ctx={0x2000000000000049, 0x18, 0x0, 0x0, 0x1000, "a9ebc6641fb0e66c5b47be3725d885d01a25485f26d886134b48dba39e57e4bc61c502694c9c28053ed265c9e91a5c99b1c742c60cd02fa108fd9231d6a03cdafaeea69e193ad9d9e250095c03b73646f99d638e205af41f435b257f762cee32929877753dd25899acd6b547498cf7d6de3fc85a5f926c8ce1da40d750249cd9478860265c5f6d26a4d4f6fc3c9f13dd4d342a2bff3c00892640f290cdac6f882e13469587942c3e49b4a09d1970630f2a7a84fae79f42fd3d599662f769352281db7f68b464097c55858be1c43a776fa538c6c92c577df736b4e39f311f3a882341fd370fe082a78068ab599878b7225a70dfc54d21c54b337a96ca8d7ebf7624bf280ff83517ff26359c1575671ce0156c52ffa902b3a591d76c216a65e657937b6dea7ae43212aeab5ce2cc4c72686a39a11f9672311c3b3bfc5946bb9b2d391d8689d72e758719c71aaa43fb62f9d98872b0a3fa2d311645b9f32b8d4592b27396765e327f18f5d251169afba152158dd4fa74c7ad9cab9317ea16ede38fc25769fdbf8914cc2a946c7c7fb0c5e828aed439449ccd9a1ba419a3d0510acaa5c812d993c0004e789b7f7659cc0dbb7f6124721ac70c934c5863cbbd40fb71186cbab2e5c8b3ab328bb2bc458c4d739762950666f4f46476d9b4c27b60c88e1f439fb239675545b6fd8102c1d1752f05488edd7e3c7cf329cdf22b9fb8e4c6fb2b5635f2076ad892be17d9e5418ac453832045e82f3a202588f8d5581678f82cbf560851c1376c32ecf012bf2e4e8494f6a94f96821d96893f0caf4ac4fa042b783c9e300b91d89a0108d04dfc0450ff61322ab414bfc3edc9810f92d2b80ce59fed926089668978d57ddecbb05e60b8fbd2bd4fe545cb61d076f06e7fb7021818f720979ccdeb6e115d000473869457051d75cdee2a1cc9bdc5431dbc8bc0d7cf4dee741d75b0eb24011d5b079803670957323487df44aa9e1af5a247ff9f54f6d662457260b969029fad58b417dab1e0c61a4451559485726203e0e26595fbf889f265d41a98386dd6f1628e3e15c2496e9eef3af07b86a88d4fae3059a4424cde1571ab7ac6a8c96b0c9b03c80f417f253ed53505a73129200f431b640ca0d2ecd4a9f1ab90a6b069bc0fcf851e30f288835fceb86e21158c2231f9b671c6912eb930192a9eff3598a42702e754740a3e89c0f556c45231cc964e0c72290f28702b60cb13e6f989def777afb3cd79379f9694142ef760e4f6e744b208f1dc26e54da281f7f477bdb3433de0e8223cb9378e93c9b908276b6aa3bca0a1bfb2dd8ef5a3437644e4e367093e7fb564484a7ff0e8a24e8bf6a4182daba09a4b77fe80b665b4a0d417fcb5b5f1439a142d28f14b29f20f0c4d81ecb69b3c44d9321ade86a4591d7f28f2eee2b4a6cb8e43d032cd8e336f353d5210a7436c59e3ded522025fef896916051ee61cbbebd80667bff8dc7e3ec71e0b95284d9775e07bfc310b0688e03732e4e5669b918efb6e35d953c89e56226a5a73e51dd85ea461d0a5c2ebb4146f6ba3184df4a629bcb9546fadf5ac0d536bf260385d0cc8e280cb4031912acee8826a0bb2d7d9d1c5ac2f6d595a9beb396ef15f360defa7e08dcf40f158cc8160e451f6b61692379ce885767ccfc0188133836cfd0737e4139b7958679925a1540a2f3bb79fc1f0a121e407430a6306630e65f3fadcf78b9b0435dce07a4f2bc6607383e4de090152464abbcf9caa7f02a58ded2335a946b22d254988e8f6dd7d1eab82f02a21d09bdf4f90ac74cf76e73ded350b9e3f67a25d91bea7eb03e45a5a3e706cafdb6fc0ed3608578a3e34340731fbc12e1b5b40cfddc9046b3d38a8cabeb9eedc647226c14216765c5c1c65a995e7c648012689f4f8283f27e2378f8f404cd5735bed21eed06f94fcdb2f9a17f9f2c67d4e4a6b09986ae0587073b51dd7fefc3c251b0961a509156696d2ff11a37a4fcd3be571989804174b062b91ead8ae6f06930ed8d316529fbf113ba276717428afcd03fe2e173ea695f95e17b6cc289400ee8c591eda02195df0e9f485d6c58ac411eaffc9910f680e1d4900eded5c6aa98fc405d2a4cc71f5a9478bab575bc796e6fbdd782b975e51939ef6c059d12b041dcb836c65b3dd51a2ff05e8884f3e90cbe183786e4533efeb145acaa4f6748b54a3b0ecdd82a749398fdbff726b1b0d4926e6bf6ded6e0b2b134c30bce7ec04c8308969c028f3f67a4a8529b675542a203ea4409fc9bbcf7adc445898779b6d138f6a5a27c6b673961874e2a0e88f41cd3fccf711d2ce848644469f36e00f82692751d3c891475f973891c1b3ff4c94b105970592b0109d46cd04e4f70916e15b3754a771ebccb5a22895ec5ebdcb4764376fa878d83d54d480a7468fbf68ced98abd529ec43453a24dca09170485a1c8d00c245e0b93432cd96c5f91889d6395d7972f36eb6a03fa57b8f24d246a5a517052d41295243d760a2cdda20d715ace82e362eea8671e6914d27a2d57d862e93067fcc5cd4d02f3f609352440eeff816c026880b14f97f64e22bfbe9ed36b17efa7e5c8bdfcf67400f04e825649250e9c6c317b3d89198b2db9d91edf1c954b7a5daeb34811ead4f86830aca79f76fbbc1df4d14b3e8a466119328da415dad4b5edfc18ceb1b957f173b3520c976bb18d2d02ff685c0db9ba4b779af70e2adea9f62e9dccfc85974002507aa1dcb107d7c7da1c090d6cbaac779acbbe511707e52b4ccfb013afed31b8d63933312735862640170dd519846e97a039553cb619449356bd7f1da5c6586aa1081340aabdd132b12d737129152ceb10d9e056d848077030344e37702f8b4190a0bc2afd6829436827b254357819819d51cabd3f5eccb1faa1953d607c81cb9ea2c157c7ee424f41fede2b3eece87cdffaae0500ea81359477e8c06de1f73c101c284862301cc14bb23ab2a63e00ac47a94aed2f20eb1498c8d98e1db881ed12ab49e33a61cee7c362909ab3e9d9e0f17fea386a587e348c3a043b299ea02cbe290130697e84a2ca7ebf17eb4932f0e51e6e19e091984d9aef6e73872105eb075f87fcd75a6712b65690c277cf1d6ab9c5cfccfdf0ac1866a3d7d98848fe040f11672b65a6723f53128523aac8621359bfc975fe67017d3712e6925b5eca0ecd8148d8a6dd6a175be704deb4dd57191da054a8f2af54d7c5623d11b8f71a10e219efc2b10f9caee21c0104d999c4789f4d6c038f35d8d2bc40650629b5205f105cb99996c91c1f4fbfd5e8e0ad478ae2a327621f98fa66ad4c9221571759470d6897119bd882b06c80e2ebbac599e98934868299d382f0d4e1d77729b06add4f551ba4bbb2044e034030f7f8318afc1a6983accc6ac8caac90b0938ea9f30f05326eeab9d75be6b53d8a9c3278c160ea5cfc6d4759266a6b887bb68cec3981723c6893287cfec9c8d87887ffb5dadf09e77b1d4752b816c5ff677b976f384e16606545c7b90ea1e9b2e1611fea623192b42742001b936e5821c43f7b9b3b1566665634278c94047ca06ff34b16aa42a9c58f72b650d498b528e48976f5e0a893bf7d06afca772ff3ce70aacb646eb4dba06b06ca973be97e9230b1f10b529bb1d37e9339155b18eaca167e8b984dc199669970b3db5c72dccedc7aae3818e893f6e4d120f1caac9421bebc3783026920eebe705aa248b3e5bab7521a46062989465e83ebc217ea1886350df04331082e1a135a038764feef987e917479fd299edcc14b9a0eb90ac98abcee807626d309b3376fd43a0cef5e9dfdf87d29b4d17d13a55f9d631a721da53b21f48c98802bbd2a98b314919792a166953f80a2ed8a53cbb57e16397c79569a1b65715029ce0098d09e46ee9adbeeed0a00c017205a94e491c084bd5eed1839af88ae8b2134d48037c6c0d92ef3eb13f7145001b2a230c167cd1d628aef45eb5c59935f9a6d638b7af65be2ddd2caa7f9f3ca697ec643ccd0ad3cd68efc04b6da79531eab5a7a497cfb3a92922ad05c71dd56a61b42e13e404e1ef3b859e0ad905806523689e89ed68175c88f0fd23376b45193e5830fb0707ff7512acfe6be91ecdfbfa677f54aeeb8c395d32b7d8d5fc210a34165e8b4a9241fa6b4bdc5805f3fbb03e0ccc63fe0e3957567575cac1305d9bd333ba1c5d34857eb79704089b8bd17123e0504963e321f54ee53f41d64d25f6ae7d64661e54ab76295d8c2985ec7c97dbd570eff972047e1e60c29e928c55880555c3deb52a7f92da3d7658b1f82c120027d57012beae7ef29e669cec69bc230fe5e9c68a8b4c589a1066c7212acef300b991d4e09b98634288a57c182cc91e275fad3a9533404fccc90b32cc7e355fcfb32ed85cceb41ab2fb0c0443276b5698512b1af71098f3f0f339ac3a787879950e0d254f49022b7a8e03e6a238539aee5f507ee4ea0f8a4bb5e807cfedb23066f85ee167a07bbe0cfbdff97b09c3e7b707af689830414db7f9d41fc18f710d23ca7ff586785809183839a402f9857a497d7b1985fd1ae4209891519e3970843dd22fa121f75910ad0332893a3ffc3419b8464878100490a6d7589010ea703679902e9a1656dafb6522e57530dd8c5f31b9918599aa6da51ab70c818699eeb2b8a0994adbf8cb4e98c40d55d094937929e1522b69f8f04590cce218bc35334425bbb88341bbc455c1c426d02b1934fdcba5e64d3cc1ff302ad7e247226f31cbbb07693a34799239fd8bb7ebe2d87fa75568f177f4651a99f9947ea70cde101d79d5992e87531e2be33fa4691d8f889393b81a2392212f2aca7eecb9ac3b7e5d31b498181e5a983d6768606796fc944a1cdb352bec4b7de49ddd474da1004bbe9d6ebc37385be96a70650fab3d96f9e2c141de63fa6867839eb64302b9935ea8d2e7f758719d4993e51dbbc8ccd352aedc6edd36b9217c6bcd9b6f2b97f83be6ab891ce524044961d35ea03e8c41f4a45cd82b693c58414637417afb692c9dba6c0e1d8f93d301b42a8071cdc1d435c1f672cce67f517772d59cdc98e1b205b7598a2ab60e9bfe4f3ac00ec855d22bd1c18a21d6e7fd31fdb34dfdbccca7b100c33c85efcf41400d90fd6684d377f747217ed61e54a40c7c6773d469e40eea8fcf3ae9143692d40d2860215b00c8f11ff353ac23b9c3abb83c5a06c593ec72894d259cfabf3a8471b37feaf4d6655995aceeff2d4b6eaa650662ab3ce5cc4c540d4bb381eaa05630dfa9d18a750c66d40fc879a347c14fda6daa114a23b6008ee0ce672dacfc93e211929ce54b1d2e3d083356ec3281278559dd158ba67f03c9a73b4044e724df7967ad94da356bdfe2ee4ae1b5256542016bb77e71cdfd4f186ecccda1d18461598e60e57de4fea6d737d717a37caec7225cbbe21007326863a41623eeedd8621476181606d8ddf62f6fafc292d6133c951693501fa2d618a571e024482dc2f8a710a8c33e9a4906e2ca54c22f9a2cf66ab4ad8efd2ec22aafe7cac9a2172ff2a53074c9b50e778814612156430d26e864ca0a78ed90341d26dbbbe6edef7e296d7c632a21eed8da3e3f3372d9ccbe6abf49a5c71d641831049d161923a6ed9897e0ce5e8e055573a1cd0ec3a7e6f53a5fc54e40ee588529d0a9a8e6f0f655ed230a02132ec9ac499436faf2094edc276e50fe5c4920b96a5ff1904b6536dace9efdca34ac784ac92094dc573c8065097d56beeb45ea711a7d51aa722a010edfc2766b52ac08b7d0005a4d20b81a4918001fc1739f01439779cf2f2f9930b642bc401"}]}, 0x1080}}, 0x0)

