[info] Using makefile-style concurrent boot in runlevel 2. [ 27.029956] audit: type=1800 audit(1545437422.764:21): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.117' (ECDSA) to the list of known hosts. 2018/12/22 00:10:36 fuzzer started 2018/12/22 00:10:38 dialing manager at 10.128.0.26:35391 2018/12/22 00:10:38 syscalls: 1 2018/12/22 00:10:38 code coverage: enabled 2018/12/22 00:10:38 comparison tracing: enabled 2018/12/22 00:10:38 setuid sandbox: enabled 2018/12/22 00:10:38 namespace sandbox: enabled 2018/12/22 00:10:38 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/22 00:10:38 fault injection: enabled 2018/12/22 00:10:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/22 00:10:38 net packet injection: enabled 2018/12/22 00:10:38 net device setup: enabled 00:12:59 executing program 0: seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x48000015}, {0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) syzkaller login: [ 184.085869] IPVS: ftp: loaded support on port[0] = 21 00:12:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0bc5310, &(0x7f0000000000)={{}, {0xf}}) [ 184.415655] IPVS: ftp: loaded support on port[0] = 21 00:13:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) [ 184.757929] IPVS: ftp: loaded support on port[0] = 21 00:13:00 executing program 3: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = dup3(r0, r0, 0x80000) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RSETATTR(r3, &(0x7f0000000400)={0x7, 0x1b, 0x80000000000003fd}, 0x4) write$P9_RREMOVE(r2, &(0x7f00000001c0)={0xffffffffffffffa4}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='.K\xb7\xaf\xc5\xdeYy9\xfaMs75(\xa3B+\xa46\xea\x04\x00F\x95\xe7J\xe3\xbc\xc6\x95\xc15Y\x8c,o\x7fwN(\xa8l\xf0g\xb6\xf75I>\xf4^[\xc7wp\xbbe\xad\x90\xfe!K\"\xea6\xcd6\xc91\xf4d\xe2-\x94jYD~\xd9;\x8b\xeea\xd0\xa7\x06\xd8\xd3*\xdd\x1d0([\xef\xfe\x83m\xb9\xab\x89\xfbu\x17\xf5 \x19\xe01\xcdW\xf4Q\x15\x02$\xcb\xc1u-\x15\xdd\x1f\xb6\xa3\xf8o\xbd\xe7\xb1F\x0f\x00\x00\x00\x00\x00\x00\x7f\x00\xa4*\xee\xd1)I\xa3o\xe1\xeeU\xb4I\xbbe\xb2\xae\xa9\x99\xce}\xe6\xc0\xe8b\x0f\x15\xf2\x87Z\xb4\xd7\xe15\x9cd\x02\xc5\"Au\xfd\xd0\x8b', 0x1ff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='.//group.cpu/.yz1\x10', 0x1ff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x01p_files\x00') getdents(r7, &(0x7f0000000ea9)=""/407, 0x197) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) [ 185.126350] IPVS: ftp: loaded support on port[0] = 21 00:13:01 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0xb40) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)=""/21, &(0x7f0000000240)=0x15) readlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000500)=""/180, 0xb4) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b08956d069e000000002066ce654d316e6f646576656d3100f9ff00000000000000000000000000000000000001000000000000002c00000000000008000000000000000000000000000000001c00000000000051a717000418b9b3cc002b737973740400000065746367726f757024"], 0x90) pread64(r0, &(0x7f00000002c0), 0x194, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000180)={0x18, 0x0, 0x3}, 0x18) [ 185.678021] IPVS: ftp: loaded support on port[0] = 21 00:13:01 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x1, 0x43, 0x7, 0x8000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77ffff, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000200)="9c", 0x0, 0x1}, 0x20) [ 185.784957] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.791443] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.829361] device bridge_slave_0 entered promiscuous mode [ 185.970101] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.989041] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.996805] device bridge_slave_1 entered promiscuous mode [ 186.029503] IPVS: ftp: loaded support on port[0] = 21 [ 186.121988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 186.276300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 186.461603] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.494429] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.501826] device bridge_slave_0 entered promiscuous mode [ 186.601810] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.633815] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.641144] device bridge_slave_1 entered promiscuous mode [ 186.716287] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.770317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 186.913725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 186.930369] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.070402] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.082856] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.090255] device bridge_slave_0 entered promiscuous mode [ 187.201959] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.227707] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.236276] device bridge_slave_1 entered promiscuous mode [ 187.245637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.252715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.290066] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 187.320651] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.431123] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.474668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.516935] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.531852] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.548364] device bridge_slave_0 entered promiscuous mode [ 187.560886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.581594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.701929] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.723315] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.732981] device bridge_slave_1 entered promiscuous mode [ 187.830760] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 187.849327] team0: Port device team_slave_0 added [ 187.885619] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.937586] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 187.945469] team0: Port device team_slave_1 added [ 187.976180] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.043106] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 188.053793] team0: Port device team_slave_0 added [ 188.080354] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 188.097408] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.114780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.174305] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 188.181987] team0: Port device team_slave_1 added [ 188.194878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.229512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 188.255095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.273789] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 188.281971] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.292857] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.306917] device bridge_slave_0 entered promiscuous mode [ 188.314411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.322406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.356866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 188.383801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.393986] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 188.403889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.414463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.445814] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.452267] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.472897] device bridge_slave_1 entered promiscuous mode [ 188.479474] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 