18:07:08 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)

18:07:08 executing program 4:
r0 = socket$kcm(0x10, 0x400000003, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000002b008163e45ae087002401010d0f00000000e0fc4cc91b4dd65b2f0580cb7023072a556d1c958c000000", 0x2e}], 0x1}, 0x0)

18:07:08 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)

[  201.814405][   T26] audit: type=1400 audit(1575396428.826:52): avc:  denied  { map_create } for  pid=9946 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
[  201.907333][   T26] audit: type=1400 audit(1575396428.826:53): avc:  denied  { map_read map_write } for  pid=9946 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
18:07:09 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:09 executing program 4:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x83)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_buf(r1, 0x84, 0x9, &(0x7f0000dcffe8)=""/11, &(0x7f0000000080)=0x19a)

18:07:09 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000280)={0x2, 0xd, 0x0, 0x0, 0x210, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@mcast2}}, @sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_x_sec_ctx={0x2000000000000049, 0x18, 0x0, 0x0, 0x1000, "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"}]}, 0x1080}}, 0x0)

18:07:09 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x3})

18:07:09 executing program 0:
r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
rmdir(&(0x7f00000000c0)='./file0\x00')

18:07:09 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)

18:07:09 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:09 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000280)={0x2, 0xd, 0x0, 0x0, 0x210, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@mcast2}}, @sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_x_sec_ctx={0x2000000000000049, 0x18, 0x0, 0x0, 0x1000, "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"}]}, 0x1080}}, 0x0)

18:07:09 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x3})

18:07:09 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)

18:07:09 executing program 0:
r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
rmdir(&(0x7f00000000c0)='./file0\x00')

18:07:09 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:09 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000280)={0x2, 0xd, 0x0, 0x0, 0x210, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@mcast2}}, @sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_x_sec_ctx={0x2000000000000049, 0x18, 0x0, 0x0, 0x1000, "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"}]}, 0x1080}}, 0x0)

18:07:09 executing program 4:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x83)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_buf(r1, 0x84, 0x9, &(0x7f0000dcffe8)=""/11, &(0x7f0000000080)=0x19a)

18:07:09 executing program 5:
r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
rmdir(&(0x7f00000000c0)='./file0\x00')

18:07:09 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:09 executing program 0:
r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
rmdir(&(0x7f00000000c0)='./file0\x00')

18:07:09 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:09 executing program 3:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x83)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_buf(r1, 0x84, 0x9, &(0x7f0000dcffe8)=""/11, &(0x7f0000000080)=0x19a)

18:07:10 executing program 5:
r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
rmdir(&(0x7f00000000c0)='./file0\x00')

18:07:10 executing program 4:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x83)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_buf(r1, 0x84, 0x9, &(0x7f0000dcffe8)=""/11, &(0x7f0000000080)=0x19a)

18:07:10 executing program 5:
r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
rmdir(&(0x7f00000000c0)='./file0\x00')

18:07:10 executing program 0:
r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
rmdir(&(0x7f00000000c0)='./file0\x00')