188.490794] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.499235] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.507002] device bridge_slave_0 entered promiscuous mode [ 188.544180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.552186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.575070] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.600583] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 188.635628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 188.643955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.651885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.676808] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.690987] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.698995] device bridge_slave_1 entered promiscuous mode [ 188.710015] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.724559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 188.773491] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 188.780981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.793342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.838228] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 188.849550] team0: Port device team_slave_0 added [ 188.922150] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 188.984108] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 189.001090] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 189.015129] team0: Port device team_slave_1 added [ 189.021497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.036076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.076582] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 189.119093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.184393] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 189.237413] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 189.260439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.283306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.334255] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 189.352979] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 189.368020] team0: Port device team_slave_0 added [ 189.417293] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 189.436689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.452371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.485458] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 189.498850] team0: Port device team_slave_1 added [ 189.511436] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 189.546612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.565186] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 189.572863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.580776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.646404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 189.653818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.677932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.692836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.709629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.765161] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 189.799933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.934880] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 189.945006] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 189.957984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.968348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.022698] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 190.034982] team0: Port device team_slave_0 added [ 190.073162] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 190.080676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.093393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.112282] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.118808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.125811] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.132192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.146431] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 190.180660] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 190.223539] team0: Port device team_slave_1 added [ 190.252170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.296078] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 190.312853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.341593] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 190.362891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.377761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.452371] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.458818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.465541] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.471902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.480611] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 190.557399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 190.564715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.573965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.673012] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 190.680167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.693540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.726307] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 190.736720] team0: Port device team_slave_0 added [ 190.773435] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 190.781402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.803706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.870318] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 190.881097] team0: Port device team_slave_1 added [ 191.039529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.096932] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.103362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.110051] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.116485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.127713] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 191.155973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.266261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.283685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.299236] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 191.314696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.373109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.419556] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 191.433961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.444567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.615621] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.622042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.628789] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.635206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.645619] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 192.227579] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.234041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.240697] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.247128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.285670] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 192.292968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.302108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.724688] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.731086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.737790] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.744190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.760891] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 193.313214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.766723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.786897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.223690] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.299882] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.585209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.673374] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 196.679541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.722847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.759575] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 196.783338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.790518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.858908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.132432] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.171743] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.204599] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.423621] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.554177] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.561112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.593355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.608172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.836886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.927434] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.942311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.951661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.034507] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.091074] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 198.317446] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 198.379360] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.571857] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.583867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.593146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.773641] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.780007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.803632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.067112] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.266862] 8021q: adding VLAN 0 to HW filter on device team0 00:13:16 executing program 1: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$inet_int(r0, 0x0, 0x40000000000c9, 0x0, 0x0) [ 200.203637] kauditd_printk_skb: 9 callbacks suppressed [ 200.203651] audit: type=1326 audit(1545437595.944:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7469 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0xffff0000 00:13:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) fallocate(r0, 0x0, 0x0, 0x1f) 00:13:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000140)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 200.551913] hfsplus: unable to find HFS+ superblock [ 200.599169] hfsplus: unable to find HFS+ superblock 00:13:16 executing program 1: r0 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000340)="b0", 0x1}], 0x1) 00:13:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) dup3(r0, r1, 0x0) 00:13:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000140)=[@clear_death, @acquire_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 200.985590] audit: type=1326 audit(1545437596.724:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7469 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0xffff0000 [ 201.024379] binder: 7557:7558 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 00:13:16 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000006c0)={'rose0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x40000000000000) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3f, &(0x7f0000000540)=""/75, &(0x7f00000005c0)=0x4b) socketpair(0x3, 0x0, 0x0, &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1}, 0x48) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b702000000001f00bfa30000000000000703000000feffff7a0af0fff8ffefff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000f2000000b7050000230000006a0a00fe000000008500000036000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe, 0x0, &(0x7f0000000380)="8e5712f9ec625ca6752406da588e", 0x0}, 0x28) [ 201.035422] binder: 7557:7558 BC_ACQUIRE_DONE u0000000000000000 no match [ 201.051435] binder: 7557:7558 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 201.075796] binder: 7557:7558 BC_ACQUIRE_DONE u0000000000000000 no match 00:13:16 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) [ 201.130976] hrtimer: interrupt took 36942 ns 00:13:17 executing program 2: quotactl(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x204e23, @multicast1}, 0x10) clock_gettime(0x0, &(0x7f0000003140)) recvmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x400027f, 0x0, &(0x7f0000003180)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000840), 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @dev, @multicast2}, &(0x7f00000007c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @remote}, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f00000031c0)=@hci, 0x236) syslog(0x0, &(0x7f00000005c0)=""/228, 0xff41) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000200)={'dummy0\x00', 0x1}) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x200007fd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'erspan0\x00'}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/39, &(0x7f0000000140)=0x27) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @remote}}, 0x5c) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000400)={0x3, {0x8b, 0xfffffffffffffffc, 0x1, 0xdbf}}) sendto$inet(r1, &(0x7f0000000000)="1b", 0x1, 0x8000, 0x0, 0x0) close(r1) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 00:13:17 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x40000000000000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='pids.events\x00', 0x0, 0x0) socketpair(0x3, 0x0, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)) ioctl$TIOCCONS(r1, 0x541d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000380)="8e5712f9ec625ca6752406da588e", 0x0}, 0x28) 00:13:18 executing program 4: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = dup3(r0, r0, 0x80000) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RSETATTR(r3, &(0x7f0000000400)={0x7, 0x1b, 0x80000000000003fd}, 0x4) write$P9_RREMOVE(r2, &(0x7f00000001c0)={0xffffffffffffffa4}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='.K\xb7\xaf\xc5\xdeYy9\xfaMs75(\xa3B+\xa46\xea\x04\x00F\x95\xe7J\xe3\xbc\xc6\x95\xc15Y\x8c,o\x7fwN(\xa8l\xf0g\xb6\xf75I>\xf4^[\xc7wp\xbbe\xad\x90\xfe!K\"\xea6\xcd6\xc91\xf4d\xe2-\x94jYD~\xd9;\x8b\xeea\xd0\xa7\x06\xd8\xd3*\xdd\x1d0([\xef\xfe\x83m\xb9\xab\x89\xfbu\x17\xf5 \x19\xe01\xcdW\xf4Q\x15\x02$\xcb\xc1u-\x15\xdd\x1f\xb6\xa3\xf8o\xbd\xe7\xb1F\x0f\x00\x00\x00\x00\x00\x00\x7f\x00\xa4*\xee\xd1)I\xa3o\xe1\xeeU\xb4I\xbbe\xb2\xae\xa9\x99\xce}\xe6\xc0\xe8b\x0f\x15\xf2\x87Z\xb4\xd7\xe15\x9cd\x02\xc5\"Au\xfd\xd0\x8b', 0x1ff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='.//group.cpu/.yz1\x10', 0x1ff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x01p_files\x00') getdents(r7, &(0x7f0000000ea9)=""/407, 0x197) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 00:13:18 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:18 executing program 2: socketpair(0x1, 0x1020000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$9p(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(r0, 0x0, 0x0) 00:13:18 executing program 0: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = dup3(r0, r0, 0x80000) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RSETATTR(r3, &(0x7f0000000400)={0x7, 0x1b, 0x80000000000003fd}, 0x4) write$P9_RREMOVE(r2, &(0x7f00000001c0)={0xffffffffffffffa4}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='.K\xb7\xaf\xc5\xdeYy9\xfaMs75(\xa3B+\xa46\xea\x04\x00F\x95\xe7J\xe3\xbc\xc6\x95\xc15Y\x8c,o\x7fwN(\xa8l\xf0g\xb6\xf75I>\xf4^[\xc7wp\xbbe\xad\x90\xfe!K\"\xea6\xcd6\xc91\xf4d\xe2-\x94jYD~\xd9;\x8b\xeea\xd0\xa7\x06\xd8\xd3*\xdd\x1d0([\xef\xfe\x83m\xb9\xab\x89\xfbu\x17\xf5 \x19\xe01\xcdW\xf4Q\x15\x02$\xcb\xc1u-\x15\xdd\x1f\xb6\xa3\xf8o\xbd\xe7\xb1F\x0f\x00\x00\x00\x00\x00\x00\x7f\x00\xa4*\xee\xd1)I\xa3o\xe1\xeeU\xb4I\xbbe\xb2\xae\xa9\x99\xce}\xe6\xc0\xe8b\x0f\x15\xf2\x87Z\xb4\xd7\xe15\x9cd\x02\xc5\"Au\xfd\xd0\x8b', 0x1ff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='.