18:07:10 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:10 executing program 4:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x83)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_buf(r1, 0x84, 0x9, &(0x7f0000dcffe8)=""/11, &(0x7f0000000080)=0x19a)

18:07:10 executing program 3:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x83)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_buf(r1, 0x84, 0x9, &(0x7f0000dcffe8)=""/11, &(0x7f0000000080)=0x19a)

18:07:10 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:10 executing program 3:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x83)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_buf(r1, 0x84, 0x9, &(0x7f0000dcffe8)=""/11, &(0x7f0000000080)=0x19a)

18:07:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:10 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:10 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:10 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:10 executing program 3:
r0 = io_uring_setup(0x5da, &(0x7f0000000040))
io_uring_enter(r0, 0x0, 0x9, 0x1, 0x0, 0x0)

18:07:10 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:10 executing program 1:
r0 = memfd_create(&(0x7f0000000440)='\xb3\x17MS\xdb\xe0\x91~\xd8\x10\xb3\xd4\x9b\xfa\xdc\x1c\xb2\xc7\xdcp<\xefB\x05J\xe4cE\xbe\xd1C\xb5J\x16\'\xfb~\xfa\xfd\xbd\xdb\xc5\'\x8dmm\x9d\x9d\x1cv\x91y\xca\xec\xc7\xa5\xfa\xdf\xdc\xa7&!^\xac\x89a\x8c4\xa6\x85~e< \xc8d\xc4\xce\x7f\xb80\xd3\x03\x97\xea\x98\xfb.x\x1a3\x17\r\x00\xc8\xd0G\x1dq\x9c\x90g7$S8Sw:(+\xd6x$\xd4\xb2L\xf8\xf0<\n-\xe6\xb1\x0e&f\xec{YP%f\x02,M@a{\xe1\xeb*\x93\t', 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil)

18:07:11 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:11 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

[  203.989043][   T26] audit: type=1400 audit(1575396431.006:54): avc:  denied  { map } for  pid=10091 comm="syz-executor.1" path=2F6D656D66643AB3174D53DBE0917ED810B3D49BFADC1CB2C7DC703CEF42054AE46345BED143B54A1627FB7EFAFDBDDBC5278D6D6D9D9D1C769179CAECC7A5FADFDCA726215EAC89618C34A6857E653C20C864C4CE7FB830D30397EA98FB2E781A33170D202864656C6574656429 dev="tmpfs" ino=35124 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1
18:07:11 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:11 executing program 2:
r0 = socket(0x2000000100000010, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x18, 0x401, 0x0, 0x0, {}, [@RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_FLOW={0x8, 0x1e, 0x8}]}, 0x2c}}, 0x0)

18:07:11 executing program 1:
r0 = memfd_create(&(0x7f0000000440)='\xb3\x17MS\xdb\xe0\x91~\xd8\x10\xb3\xd4\x9b\xfa\xdc\x1c\xb2\xc7\xdcp<\xefB\x05J\xe4cE\xbe\xd1C\xb5J\x16\'\xfb~\xfa\xfd\xbd\xdb\xc5\'\x8dmm\x9d\x9d\x1cv\x91y\xca\xec\xc7\xa5\xfa\xdf\xdc\xa7&!^\xac\x89a\x8c4\xa6\x85~e< \xc8d\xc4\xce\x7f\xb80\xd3\x03\x97\xea\x98\xfb.x\x1a3\x17\r\x00\xc8\xd0G\x1dq\x9c\x90g7$S8Sw:(+\xd6x$\xd4\xb2L\xf8\xf0<\n-\xe6\xb1\x0e&f\xec{YP%f\x02,M@a{\xe1\xeb*\x93\t', 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil)

18:07:11 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x200000000012}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)
close(r1)

18:07:11 executing program 2:
r0 = socket(0x2000000100000010, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x18, 0x401, 0x0, 0x0, {}, [@RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_FLOW={0x8, 0x1e, 0x8}]}, 0x2c}}, 0x0)

18:07:11 executing program 3:
r0 = io_uring_setup(0x5da, &(0x7f0000000040))
io_uring_enter(r0, 0x0, 0x9, 0x1, 0x0, 0x0)

18:07:11 executing program 0:
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x48, 0x0, 0x3, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x48}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0)

18:07:11 executing program 1:
r0 = memfd_create(&(0x7f0000000440)='\xb3\x17MS\xdb\xe0\x91~\xd8\x10\xb3\xd4\x9b\xfa\xdc\x1c\xb2\xc7\xdcp<\xefB\x05J\xe4cE\xbe\xd1C\xb5J\x16\'\xfb~\xfa\xfd\xbd\xdb\xc5\'\x8dmm\x9d\x9d\x1cv\x91y\xca\xec\xc7\xa5\xfa\xdf\xdc\xa7&!^\xac\x89a\x8c4\xa6\x85~e< \xc8d\xc4\xce\x7f\xb80\xd3\x03\x97\xea\x98\xfb.x\x1a3\x17\r\x00\xc8\xd0G\x1dq\x9c\x90g7$S8Sw:(+\xd6x$\xd4\xb2L\xf8\xf0<\n-\xe6\xb1\x0e&f\xec{YP%f\x02,M@a{\xe1\xeb*\x93\t', 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil)

18:07:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{}, {0x0, @link_local}, 0x8, {0x2, 0x0, @local}, 'bpq0\x00'})
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000006000)={{}, {0x0, @link_local}, 0x19, {0x2, 0x0, @multicast2}, 'veth0_to_team\x00'})

18:07:11 executing program 2:
r0 = socket(0x2000000100000010, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x18, 0x401, 0x0, 0x0, {}, [@RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_FLOW={0x8, 0x1e, 0x8}]}, 0x2c}}, 0x0)

18:07:11 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:11 executing program 2:
r0 = socket(0x2000000100000010, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x18, 0x401, 0x0, 0x0, {}, [@RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_FLOW={0x8, 0x1e, 0x8}]}, 0x2c}}, 0x0)

18:07:11 executing program 0:
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x48, 0x0, 0x3, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x48}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0)

18:07:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{}, {0x0, @link_local}, 0x8, {0x2, 0x0, @local}, 'bpq0\x00'})
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000006000)={{}, {0x0, @link_local}, 0x19, {0x2, 0x0, @multicast2}, 'veth0_to_team\x00'})

18:07:12 executing program 1:
r0 = memfd_create(&(0x7f0000000440)='\xb3\x17MS\xdb\xe0\x91~\xd8\x10\xb3\xd4\x9b\xfa\xdc\x1c\xb2\xc7\xdcp<\xefB\x05J\xe4cE\xbe\xd1C\xb5J\x16\'\xfb~\xfa\xfd\xbd\xdb\xc5\'\x8dmm\x9d\x9d\x1cv\x91y\xca\xec\xc7\xa5\xfa\xdf\xdc\xa7&!^\xac\x89a\x8c4\xa6\x85~e< \xc8d\xc4\xce\x7f\xb80\xd3\x03\x97\xea\x98\xfb.x\x1a3\x17\r\x00\xc8\xd0G\x1dq\x9c\x90g7$S8Sw:(+\xd6x$\xd4\xb2L\xf8\xf0<\n-\xe6\xb1\x0e&f\xec{YP%f\x02,M@a{\xe1\xeb*\x93\t', 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil)

18:07:12 executing program 3:
r0 = io_uring_setup(0x5da, &(0x7f0000000040))
io_uring_enter(r0, 0x0, 0x9, 0x1, 0x0, 0x0)

18:07:12 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{}, {0x0, @link_local}, 0x8, {0x2, 0x0, @local}, 'bpq0\x00'})
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000006000)={{}, {0x0, @link_local}, 0x19, {0x2, 0x0, @multicast2}, 'veth0_to_team\x00'})

18:07:12 executing program 0:
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x48, 0x0, 0x3, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x48}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0)

18:07:12 executing program 1:
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x48, 0x0, 0x3, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x48}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0)

18:07:12 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{}, {0x0, @link_local}, 0x8, {0x2, 0x0, @local}, 'bpq0\x00'})
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000006000)={{}, {0x0, @link_local}, 0x19, {0x2, 0x0, @multicast2}, 'veth0_to_team\x00'})

18:07:12 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{}, {0x0, @link_local}, 0x8, {0x2, 0x0, @local}, 'bpq0\x00'})
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000006000)={{}, {0x0, @link_local}, 0x19, {0x2, 0x0, @multicast2}, 'veth0_to_team\x00'})

[  205.292193][   T26] audit: type=1804 audit(1575396432.316:55): pid=10168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir297333377/syzkaller.qxwxp4/15/bus" dev="sda1" ino=16562 res=1
18:07:12 executing program 1:
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x48, 0x0, 0x3, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x48}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0)

18:07:12 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{}, {0x0, @link_local}, 0x8, {0x2, 0x0, @local}, 'bpq0\x00'})
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000006000)={{}, {0x0, @link_local}, 0x19, {0x2, 0x0, @multicast2}, 'veth0_to_team\x00'})

18:07:12 executing program 0:
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x48, 0x0, 0x3, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x48}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0)

18:07:12 executing program 3:
r0 = io_uring_setup(0x5da, &(0x7f0000000040))
io_uring_enter(r0, 0x0, 0x9, 0x1, 0x0, 0x0)

[  205.464982][   T26] audit: type=1804 audit(1575396432.336:56): pid=10168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir297333377/syzkaller.qxwxp4/15/bus" dev="sda1" ino=16562 res=1
18:07:12 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{}, {0x0, @link_local}, 0x8, {0x2, 0x0, @local}, 'bpq0\x00'})
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000006000)={{}, {0x0, @link_local}, 0x19, {0x2, 0x0, @multicast2}, 'veth0_to_team\x00'})

18:07:12 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:12 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:12 executing program 1:
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x48, 0x0, 0x3, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x48}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0)

18:07:12 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:12 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:13 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:13 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:13 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:13 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:13 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:13 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:13 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:14 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:14 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:14 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:14 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:14 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:14 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:14 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:14 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:15 executing program 4:
sysfs$1(0x1, &(0x7f00000000c0)='vfat\x00')

18:07:15 executing program 2:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="18000000000000001001000001000000770000000bdf00409330b3e7d8aa94129a373d62c292b8c6ed127caa87f75478759207d10604ec95ff7bcb0d6b9b125ec85a366abe4f50111f0a03dbd1b4dea05a8b5b29e84e4fadaa6ebe736427e44dc6505d24234826a267f75c743db965041c09c59047f7f794fdffff80b6d724c8f356b5c28affffffffff8193b1a5c3438495d929ce2f1ae893afaf3f05d32d0bfa67b3da43ab981313e755223886b180a269917db5430ef9aec071e44cd19cb18e4e0528acd13471f44d80d21ed5de4b4ca31f4269a88115bece676d0fbf165b08c35178e5989379cc9df9e121a95731d088d6"], 0x18, 0x4800000000000000}}], 0x1, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000000000477a5fd398b950096e0588994b6b142721052cbe8484fa39a75f7c2f0f402c57aa55f3bdedde5f35e4ddb85032862496753f0fd98a73b2fe7b0cd418935e4ef6abbf93fdbaf1ff0538e32fe500"/110], 0x18}}], 0x1, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0)

18:07:15 executing program 0:
setreuid(0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
close(r0)

18:07:15 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
getsockopt$packet_buf(r1, 0x111, 0x800000000001, 0x0, &(0x7f0000000040))

18:07:15 executing program 4:
sysfs$1(0x1, &(0x7f00000000c0)='vfat\x00')

18:07:15 executing program 2:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="18000000000000001001000001000000770000000bdf00409330b3e7d8aa94129a373d62c292b8c6ed127caa87f75478759207d10604ec95ff7bcb0d6b9b125ec85a366abe4f50111f0a03dbd1b4dea05a8b5b29e84e4fadaa6ebe736427e44dc6505d24234826a267f75c743db965041c09c59047f7f794fdffff80b6d724c8f356b5c28affffffffff8193b1a5c3438495d929ce2f1ae893afaf3f05d32d0bfa67b3da43ab981313e755223886b180a269917db5430ef9aec071e44cd19cb18e4e0528acd13471f44d80d21ed5de4b4ca31f4269a88115bece676d0fbf165b08c35178e5989379cc9df9e121a95731d088d6"], 0x18, 0x4800000000000000}}], 0x1, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000000000477a5fd398b950096e0588994b6b142721052cbe8484fa39a75f7c2f0f402c57aa55f3bdedde5f35e4ddb85032862496753f0fd98a73b2fe7b0cd418935e4ef6abbf93fdbaf1ff0538e32fe500"/110], 0x18}}], 0x1, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0)

18:07:15 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:15 executing program 0:
setreuid(0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
close(r0)

18:07:15 executing program 4:
sysfs$1(0x1, &(0x7f00000000c0)='vfat\x00')

18:07:15 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
getsockopt$packet_buf(r1, 0x111, 0x800000000001, 0x0, &(0x7f0000000040))

18:07:15 executing program 3:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="18000000000000001001000001000000770000000bdf00409330b3e7d8aa94129a373d62c292b8c6ed127caa87f75478759207d10604ec95ff7bcb0d6b9b125ec85a366abe4f50111f0a03dbd1b4dea05a8b5b29e84e4fadaa6ebe736427e44dc6505d24234826a267f75c743db965041c09c59047f7f794fdffff80b6d724c8f356b5c28affffffffff8193b1a5c3438495d929ce2f1ae893afaf3f05d32d0bfa67b3da43ab981313e755223886b180a269917db5430ef9aec071e44cd19cb18e4e0528acd13471f44d80d21ed5de4b4ca31f4269a88115bece676d0fbf165b08c35178e5989379cc9df9e121a95731d088d6"], 0x18, 0x4800000000000000}}], 0x1, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000000000477a5fd398b950096e0588994b6b142721052cbe8484fa39a75f7c2f0f402c57aa55f3bdedde5f35e4ddb85032862496753f0fd98a73b2fe7b0cd418935e4ef6abbf93fdbaf1ff0538e32fe500"/110], 0x18}}], 0x1, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0)

18:07:15 executing program 2:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="18000000000000001001000001000000770000000bdf00409330b3e7d8aa94129a373d62c292b8c6ed127caa87f75478759207d10604ec95ff7bcb0d6b9b125ec85a366abe4f50111f0a03dbd1b4dea05a8b5b29e84e4fadaa6ebe736427e44dc6505d24234826a267f75c743db965041c09c59047f7f794fdffff80b6d724c8f356b5c28affffffffff8193b1a5c3438495d929ce2f1ae893afaf3f05d32d0bfa67b3da43ab981313e755223886b180a269917db5430ef9aec071e44cd19cb18e4e0528acd13471f44d80d21ed5de4b4ca31f4269a88115bece676d0fbf165b08c35178e5989379cc9df9e121a95731d088d6"], 0x18, 0x4800000000000000}}], 0x1, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000000000477a5fd398b950096e0588994b6b142721052cbe8484fa39a75f7c2f0f402c57aa55f3bdedde5f35e4ddb85032862496753f0fd98a73b2fe7b0cd418935e4ef6abbf93fdbaf1ff0538e32fe500"/110], 0x18}}], 0x1, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0)

18:07:15 executing program 4:
sysfs$1(0x1, &(0x7f00000000c0)='vfat\x00')

18:07:15 executing program 0:
setreuid(0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
close(r0)

18:07:15 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
getsockopt$packet_buf(r1, 0x111, 0x800000000001, 0x0, &(0x7f0000000040))

18:07:15 executing program 3:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="18000000000000001001000001000000770000000bdf00409330b3e7d8aa94129a373d62c292b8c6ed127caa87f75478759207d10604ec95ff7bcb0d6b9b125ec85a366abe4f50111f0a03dbd1b4dea05a8b5b29e84e4fadaa6ebe736427e44dc6505d24234826a267f75c743db965041c09c59047f7f794fdffff80b6d724c8f356b5c28affffffffff8193b1a5c3438495d929ce2f1ae893afaf3f05d32d0bfa67b3da43ab981313e755223886b180a269917db5430ef9aec071e44cd19cb18e4e0528acd13471f44d80d21ed5de4b4ca31f4269a88115bece676d0fbf165b08c35178e5989379cc9df9e121a95731d088d6"], 0x18, 0x4800000000000000}}], 0x1, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000000000477a5fd398b950096e0588994b6b142721052cbe8484fa39a75f7c2f0f402c57aa55f3bdedde5f35e4ddb85032862496753f0fd98a73b2fe7b0cd418935e4ef6abbf93fdbaf1ff0538e32fe500"/110], 0x18}}], 0x1, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0)