//group.cpu/.yz1\x10', 0x1ff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x01p_files\x00') getdents(r7, &(0x7f0000000ea9)=""/407, 0x197) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 00:13:18 executing program 3: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = dup3(r0, r0, 0x80000) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RSETATTR(r3, &(0x7f0000000400)={0x7, 0x1b, 0x80000000000003fd}, 0x4) write$P9_RREMOVE(r2, &(0x7f00000001c0)={0xffffffffffffffa4}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='.K\xb7\xaf\xc5\xdeYy9\xfaMs75(\xa3B+\xa46\xea\x04\x00F\x95\xe7J\xe3\xbc\xc6\x95\xc15Y\x8c,o\x7fwN(\xa8l\xf0g\xb6\xf75I>\xf4^[\xc7wp\xbbe\xad\x90\xfe!K\"\xea6\xcd6\xc91\xf4d\xe2-\x94jYD~\xd9;\x8b\xeea\xd0\xa7\x06\xd8\xd3*\xdd\x1d0([\xef\xfe\x83m\xb9\xab\x89\xfbu\x17\xf5 \x19\xe01\xcdW\xf4Q\x15\x02$\xcb\xc1u-\x15\xdd\x1f\xb6\xa3\xf8o\xbd\xe7\xb1F\x0f\x00\x00\x00\x00\x00\x00\x7f\x00\xa4*\xee\xd1)I\xa3o\xe1\xeeU\xb4I\xbbe\xb2\xae\xa9\x99\xce}\xe6\xc0\xe8b\x0f\x15\xf2\x87Z\xb4\xd7\xe15\x9cd\x02\xc5\"Au\xfd\xd0\x8b', 0x1ff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='.//group.cpu/.yz1\x10', 0x1ff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x01p_files\x00') getdents(r7, &(0x7f0000000ea9)=""/407, 0x197) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 00:13:18 executing program 5: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = dup3(r0, r0, 0x80000) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000a40)=ANY=[@ANYBLOB="14050001000000830000006316601cf2864349ea1d0002f2ddffffffddc94dc512cb51184c6c38a878ea79c60782b60e19da7316d4e2a4978b2212946b8b5584c21e46182a93b5564c3906000000a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bc0baebf773b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e509fca44df45ebe199ff813e2b83d6379c90f9a5df2fbbbf7a90100000000000000390dcba068f0e2f04ed7c3e0da10af8b998c0bc1b2fb70762419f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7c97b43e30182f09fd12dc7539f0eeb163b8fdb88f5ca311dab5e460bef647bf958a55ce8b30185952b58391dd2cb8ef299367bf37ce077fb6cdb85448c69fc326aed17b30d79bbe08b1781b16ae5bfeb82480d44b5fa2eb710e370226f5108c1f29675339e3c0a59a9588639c1554233a1bb78dbbcfccbc637a4bd964d26b61439947bfb624801085ff9677274c09f4cab88cb552c5130fafeb16b9c4ce52787402dfeee68f867ab0cc6e53371bc0e7d826da559b42dde187cacd1fc2437eeed1e59437c97661168824127c35f9612579755efaffc42d7b26b3ff54aafee5e0f5ee83f55a0fa49bef5c9b59d6f2d650b"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RSETATTR(r3, &(0x7f0000000400)={0x7, 0x1b, 0x80000000000003fd}, 0x4) write$P9_RREMOVE(r2, &(0x7f00000001c0)={0xffffffffffffffa4}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='.K\xb7\xaf\xc5\xdeYy9\xfaMs75(\xa3B+\xa46\xea\x04\x00F\x95\xe7J\xe3\xbc\xc6\x95\xc15Y\x8c,o\x7fwN(\xa8l\xf0g\xb6\xf75I>\xf4^[\xc7wp\xbbe\xad\x90\xfe!K\"\xea6\xcd6\xc91\xf4d\xe2-\x94jYD~\xd9;\x8b\xeea\xd0\xa7\x06\xd8\xd3*\xdd\x1d0([\xef\xfe\x83m\xb9\xab\x89\xfbu\x17\xf5 \x19\xe01\xcdW\xf4Q\x15\x02$\xcb\xc1u-\x15\xdd\x1f\xb6\xa3\xf8o\xbd\xe7\xb1F\x0f\x00\x00\x00\x00\x00\x00\x7f\x00\xa4*\xee\xd1)I\xa3o\xe1\xeeU\xb4I\xbbe\xb2\xae\xa9\x99\xce}\xe6\xc0\xe8b\x0f\x15\xf2\x87Z\xb4\xd7\xe15\x9cd\x02\xc5\"Au\xfd\xd0\x8b', 0x1ff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='.//group.cpu/.yz1\x10', 0x1ff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x01p_files\x00') getdents(r7, &(0x7f0000000ea9)=""/407, 0x197) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 00:13:18 executing program 2: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = dup3(r0, r0, 0x80000) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000a40)=ANY=[@ANYBLOB="14050001000000830000006316601cf2864349ea1d0002f2ddffffffddc94dc512cb51184c6c38a878ea79c60782b60e19da7316d4e2a4978b2212946b8b5584c21e46182a93b5564c3906000000a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bc0baebf773b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e509fca44df45ebe199ff813e2b83d6379c90f9a5df2fbbbf7a90100000000000000390dcba068f0e2f04ed7c3e0da10af8b998c0bc1b2fb70762419f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7c97b43e30182f09fd12dc7539f0eeb163b8fdb88f5ca311dab5e460bef647bf958a55ce8b30185952b58391dd2cb8ef299367bf37ce077fb6cdb85448c69fc326aed17b30d79bbe08b1781b16ae5bfeb82480d44b5fa2eb710e370226f5108c1f29675339e3c0a59a9588639c1554233a1bb78dbbcfccbc637a4bd964d26b61439947bfb624801085ff9677274c09f4cab88cb552c5130fafeb16b9c4ce52787402dfeee68f867ab0cc6e53371bc0e7d826da559b42dde187cacd1fc2437eeed1e59437c97661168824127c35f9612579755efaffc42d7b26b3ff54aafee5e0f5ee83f55a0fa49bef5c9b59d6f2d650b"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RSETATTR(r3, &(0x7f0000000400)={0x7, 0x1b, 0x80000000000003fd}, 0x4) write$P9_RREMOVE(r2, &(0x7f00000001c0)={0xffffffffffffffa4}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='.K\xb7\xaf\xc5\xdeYy9\xfaMs75(\xa3B+\xa46\xea\x04\x00F\x95\xe7J\xe3\xbc\xc6\x95\xc15Y\x8c,o\x7fwN(\xa8l\xf0g\xb6\xf75I>\xf4^[\xc7wp\xbbe\xad\x90\xfe!K\"\xea6\xcd6\xc91\xf4d\xe2-\x94jYD~\xd9;\x8b\xeea\xd0\xa7\x06\xd8\xd3*\xdd\x1d0([\xef\xfe\x83m\xb9\xab\x89\xfbu\x17\xf5 \x19\xe01\xcdW\xf4Q\x15\x02$\xcb\xc1u-\x15\xdd\x1f\xb6\xa3\xf8o\xbd\xe7\xb1F\x0f\x00\x00\x00\x00\x00\x00\x7f\x00\xa4*\xee\xd1)I\xa3o\xe1\xeeU\xb4I\xbbe\xb2\xae\xa9\x99\xce}\xe6\xc0\xe8b\x0f\x15\xf2\x87Z\xb4\xd7\xe15\x9cd\x02\xc5\"Au\xfd\xd0\x8b', 0x1ff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='.//group.cpu/.yz1\x10', 0x1ff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x01p_files\x00') getdents(r7, &(0x7f0000000ea9)=""/407, 0x197) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 00:13:18 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:18 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:18 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:18 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x803, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:18 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x803, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:19 executing program 4: r0 = socket(0x2, 0x400000000002, 0x0) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="82020600000000000000"], 0x1) writev(r0, &(0x7f0000001800)=[{&(0x7f0000001d00)="3c82a082fc29cbb2c838020ec218490f3cdce78d3954b0e4a9a3cfda7807f0668d0fccc80c8ae5979d5f1615323ac8ce30bd0c3099f993a0440bd4344753fbac224939adc8eb18502ad550976ce0ba491829e99d40054a649754f53fc69ebd5b29d3273b5cdcff825ea0a05c636d5c331e9d8874bc3d6b700e1627", 0x7b}], 0x1) 00:13:19 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x803, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:19 executing program 0: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = dup3(r0, r0, 0x80000) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RSETATTR(r3, &(0x7f0000000400)={0x7, 0x1b, 0x80000000000003fd}, 0x4) write$P9_RREMOVE(r2, &(0x7f00000001c0)={0xffffffffffffffa4}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='.K\xb7\xaf\xc5\xdeYy9\xfaMs75(\xa3B+\xa46\xea\x04\x00F\x95\xe7J\xe3\xbc\xc6\x95\xc15Y\x8c,o\x7fwN(\xa8l\xf0g\xb6\xf75I>\xf4^[\xc7wp\xbbe\xad\x90\xfe!K\"\xea6\xcd6\xc91\xf4d\xe2-\x94jYD~\xd9;\x8b\xeea\xd0\xa7\x06\xd8\xd3*\xdd\x1d0([\xef\xfe\x83m\xb9\xab\x89\xfbu\x17\xf5 \x19\xe01\xcdW\xf4Q\x15\x02$\xcb\xc1u-\x15\xdd\x1f\xb6\xa3\xf8o\xbd\xe7\xb1F\x0f\x00\x00\x00\x00\x00\x00\x7f\x00\xa4*\xee\xd1)I\xa3o\xe1\xeeU\xb4I\xbbe\xb2\xae\xa9\x99\xce}\xe6\xc0\xe8b\x0f\x15\xf2\x87Z\xb4\xd7\xe15\x9cd\x02\xc5\"Au\xfd\xd0\x8b', 0x1ff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='.