18:07:15 executing program 2:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="18000000000000001001000001000000770000000bdf00409330b3e7d8aa94129a373d62c292b8c6ed127caa87f75478759207d10604ec95ff7bcb0d6b9b125ec85a366abe4f50111f0a03dbd1b4dea05a8b5b29e84e4fadaa6ebe736427e44dc6505d24234826a267f75c743db965041c09c59047f7f794fdffff80b6d724c8f356b5c28affffffffff8193b1a5c3438495d929ce2f1ae893afaf3f05d32d0bfa67b3da43ab981313e755223886b180a269917db5430ef9aec071e44cd19cb18e4e0528acd13471f44d80d21ed5de4b4ca31f4269a88115bece676d0fbf165b08c35178e5989379cc9df9e121a95731d088d6"], 0x18, 0x4800000000000000}}], 0x1, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000000000477a5fd398b950096e0588994b6b142721052cbe8484fa39a75f7c2f0f402c57aa55f3bdedde5f35e4ddb85032862496753f0fd98a73b2fe7b0cd418935e4ef6abbf93fdbaf1ff0538e32fe500"/110], 0x18}}], 0x1, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0)

18:07:16 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x6b)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100000002072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x8013, r1, 0x0)

18:07:16 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1)
close(r1)
epoll_create1(0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000700)=0x80000001)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff}}, 0xfffffffffffffcff, &(0x7f0000000240), 0x0, &(0x7f0000000880)=""/114, 0x72}, 0xccba5b75d2fb3a0f)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x8, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
io_uring_setup(0xa4, &(0x7f0000000080))
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x5adc4000)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

18:07:16 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
getsockopt$packet_buf(r1, 0x111, 0x800000000001, 0x0, &(0x7f0000000040))

18:07:16 executing program 0:
setreuid(0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
close(r0)

18:07:16 executing program 3:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="18000000000000001001000001000000770000000bdf00409330b3e7d8aa94129a373d62c292b8c6ed127caa87f75478759207d10604ec95ff7bcb0d6b9b125ec85a366abe4f50111f0a03dbd1b4dea05a8b5b29e84e4fadaa6ebe736427e44dc6505d24234826a267f75c743db965041c09c59047f7f794fdffff80b6d724c8f356b5c28affffffffff8193b1a5c3438495d929ce2f1ae893afaf3f05d32d0bfa67b3da43ab981313e755223886b180a269917db5430ef9aec071e44cd19cb18e4e0528acd13471f44d80d21ed5de4b4ca31f4269a88115bece676d0fbf165b08c35178e5989379cc9df9e121a95731d088d6"], 0x18, 0x4800000000000000}}], 0x1, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000000000477a5fd398b950096e0588994b6b142721052cbe8484fa39a75f7c2f0f402c57aa55f3bdedde5f35e4ddb85032862496753f0fd98a73b2fe7b0cd418935e4ef6abbf93fdbaf1ff0538e32fe500"/110], 0x18}}], 0x1, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0)

18:07:16 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER(0x3, 0x3, 0x0)

18:07:16 executing program 1:
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="230000004300817491bc655065d7aee4050c00ec1e000000fca300005ea2c3bf8b1832", 0x23}], 0x1}, 0x0)

18:07:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @empty=[0xd002]}]}, 0x40}}, 0x0)

18:07:16 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x48}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1004, &(0x7f0000001200)=""/4100, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

18:07:16 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER(0x3, 0x3, 0x0)

18:07:16 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x6b)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100000002072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x8013, r1, 0x0)

[  209.474523][T10441] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.1'.
18:07:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @empty=[0xd002]}]}, 0x40}}, 0x0)

18:07:16 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x48}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1004, &(0x7f0000001200)=""/4100, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

18:07:16 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER(0x3, 0x3, 0x0)

18:07:16 executing program 1:
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="230000004300817491bc655065d7aee4050c00ec1e000000fca300005ea2c3bf8b1832", 0x23}], 0x1}, 0x0)

18:07:16 executing program 5:
syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0, 0x0, 0x2000000, &(0x7f0000000380)='\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

18:07:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @empty=[0xd002]}]}, 0x40}}, 0x0)

18:07:16 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x48}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1004, &(0x7f0000001200)=""/4100, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[  209.794223][T10459] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.1'.
18:07:16 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER(0x3, 0x3, 0x0)

18:07:16 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x6b)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100000002072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x8013, r1, 0x0)

18:07:17 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x48}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1004, &(0x7f0000001200)=""/4100, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

18:07:17 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x6b)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100000002072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x8013, r1, 0x0)

[  209.978830][T10462] ceph: device name is missing path (no : separator in /dev/loop5)
18:07:17 executing program 1:
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="230000004300817491bc655065d7aee4050c00ec1e000000fca300005ea2c3bf8b1832", 0x23}], 0x1}, 0x0)

18:07:17 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @empty=[0xd002]}]}, 0x40}}, 0x0)

18:07:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'tunl0\x00', <r2=>0x0})
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58)
clock_gettime(0x0, &(0x7f0000002900)={0x0, <r3=>0x0})
recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000})
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[  210.131701][T10462] ceph: device name is missing path (no : separator in /dev/loop5)
[  210.174638][T10486] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.1'.
18:07:17 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000006491bdad00"/64], 0x58}}, 0x0)

18:07:17 executing program 5:
syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0, 0x0, 0x2000000, &(0x7f0000000380)='\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

18:07:17 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41b2ac8bb8c43b460e4629227", 0x3f6}, {&(0x7f0000000040)="d3000000feffffff77000000020000a4000000000000000000", 0x24}], 0x2)

18:07:17 executing program 0:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x2)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x40000091}, 0x10)

[  210.413151][T10503] ceph: device name is missing path (no : separator in /dev/loop5)
18:07:17 executing program 1:
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="230000004300817491bc655065d7aee4050c00ec1e000000fca300005ea2c3bf8b1832", 0x23}], 0x1}, 0x0)

[  210.454782][T10506] sg_write: data in/out 62464/968 bytes for SCSI command 0xc8-- guessing data in;
[  210.454782][T10506]    program syz-executor.3 not setting count and/or reply_len properly
18:07:17 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41b2ac8bb8c43b460e4629227", 0x3f6}, {&(0x7f0000000040)="d3000000feffffff77000000020000a4000000000000000000", 0x24}], 0x2)

18:07:17 executing program 5:
syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0, 0x0, 0x2000000, &(0x7f0000000380)='\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[  210.612491][T10514] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.1'.
18:07:17 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x2})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x339)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:')

[  210.698028][T10519] sg_write: data in/out 62464/968 bytes for SCSI command 0xc8-- guessing data in;
[  210.698028][T10519]    program syz-executor.3 not setting count and/or reply_len properly
18:07:17 executing program 0:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x2)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x40000091}, 0x10)

18:07:17 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffd86, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000240001040300"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff00000000280008001c0001000000000000ffffff762630720006000000000000000000000800020000000100060005000000000014000100706669666f5f686561645f64726f700008000200000000000ad6d6d8be96b11c9bee468bac97559ed0b560e1309e643fb538f5f4d70979b7380ac1a9c90374e57fcdf627d7db3c3670401f368eec8576eb79e8120cc594a8cec91abf4a99c4350eb0a8b3bf7441006179b85929c938401e8880063eacf3c789f6cdf5a60490240f2a111d31252050"], 0x70}}, 0x0)

18:07:17 executing program 1:
io_setup(0x5f, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r2 = socket(0x2000000000000022, 0x2, 0x10000000000002)
dup3(r2, r1, 0x0)
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}])

18:07:17 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41b2ac8bb8c43b460e4629227", 0x3f6}, {&(0x7f0000000040)="d3000000feffffff77000000020000a4000000000000000000", 0x24}], 0x2)

[  210.785856][T10524] ceph: device name is missing path (no : separator in /dev/loop5)
18:07:18 executing program 5:
syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0, 0x0, 0x2000000, &(0x7f0000000380)='\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[  210.943851][T10539] sg_write: data in/out 62464/968 bytes for SCSI command 0xc8-- guessing data in;
[  210.943851][T10539]    program syz-executor.3 not setting count and/or reply_len properly
18:07:18 executing program 0:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x2)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x40000091}, 0x10)

18:07:18 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41b2ac8bb8c43b460e4629227", 0x3f6}, {&(0x7f0000000040)="d3000000feffffff77000000020000a4000000000000000000", 0x24}], 0x2)

18:07:18 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6000000, 0x10, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r1, 0x0, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
accept4(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800006, 0x2012, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x10360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01df00000000", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0xa, 0x0, @loopback=0xac141400}}}, &(0x7f00000000c0)=0x90)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0x100}, 0x8)
dup2(r1, r4)

[  211.116669][T10546] ceph: device name is missing path (no : separator in /dev/loop5)
[  211.145955][T10551] sg_write: data in/out 62464/968 bytes for SCSI command 0xc8-- guessing data in;
[  211.145955][T10551]    program syz-executor.3 not setting count and/or reply_len properly
18:07:18 executing program 0:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x2)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x40000091}, 0x10)

18:07:18 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x802, 0x0)
write(r1, &(0x7f0000000040)="2400000020002501075f0165ff61fc2280000000001000220ee1000c08000d00feff1700", 0x24)

18:07:18 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x802, 0x0)
write(r1, &(0x7f0000000040)="2400000020002501075f0165ff61fc2280000000001000220ee1000c08000d00feff1700", 0x24)

18:07:19 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x2})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x339)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:')

18:07:19 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffd86, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000240001040300"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff00000000280008001c0001000000000000ffffff762630720006000000000000000000000800020000000100060005000000000014000100706669666f5f686561645f64726f700008000200000000000ad6d6d8be96b11c9bee468bac97559ed0b560e1309e643fb538f5f4d70979b7380ac1a9c90374e57fcdf627d7db3c3670401f368eec8576eb79e8120cc594a8cec91abf4a99c4350eb0a8b3bf7441006179b85929c938401e8880063eacf3c789f6cdf5a60490240f2a111d31252050"], 0x70}}, 0x0)

18:07:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x35c, 0x0, 0xfffffe3c, 0xffffffffffffff8b}}, 0xffffffffffffffff, 0x4e1, 0x91, 0x1}, 0x20)
socket$kcm(0xa, 0x0, 0x11)

18:07:19 executing program 1:
io_setup(0x5f, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r2 = socket(0x2000000000000022, 0x2, 0x10000000000002)
dup3(r2, r1, 0x0)
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}])

18:07:19 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x802, 0x0)
write(r1, &(0x7f0000000040)="2400000020002501075f0165ff61fc2280000000001000220ee1000c08000d00feff1700", 0x24)

18:07:19 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6000000, 0x10, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r1, 0x0, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
accept4(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800006, 0x2012, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x10360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01df00000000", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0xa, 0x0, @loopback=0xac141400}}}, &(0x7f00000000c0)=0x90)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0x100}, 0x8)
dup2(r1, r4)

18:07:19 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x802, 0x0)
write(r1, &(0x7f0000000040)="2400000020002501075f0165ff61fc2280000000001000220ee1000c08000d00feff1700", 0x24)

18:07:19 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffd86, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000240001040300"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff00000000280008001c0001000000000000ffffff762630720006000000000000000000000800020000000100060005000000000014000100706669666f5f686561645f64726f700008000200000000000ad6d6d8be96b11c9bee468bac97559ed0b560e1309e643fb538f5f4d70979b7380ac1a9c90374e57fcdf627d7db3c3670401f368eec8576eb79e8120cc594a8cec91abf4a99c4350eb0a8b3bf7441006179b85929c938401e8880063eacf3c789f6cdf5a60490240f2a111d31252050"], 0x70}}, 0x0)

18:07:19 executing program 1:
io_setup(0x5f, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r2 = socket(0x2000000000000022, 0x2, 0x10000000000002)
dup3(r2, r1, 0x0)
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}])

18:07:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x35c, 0x0, 0xfffffe3c, 0xffffffffffffff8b}}, 0xffffffffffffffff, 0x4e1, 0x91, 0x1}, 0x20)
socket$kcm(0xa, 0x0, 0x11)

18:07:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x35c, 0x0, 0xfffffe3c, 0xffffffffffffff8b}}, 0xffffffffffffffff, 0x4e1, 0x91, 0x1}, 0x20)
socket$kcm(0xa, 0x0, 0x11)

18:07:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x35c, 0x0, 0xfffffe3c, 0xffffffffffffff8b}}, 0xffffffffffffffff, 0x4e1, 0x91, 0x1}, 0x20)
socket$kcm(0xa, 0x0, 0x11)

18:07:20 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x2})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x339)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:')

18:07:20 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6000000, 0x10, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r1, 0x0, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
accept4(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800006, 0x2012, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x10360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01df00000000", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0xa, 0x0, @loopback=0xac141400}}}, &(0x7f00000000c0)=0x90)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0x100}, 0x8)
dup2(r1, r4)

18:07:20 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffd86, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000240001040300"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff00000000280008001c0001000000000000ffffff762630720006000000000000000000000800020000000100060005000000000014000100706669666f5f686561645f64726f700008000200000000000ad6d6d8be96b11c9bee468bac97559ed0b560e1309e643fb538f5f4d70979b7380ac1a9c90374e57fcdf627d7db3c3670401f368eec8576eb79e8120cc594a8cec91abf4a99c4350eb0a8b3bf7441006179b85929c938401e8880063eacf3c789f6cdf5a60490240f2a111d31252050"], 0x70}}, 0x0)

18:07:20 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6000000, 0x10, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r1, 0x0, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
accept4(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800006, 0x2012, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x10360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01df00000000", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0xa, 0x0, @loopback=0xac141400}}}, &(0x7f00000000c0)=0x90)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0x100}, 0x8)
dup2(r1, r4)

18:07:20 executing program 1:
io_setup(0x5f, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r2 = socket(0x2000000000000022, 0x2, 0x10000000000002)
dup3(r2, r1, 0x0)
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}])

18:07:20 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6000000, 0x10, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r1, 0x0, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
accept4(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800006, 0x2012, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x10360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01df00000000", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0xa, 0x0, @loopback=0xac141400}}}, &(0x7f00000000c0)=0x90)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0x100}, 0x8)
dup2(r1, r4)

18:07:20 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6000000, 0x10, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r1, 0x0, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
accept4(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800006, 0x2012, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x10360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01df00000000", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0xa, 0x0, @loopback=0xac141400}}}, &(0x7f00000000c0)=0x90)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0x100}, 0x8)
dup2(r1, r4)

18:07:20 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6000000, 0x10, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r1, 0x0, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
accept4(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800006, 0x2012, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x10360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01df00000000", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0xa, 0x0, @loopback=0xac141400}}}, &(0x7f00000000c0)=0x90)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0x100}, 0x8)
dup2(r1, r4)

18:07:21 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6000000, 0x10, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r1, 0x0, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
accept4(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800006, 0x2012, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x10360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01df00000000", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0xa, 0x0, @loopback=0xac141400}}}, &(0x7f00000000c0)=0x90)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0x100}, 0x8)
dup2(r1, r4)

18:07:21 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6000000, 0x10, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r1, 0x0, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
accept4(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800006, 0x2012, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x10360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01df00000000", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0xa, 0x0, @loopback=0xac141400}}}, &(0x7f00000000c0)=0x90)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0x100}, 0x8)
dup2(r1, r4)

18:07:21 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6000000, 0x10, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r1, 0x0, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
accept4(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800006, 0x2012, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x10360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01df00000000", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0xa, 0x0, @loopback=0xac141400}}}, &(0x7f00000000c0)=0x90)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0x100}, 0x8)
dup2(r1, r4)