//group.cpu/.yz1\x10', 0x1ff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x01p_files\x00') getdents(r7, &(0x7f0000000ea9)=""/407, 0x197) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 00:13:19 executing program 5: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = dup3(r0, r0, 0x80000) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RSETATTR(r3, &(0x7f0000000400)={0x7, 0x1b, 0x80000000000003fd}, 0x4) write$P9_RREMOVE(r2, &(0x7f00000001c0)={0xffffffffffffffa4}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='.K\xb7\xaf\xc5\xdeYy9\xfaMs75(\xa3B+\xa46\xea\x04\x00F\x95\xe7J\xe3\xbc\xc6\x95\xc15Y\x8c,o\x7fwN(\xa8l\xf0g\xb6\xf75I>\xf4^[\xc7wp\xbbe\xad\x90\xfe!K\"\xea6\xcd6\xc91\xf4d\xe2-\x94jYD~\xd9;\x8b\xeea\xd0\xa7\x06\xd8\xd3*\xdd\x1d0([\xef\xfe\x83m\xb9\xab\x89\xfbu\x17\xf5 \x19\xe01\xcdW\xf4Q\x15\x02$\xcb\xc1u-\x15\xdd\x1f\xb6\xa3\xf8o\xbd\xe7\xb1F\x0f\x00\x00\x00\x00\x00\x00\x7f\x00\xa4*\xee\xd1)I\xa3o\xe1\xeeU\xb4I\xbbe\xb2\xae\xa9\x99\xce}\xe6\xc0\xe8b\x0f\x15\xf2\x87Z\xb4\xd7\xe15\x9cd\x02\xc5\"Au\xfd\xd0\x8b', 0x1ff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='.//group.cpu/.yz1\x10', 0x1ff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x01p_files\x00') getdents(r7, &(0x7f0000000ea9)=""/407, 0x197) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 00:13:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x18, 0x0, &(0x7f0000000140)) 00:13:19 executing program 2: r0 = socket$inet6(0xa, 0x200000000000803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) pwrite64(r1, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ecb-camellia-aesni,tgr160)\x00'}, 0x58) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100000002072, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000100)={0xad, {{0x2, 0x4e21}}}, 0x88) r4 = socket$alg(0x26, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f00000003c0)={0x28, 0x0, 0x0, @my=0x0}, 0x10) bind$alg(r3, 0x0, 0x25141bb3cab627f7) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000004c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000500)=0x14) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={r6}, 0x8) write$binfmt_script(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="d100000099cf71499acaf04151d919e70000000700cfaa447a6cde0a4385cdae72a4f80b8c49aad82526d62df448a542e71c151b8ecf2321b2d315d28101705f4c20cb00002052c722c35429462e5e4d55ab9e100700000049fed7c56b45167100bdf3b3d973cf76d67ab0a5c73b0d7ee78f355a5089a78391f95c99afdc2dba202c2d20fdc4e1090a8dadcbe796030964a8950098f9a884ef949dfb6d2469b95213e97191b4a20a08be5b39382a10ae9db47753cb27bed4c5905b0145daf0f1fc5ac3f3ed9e28bb82e000000000000000000000000000"], 0xd7) recvmmsg(r5, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x0, &(0x7f0000008bc0)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0xfffffe8f) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x300000a, 0x8013, r3, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x1000}) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x3c000, 0x800}, 0x18) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) 00:13:19 executing program 3: 00:13:19 executing program 4: 00:13:19 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:19 executing program 3: 00:13:19 executing program 4: 00:13:19 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:19 executing program 3: 00:13:19 executing program 0: 00:13:19 executing program 3: 00:13:19 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:19 executing program 4: 00:13:19 executing program 2: 00:13:19 executing program 5: 00:13:19 executing program 4: 00:13:19 executing program 3: 00:13:19 executing program 5: 00:13:19 executing program 2: 00:13:19 executing program 2: 00:13:19 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:19 executing program 0: 00:13:19 executing program 3: 00:13:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xa) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = syz_init_net_socket$nfc_llcp(0x27, 0x80002, 0x1) recvmmsg(r1, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:13:19 executing program 5: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) clock_nanosleep(0x0, 0x0, 0x0, 0x0) 00:13:19 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:19 executing program 0: 00:13:19 executing program 4: [ 204.160270] audit: type=1326 audit(1545437599.894:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7733 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0xffff0000 00:13:19 executing program 3: 00:13:19 executing program 2: 00:13:20 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffffffffffed4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 00:13:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f0000000300)="3666440f50f564ff0941c3c401f82ebd92823dcfc4c27d794e00678c0fe2e3ecec0fa0bad3196f") clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0) 00:13:20 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) listen(0xffffffffffffffff, 0x5d7a) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:13:20 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff66, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) 00:13:20 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000200)=0x404100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:13:20 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:20 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x200000000000000, &(0x7f0000000000)={&(0x7f0000002f00)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 00:13:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCFLSH(r1, 0x5437, 0x0) dup3(r2, r0, 0x0) 00:13:20 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) listen(0xffffffffffffffff, 0x5d7a) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 204.947554] audit: type=1326 audit(1545437600.684:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7733 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0xffff0000 00:13:20 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') close(r0) 00:13:20 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0), 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff66, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 00:13:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') close(r0) 00:13:21 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0), 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:21 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev, @mcast2, @empty, 0x0, 0x0, 0x0, 0x800000000112}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 00:13:21 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:21 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0), 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x2, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 00:13:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[], 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) write(r1, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) creat(&(0x7f0000000280)='./file0\x00', 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 00:13:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) write(r1, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}) creat(0x0, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 00:13:21 executing program 4: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 00:13:21 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:21 executing program 0: syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000140)={0x0, [], 0x7}) 