18:07:21 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6000000, 0x10, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r1, 0x0, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
accept4(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800006, 0x2012, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x10360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01df00000000", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0xa, 0x0, @loopback=0xac141400}}}, &(0x7f00000000c0)=0x90)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0x100}, 0x8)
dup2(r1, r4)

18:07:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x2})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x339)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:')

18:07:22 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6000000, 0x10, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r1, 0x0, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
accept4(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800006, 0x2012, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x10360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01df00000000", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0xa, 0x0, @loopback=0xac141400}}}, &(0x7f00000000c0)=0x90)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0x100}, 0x8)
dup2(r1, r4)

18:07:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8}]}}}]}, 0x3c}}, 0x0)

18:07:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8}]}}}]}, 0x3c}}, 0x0)

[  215.228812][T10695] netlink: 'syz-executor.3': attribute type 8 has an invalid length.
18:07:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8}]}}}]}, 0x3c}}, 0x0)

[  215.277988][T10698] netlink: 'syz-executor.3': attribute type 8 has an invalid length.
18:07:22 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6000000, 0x10, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r1, 0x0, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
accept4(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800006, 0x2012, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x10360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01df00000000", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0xa, 0x0, @loopback=0xac141400}}}, &(0x7f00000000c0)=0x90)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0x100}, 0x8)
dup2(r1, r4)

18:07:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8}]}}}]}, 0x3c}}, 0x0)

[  215.332556][T10702] netlink: 'syz-executor.3': attribute type 8 has an invalid length.
[  215.469669][T10708] netlink: 'syz-executor.3': attribute type 8 has an invalid length.
18:07:22 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6000000, 0x10, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r1, 0x0, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
accept4(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800006, 0x2012, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x10360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01df00000000", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0xa, 0x0, @loopback=0xac141400}}}, &(0x7f00000000c0)=0x90)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0x100}, 0x8)
dup2(r1, r4)

18:07:22 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6000000, 0x10, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r1, 0x0, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
accept4(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800006, 0x2012, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x10360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01df00000000", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0xa, 0x0, @loopback=0xac141400}}}, &(0x7f00000000c0)=0x90)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0x100}, 0x8)
dup2(r1, r4)

18:07:22 executing program 3:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000f0043ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0)

18:07:22 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x9c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[  215.803147][   T26] audit: type=1400 audit(1575396442.816:57): avc:  denied  { create } for  pid=10713 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
[  215.850114][   T26] audit: type=1400 audit(1575396442.866:58): avc:  denied  { write } for  pid=10713 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
18:07:23 executing program 3:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000f0043ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0)

18:07:23 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6000000, 0x10, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r1, 0x0, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
accept4(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800006, 0x2012, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x10360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01df00000000", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0xa, 0x0, @loopback=0xac141400}}}, &(0x7f00000000c0)=0x90)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0x100}, 0x8)
dup2(r1, r4)

18:07:23 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x9c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

18:07:23 executing program 3:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000f0043ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0)

18:07:23 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x9c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

18:07:23 executing program 5:
syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0)

18:07:23 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f00000000c0)={0x77359400}, 0x10)
getsockopt$sock_buf(r2, 0x1, 0x15, &(0x7f0000b56f40)=""/192, &(0x7f0000000040)=0xc0)

18:07:23 executing program 3:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000f0043ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0)

18:07:23 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x9c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

18:07:23 executing program 2:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x2b, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20)
close(r1)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000640)="f4001100002b3325fe8000000000000005baa68754ba00e8c1344f3e62d76c27e8000041020000002180", 0x2a}], 0x1}, 0x0)

[  216.740788][T10744] XFS (loop5): Mounting V4 Filesystem
[  216.841007][T10744] XFS (loop5): empty log check failed
[  216.866634][T10744] XFS (loop5): log mount/recovery failed: error -5
18:07:23 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071")
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f0000000040)=[{0x81}, {0x6}]}, 0x10)

18:07:24 executing program 2:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x2b, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20)
close(r1)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000640)="f4001100002b3325fe8000000000000005baa68754ba00e8c1344f3e62d76c27e8000041020000002180", 0x2a}], 0x1}, 0x0)

[  216.970588][T10744] XFS (loop5): log mount failed
18:07:24 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0)

[  217.090258][   T26] audit: type=1400 audit(1575396444.106:59): avc:  denied  { name_bind } for  pid=10777 comm="syz-executor.4" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1
18:07:24 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
pread64(r1, 0x0, 0x0, 0x0)

18:07:24 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[  217.193246][   T26] audit: type=1400 audit(1575396444.116:60): avc:  denied  { node_bind } for  pid=10777 comm="syz-executor.4" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1
[  217.266720][   T26] audit: type=1400 audit(1575396444.136:61): avc:  denied  { name_connect } for  pid=10777 comm="syz-executor.4" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1
[  217.406371][T10744] XFS (loop5): Mounting V4 Filesystem
[  217.511295][T10744] ==================================================================
[  217.519621][T10744] BUG: KASAN: use-after-free in xlog_alloc_log+0x1386/0x14b0
[  217.526978][T10744] Read of size 8 at addr ffff88809164a890 by task syz-executor.5/10744
[  217.535311][T10744] 
[  217.537625][T10744] CPU: 1 PID: 10744 Comm: syz-executor.5 Not tainted 5.4.0-syzkaller #0
[  217.545924][T10744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  217.555957][T10744] Call Trace:
[  217.559240][T10744]  dump_stack+0x197/0x210
[  217.563556][T10744]  ? xlog_alloc_log+0x1386/0x14b0
[  217.568564][T10744]  print_address_description.constprop.0.cold+0xd4/0x30b
[  217.575668][T10744]  ? xlog_alloc_log+0x1386/0x14b0
[  217.580683][T10744]  ? xlog_alloc_log+0x1386/0x14b0
[  217.585687][T10744]  __kasan_report.cold+0x1b/0x41
[  217.590618][T10744]  ? kvmalloc_node+0xb0/0x100
[  217.595272][T10744]  ? xlog_alloc_log+0x1386/0x14b0
[  217.600285][T10744]  kasan_report+0x12/0x20
[  217.604594][T10744]  __asan_report_load8_noabort+0x14/0x20
[  217.610202][T10744]  xlog_alloc_log+0x1386/0x14b0
[  217.615033][T10744]  xfs_log_mount+0xdc/0x780
[  217.619516][T10744]  xfs_mountfs+0xc35/0x1ca0
[  217.623999][T10744]  ? xfs_default_resblks+0x60/0x60
[  217.629106][T10744]  ? init_timer_key+0x13b/0x3a0
[  217.633982][T10744]  ? xfs_mru_cache_create+0x4a0/0x5b0
[  217.639340][T10744]  ? xfs_filestream_get_ag+0x60/0x60
[  217.644641][T10744]  xfs_fc_fill_super+0x84e/0x11c0
[  217.649775][T10744]  get_tree_bdev+0x414/0x650
[  217.654360][T10744]  ? xfs_mount_free+0x80/0x80
[  217.659020][T10744]  xfs_fc_get_tree+0x1d/0x30
[  217.663597][T10744]  vfs_get_tree+0x8e/0x300
[  217.668000][T10744]  do_mount+0x135a/0x1b50
[  217.672314][T10744]  ? copy_mount_string+0x40/0x40
[  217.677246][T10744]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  217.683466][T10744]  ? _copy_from_user+0x12c/0x1a0
[  217.688410][T10744]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  217.694646][T10744]  ? copy_mount_options+0x2e8/0x3f0
[  217.699838][T10744]  ksys_mount+0xdb/0x150
[  217.704060][T10744]  __x64_sys_mount+0xbe/0x150
[  217.708731][T10744]  do_syscall_64+0xfa/0x790
[  217.713234][T10744]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  217.719120][T10744] RIP: 0033:0x45d0ca
[  217.723001][T10744] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00
[  217.742584][T10744] RSP: 002b:00007f087410ca88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  217.751083][T10744] RAX: ffffffffffffffda RBX: 00007f087410cb40 RCX: 000000000045d0ca
[  217.759041][T10744] RDX: 00007f087410cae0 RSI: 0000000020000000 RDI: 00007f087410cb00
[  217.767053][T10744] RBP: 0000000000000001 R08: 00007f087410cb40 R09: 00007f087410cae0
[  217.775010][T10744] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
[  217.782998][T10744] R13: 00000000004cab30 R14: 00000000004e3f70 R15: 00000000ffffffff
[  217.791045][T10744] 
[  217.793354][T10744] Allocated by task 10744:
[  217.797752][T10744]  save_stack+0x23/0x90
[  217.801940][T10744]  __kasan_kmalloc.constprop.0+0xcf/0xe0
[  217.807548][T10744]  kasan_kmalloc+0x9/0x10
[  217.811913][T10744]  __kmalloc+0x163/0x770
[  217.816132][T10744]  kmem_alloc+0x15b/0x4d0
[  217.820472][T10744]  xlog_alloc_log+0xcc3/0x14b0
[  217.825217][T10744]  xfs_log_mount+0xdc/0x780
[  217.829708][T10744]  xfs_mountfs+0xc35/0x1ca0
[  217.834193][T10744]  xfs_fc_fill_super+0x84e/0x11c0
[  217.839195][T10744]  get_tree_bdev+0x414/0x650
[  217.843778][T10744]  xfs_fc_get_tree+0x1d/0x30
[  217.848395][T10744]  vfs_get_tree+0x8e/0x300
[  217.852816][T10744]  do_mount+0x135a/0x1b50
[  217.857237][T10744]  ksys_mount+0xdb/0x150
[  217.861483][T10744]  __x64_sys_mount+0xbe/0x150
[  217.866157][T10744]  do_syscall_64+0xfa/0x790
[  217.870644][T10744]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  217.876513][T10744] 
[  217.878821][T10744] Freed by task 10744:
[  217.882869][T10744]  save_stack+0x23/0x90
[  217.887002][T10744]  __kasan_slab_free+0x102/0x150
[  217.891916][T10744]  kasan_slab_free+0xe/0x10
[  217.896395][T10744]  kfree+0x10a/0x2c0
[  217.900276][T10744]  kvfree+0x61/0x70
[  217.904060][T10744]  xlog_alloc_log+0xeaa/0x14b0
[  217.908799][T10744]  xfs_log_mount+0xdc/0x780
[  217.913294][T10744]  xfs_mountfs+0xc35/0x1ca0
[  217.917793][T10744]  xfs_fc_fill_super+0x84e/0x11c0
[  217.922887][T10744]  get_tree_bdev+0x414/0x650
[  217.927461][T10744]  xfs_fc_get_tree+0x1d/0x30
[  217.932057][T10744]  vfs_get_tree+0x8e/0x300
[  217.936463][T10744]  do_mount+0x135a/0x1b50
[  217.940778][T10744]  ksys_mount+0xdb/0x150
[  217.944998][T10744]  __x64_sys_mount+0xbe/0x150
[  217.949653][T10744]  do_syscall_64+0xfa/0x790
[  217.954750][T10744]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  217.960613][T10744] 
[  217.962922][T10744] The buggy address belongs to the object at ffff88809164a800
[  217.962922][T10744]  which belongs to the cache kmalloc-1k of size 1024
[  217.976950][T10744] The buggy address is located 144 bytes inside of
[  217.976950][T10744]  1024-byte region [ffff88809164a800, ffff88809164ac00)
[  217.990281][T10744] The buggy address belongs to the page:
[  217.995893][T10744] page:ffffea0002459280 refcount:1 mapcount:0 mapping:ffff8880aa400c40 index:0x0
[  218.004982][T10744] raw: 00fffe0000000200 ffffea0002a5e088 ffffea00021b3748 ffff8880aa400c40
[  218.013541][T10744] raw: 0000000000000000 ffff88809164a000 0000000100000002 0000000000000000
[  218.022096][T10744] page dumped because: kasan: bad access detected
[  218.028488][T10744] 
[  218.030792][T10744] Memory state around the buggy address:
[  218.036402][T10744]  ffff88809164a780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  218.044719][T10744]  ffff88809164a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  218.052754][T10744] >ffff88809164a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  218.060796][T10744]                          ^
[  218.065378][T10744]  ffff88809164a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  218.073453][T10744]  ffff88809164a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  218.081505][T10744] ==================================================================
[  218.089563][T10744] Disabling lock debugging due to kernel taint
[  218.097530][T10744] Kernel panic - not syncing: panic_on_warn set ...
[  218.104150][T10744] CPU: 1 PID: 10744 Comm: syz-executor.5 Tainted: G    B             5.4.0-syzkaller #0
[  218.113841][T10744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  218.123890][T10744] Call Trace:
[  218.127168][T10744]  dump_stack+0x197/0x210
[  218.131477][T10744]  panic+0x2e3/0x75c
[  218.135350][T10744]  ? add_taint.cold+0x16/0x16
[  218.140027][T10744]  ? xlog_alloc_log+0x1386/0x14b0
[  218.145031][T10744]  ? preempt_schedule+0x4b/0x60
[  218.149865][T10744]  ? ___preempt_schedule+0x16/0x18
[  218.154956][T10744]  ? trace_hardirqs_on+0x5e/0x240
[  218.159962][T10744]  ? xlog_alloc_log+0x1386/0x14b0
[  218.164976][T10744]  end_report+0x47/0x4f
[  218.169112][T10744]  ? xlog_alloc_log+0x1386/0x14b0
[  218.174117][T10744]  __kasan_report.cold+0xe/0x41
[  218.178953][T10744]  ? kvmalloc_node+0xb0/0x100
[  218.189363][T10744]  ? xlog_alloc_log+0x1386/0x14b0
[  218.194369][T10744]  kasan_report+0x12/0x20
[  218.198679][T10744]  __asan_report_load8_noabort+0x14/0x20
[  218.204289][T10744]  xlog_alloc_log+0x1386/0x14b0
[  218.209144][T10744]  xfs_log_mount+0xdc/0x780
[  218.213635][T10744]  xfs_mountfs+0xc35/0x1ca0
[  218.218128][T10744]  ? xfs_default_resblks+0x60/0x60
[  218.223225][T10744]  ? init_timer_key+0x13b/0x3a0
[  218.228083][T10744]  ? xfs_mru_cache_create+0x4a0/0x5b0
[  218.233455][T10744]  ? xfs_filestream_get_ag+0x60/0x60
[  218.238726][T10744]  xfs_fc_fill_super+0x84e/0x11c0
[  218.243736][T10744]  get_tree_bdev+0x414/0x650
[  218.248333][T10744]  ? xfs_mount_free+0x80/0x80
[  218.253006][T10744]  xfs_fc_get_tree+0x1d/0x30
[  218.257581][T10744]  vfs_get_tree+0x8e/0x300
[  218.261984][T10744]  do_mount+0x135a/0x1b50
[  218.266295][T10744]  ? copy_mount_string+0x40/0x40
[  218.271213][T10744]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  218.277460][T10744]  ? _copy_from_user+0x12c/0x1a0
[  218.282379][T10744]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  218.288602][T10744]  ? copy_mount_options+0x2e8/0x3f0
[  218.293784][T10744]  ksys_mount+0xdb/0x150
[  218.298015][T10744]  __x64_sys_mount+0xbe/0x150
[  218.302680][T10744]  do_syscall_64+0xfa/0x790
[  218.307166][T10744]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  218.313035][T10744] RIP: 0033:0x45d0ca
[  218.317259][T10744] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00
[  218.336865][T10744] RSP: 002b:00007f087410ca88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  218.345278][T10744] RAX: ffffffffffffffda RBX: 00007f087410cb40 RCX: 000000000045d0ca
[  218.353499][T10744] RDX: 00007f087410cae0 RSI: 0000000020000000 RDI: 00007f087410cb00
[  218.361625][T10744] RBP: 0000000000000001 R08: 00007f087410cb40 R09: 00007f087410cae0
[  218.369575][T10744] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
[  218.377538][T10744] R13: 00000000004cab30 R14: 00000000004e3f70 R15: 00000000ffffffff
[  218.386916][T10744] Kernel Offset: disabled
[  218.391245][T10744] Rebooting in 86400 seconds..