00:13:21 executing program 4: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") pselect6(0x8, &(0x7f00000000c0)={0x27f}, 0x0, 0x0, 0x0, 0x0) 00:13:21 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x3) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x6e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 00:13:21 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x44}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 00:13:22 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:22 executing program 4: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:22 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[], 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) write(r1, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) creat(&(0x7f0000000280)='./file0\x00', 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 00:13:22 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/11, 0xb) r1 = dup2(r0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x2, 0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 00:13:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 00:13:22 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:22 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:24 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x3) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x6e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 00:13:24 executing program 5: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) bind$inet(0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 00:13:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffffc5}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 00:13:24 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:24 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[], 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) write(r1, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) creat(&(0x7f0000000280)='./file0\x00', 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 00:13:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) syz_open_dev$sndseq(0x0, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGETD(r0, 0x541f, 0xfffffffffffffffe) 00:13:24 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:24 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x3) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x6e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 00:13:24 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x3) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x6e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 00:13:25 executing program 4: r0 = semget(0x3, 0x0, 0x0) semctl$GETVAL(r0, 0x72bea6febbb03260, 0x5, 0x0) 00:13:25 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc08c5332, &(0x7f0000000000)={0x43, @time}) 00:13:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') preadv(r0, &(0x7f0000001d00)=[{&(0x7f0000000780)=""/201, 0xc9}, {&(0x7f0000000880)=""/164, 0xa4}, {&(0x7f0000000940)=""/205, 0xcd}], 0x3, 0x0) 00:13:25 executing program 5: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) bind$inet(0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 00:13:25 executing program 4: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) syz_execute_func(&(0x7f0000000080)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000180)='./file0\x00', 0x0) capget(&(0x7f0000000000), 0x0) ptrace(0x11, r0) 00:13:25 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:25 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:25 executing program 2: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) clock_getres(0x0, 0x0) 00:13:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x100000001}, &(0x7f0000000300)=0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x00\x0f\x1c\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') mmap$perf(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='0dev/sg0\x00'], 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0) pread64(r1, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$input_event(r0, &(0x7f00000004c0)={{}, 0x0, 0x4000000000002}, 0xffffffffffffff44) 00:13:25 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) [ 210.150403] audit: type=1326 audit(1545437605.884:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7967 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0xffff0000 00:13:25 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) [ 210.939744] audit: type=1326 audit(1545437606.674:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7967 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0xffff0000 00:13:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x100000001}, &(0x7f0000000300)=0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x00\x0f\x1c\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') mmap$perf(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='0dev/sg0\x00'], 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0) pread64(r1, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$input_event(r0, &(0x7f00000004c0)={{}, 0x0, 0x4000000000002}, 0xffffffffffffff44) 00:13:27 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x3) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x6e}) ptrace$cont(0x20, r0, 0x0, 0x0) 00:13:27 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:27 executing program 5: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) bind$inet(0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 00:13:27 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x100000001}, &(0x7f0000000300)=0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x00\x0f\x1c\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') mmap$perf(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='0dev/sg0\x00'], 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0) pread64(r1, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$input_event(r0, &(0x7f00000004c0)={{}, 0x0, 0x4000000000002}, 0xffffffffffffff44) 00:13:28 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:28 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x100000001}, &(0x7f0000000300)=0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x00\x0f\x1c\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') mmap$perf(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='0dev/sg0\x00'], 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0) pread64(r1, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$input_event(r0, &(0x7f00000004c0)={{}, 0x0, 0x4000000000002}, 0xffffffffffffff44) 00:13:28 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:28 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc08c5335, &(0x7f0000000000)={0x43, @time}) 00:13:28 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x803, 0x3) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") recvmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r3 = dup2(r0, r1) ioctl$TUNGETFEATURES(r3, 0x800454cf, 0x0) 00:13:31 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x3) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x6e}) ptrace$cont(0x20, r0, 0x0, 0x0) 00:13:31 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:31 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x803, 0x3) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x67}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 00:13:31 executing program 5: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) bind$inet(0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 00:13:31 executing program 2: gettid() socket$inet(0x2, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000380)='cifs.idmap\x00', &(0x7f0000002640)={'syz', 0x3}, &(0x7f0000002680)='/dev/vhost-vsock\x00', 0xfffffffffffffffa) 00:13:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) 00:13:31 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x803, 0x3) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:31 executing program 2: 00:13:31 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x0, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:31 executing program 2: 00:13:31 executing program 4: 00:13:34 executing program 2: 00:13:34 executing program 4: 00:13:34 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x3) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x6e}) ptrace$cont(0x20, r0, 0x0, 0x0) 00:13:34 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x0, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:34 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:34 executing program 5: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) bind$inet(0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') quotactl(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 00:13:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c630f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 00:13:34 executing program 4: 00:13:34 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:34 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x0, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:34 executing program 4: [ 218.452766] binder: 8088:8089 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 218.479083] binder: 8088:8089 unknown command 0 00:13:34 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:34 executing program 4: [ 218.499154] binder: 8088:8089 ioctl c0306201 20000440 returned -22 [ 218.517252] binder: 8088:8097 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 218.524638] binder: 8088:8097 unknown command 0 [ 218.529537] binder: 8088:8097 ioctl c0306201 20000440 returned -22 00:13:34 executing program 2: 00:13:37 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x3) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 00:13:37 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:37 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:37 executing program 2: 00:13:37 executing program 4: 00:13:37 executing program 5: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) bind$inet(0xffffffffffffffff, 0x0, 0x0) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 00:13:37 executing program 4: 00:13:37 executing program 2: 00:13:37 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:37 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:37 executing program 2: 00:13:37 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x3) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 00:13:37 executing program 4: 00:13:37 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:37 executing program 2: 00:13:37 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:37 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:37 executing program 5: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f0000000040)='./file0\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 00:13:37 executing program 4: 00:13:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) rt_sigqueueinfo(r2, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) ptrace(0x4208, r2) 00:13:37 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:37 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:37 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 222.094324] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 222.101061] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 222.146110] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:13:40 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x3) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 00:13:40 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='hybla\x00', 0x6) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r2, 0x401104000000016) 00:13:40 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r0, 0x4, 0xc00004042c00) listen(r1, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) 00:13:40 executing program 5: creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 00:13:40 executing program 5: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f0000000040)='./file0\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 00:13:40 executing program 3: syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:40 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000040)) 00:13:40 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='hybla\x00', 0x6) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r2, 0x401104000000016) 00:13:40 executing program 3: syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:43 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x3) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x6e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 00:13:43 executing program 4: openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000005c0)='../..\x00\x00\x00tap\x00\x89PY7/\x11\x99\xaaS\xf0\xbb\\\xf7\xb6L\xb73ke\x02d\xb1\xf1G\xddC\x9d\x1b\xce\xff;\aZ\'E\xf5\x00 \x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00 \x17\x87\x19<\xf2\xbf\xe8\xbcQ\xbc&@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf8\xff\xff\xff\xb11j\x001Lf\x93\xdat=\xf8\x16\x19\xf1\xc36o2R\xee\a\x8c<8\xf2\xb0\xadD\x95\xdb\xcf\x89\xe4\x10\x86(\x8e\x13\xb6#\xb4M\x12\x8e\xb9\xed\xcc\xc4\xcf\xb5\xcdA<\xba?\x85m\xf7\xd9\'\x84\xac\x11T\x1c\x19\xabpM\x1f\x9dk\xe3\xba\b\xf5P\xfb\xc5\xa3\xe2=\xb9\xc4\xc1%E\x8d\xcaj}\xe5e\x89\xfa\x19\xa3\x1fO\x1f\xe4]n\"\x95e\xd8\xddVFn\xaf\x1c\x1f\x84$\x80M=)spB\xa6{\xc8\'u\x19\x9b|&\x92\x1e\xd1\xc0z\xaf\x82\x1d\xd0s\xc2\xefL\x16b\xf1\xe6,\x01CW\xd3\xce\x1e\x99bizKQ\xed)\xf9\xd2 :\"\xbeN\f\'\xd4HXk:Al\xd2\x7f3\xc0,\xab\xf8e4k\x0f\v\xc1\x9c\x02\xb2zo\xd0\x8aR\x98\x84J\xacK\xff\xff\xff\xff\xff\xff\xff\xfaY\xda\xa1\xf5\xf9tt\xc8\xe7!.\x9c\vogZ\xb7\xd5k\x1b\a\x00\x00\x00\x88R\xa7\x90%\x18\x87)\x1b\n\xcb\x1d\xe4\x1d\x9f\x9f.\xa2;\xe8@\x86\x03\x19Np\xbb\x00\xb4\r\xadnd\x1e\xb2\xb6nF%\x15\xbb\xc2\"4y\xba\xab\xb5}\x0f\xc5\xa3\x1cD\x89\xa7a\xd8\xee{F\xdb\t\x8dS\xaa&y', 0x2761, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() 00:13:43 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c12") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:43 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0xb25, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000340)={0x0, 0x0, {0x0, 0x0, 0x0, 0x8}}) 00:13:43 executing program 3: syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:43 executing program 5: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f0000000040)='./file0\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 00:13:43 executing program 3: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:43 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c12") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:43 executing program 4: socket$inet(0x2, 0x6000000000000003, 0x6) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:13:43 executing program 2: socketpair(0x1, 0x80001, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(0xffffffffffffffff) sendto$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 00:13:43 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x3) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x6e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 00:13:43 executing program 3: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:43 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c12") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x400448dd, &(0x7f0000000100)) 00:13:43 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x3) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x6e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 00:13:43 executing program 3: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:43 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c12628571") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:44 executing program 5: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f0000000040)='./file0\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 00:13:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) clock_gettime(0x7, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:13:44 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x3) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) dup(0xffffffffffffffff) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x6e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 00:13:46 executing program 4: socket$inet(0x2, 0x6000000000000003, 0x6) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:13:46 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:46 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c12628571") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:46 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x3) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) dup(0xffffffffffffffff) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x6e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 00:13:46 executing program 5: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f0000000040)='./file0\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 00:13:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) set_thread_area(0x0) lsetxattr$security_smack_entry(&(0x7f0000000400)='./file0\x00', &(0x7f0000000500)='security.SMACK64IPOUT\x00', 0x0, 0x0, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000000f4, 0x3f00) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) io_setup(0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="6f73322e28316c2739c27dc649"], 0x0, 0x0) 00:13:46 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:46 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c12628571") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:46 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c1262857180") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:46 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:46 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:46 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c1262857180") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:49 executing program 4: socket$inet(0x2, 0x6000000000000003, 0x6) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:13:49 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c1262857180") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) set_thread_area(0x0) lsetxattr$security_smack_entry(&(0x7f0000000400)='./file0\x00', &(0x7f0000000500)='security.SMACK64IPOUT\x00', 0x0, 0x0, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000000f4, 0x3f00) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) io_setup(0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="6f73322e28316c2739c27dc649"], 0x0, 0x0) 00:13:49 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:49 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x3) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) dup(0xffffffffffffffff) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x6e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 00:13:49 executing program 5: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f0000000040)='./file0\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 00:13:49 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:49 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:49 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:49 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:49 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000284, 0x0) 00:13:49 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, 0x0, 0x0, 0x0) 00:13:52 executing program 4: socket$inet(0x2, 0x6000000000000003, 0x6) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:13:52 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:52 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, 0x0, 0x0, 0x0) 00:13:52 executing program 2: 00:13:52 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x3) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x6e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 00:13:52 executing program 5: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f0000000040)='./file0\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 00:13:52 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r1, 0x0, 0x0, 0x0) 00:13:52 executing program 2: 00:13:52 executing program 3: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 00:13:52 executing program 1: 00:13:52 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/81) 00:13:52 executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) clock_gettime(0x7, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 237.344730] list_add corruption. next->prev should be prev (ffff8881dad2d818), but was 0000000000000000. (next=ffff8881d9b2c4f0). [ 237.356833] ------------[ cut here ]------------ [ 237.361597] kernel BUG at lib/list_debug.c:25! [ 237.366189] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 237.371558] CPU: 1 PID: 0 Comm: ksoftirqd/1 Not tainted 4.20.0-rc6-next-20181217+ #172 [ 237.379610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.389057] RIP: 0010:__list_add_valid.cold.2+0xf/0x2a [ 237.394347] Code: 00 81 88 e8 51 bc d1 fd 0f 0b 48 89 de 48 c7 c7 60 00 81 88 e8 40 bc d1 fd 0f 0b 48 89 d9 48 c7 c7 20 01 81 88 e8 2f bc d1 fd <0f> 0b 48 89 f1 48 c7 c7 a0 01 81 88 48 89 de e8 1b bc d1 fd 0f 0b [ 237.413250] RSP: 0018:ffff8881dad07218 EFLAGS: 00010082 [ 237.418606] RAX: 0000000000000075 RBX: ffff8881d9b2c4f0 RCX: 0000000000000000 [ 237.425867] RDX: 0000000000000000 RSI: ffffffff8166b045 RDI: 0000000000000005 [ 237.433142] RBP: ffff8881dad07230 R08: ffff8881d9b2c440 R09: ffffed103b5a5020 [ 237.440402] R10: ffffed103b5a5020 R11: ffff8881dad28107 R12: ffff8881d95cc230 [ 237.447669] R13: 1ffff1103b5a0e4b R14: ffff8881dad072b8 R15: ffff8881d95cc230 [ 237.454958] FS: 0000000000000000(0000) GS:ffff8881dad00000(0000) knlGS:0000000000000000 [ 237.463181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.469063] CR2: 0000000020e0007f CR3: 00000001b334d000 CR4: 00000000001406e0 [ 237.476331] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.483605] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.490866] Call Trace: [ 237.493438] [ 237.495644] ? __cpu_to_node+0x7d/0xa0 [ 237.499565] account_entity_enqueue+0x3a3/0x660 [ 237.504236] ? active_load_balance_cpu_stop+0x1230/0x1230 [ 237.509811] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 237.515348] ? check_preemption_disabled+0x48/0x280 [ 237.520385] enqueue_entity+0x2af/0x20a0 [ 237.524483] ? try_to_wake_up+0x11c/0x1440 [ 237.528717] ? put_prev_task_fair+0x80/0x80 [ 237.533036] ? __cpu_to_node+0x7d/0xa0 [ 237.536924] ? task_change_group_fair+0xa30/0xa30 [ 237.541769] ? enqueue_entity+0x34b/0x20a0 [ 237.546006] ? put_prev_task_fair+0x80/0x80 [ 237.550345] ? __lock_acquire+0x62f/0x4c20 [ 237.554589] ? mark_held_locks+0x130/0x130 [ 237.558821] ? __lock_acquire+0x62f/0x4c20 [ 237.563078] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 237.568180] enqueue_task_fair+0x288/0x11f0 [ 237.572498] ? enqueue_entity+0x20a0/0x20a0 [ 237.576820] ? find_held_lock+0x36/0x1c0 [ 237.580908] ? pvclock_read_flags+0x160/0x160 [ 237.585419] ? activate_task+0x21a/0x430 [ 237.589478] ? lock_downgrade+0x900/0x900 [ 237.593647] ? kvm_clock_read+0x18/0x30 [ 237.597622] ? kvm_sched_clock_read+0x9/0x20 [ 237.602034] ? sched_clock+0x31/0x50 [ 237.605747] ? sched_clock_cpu+0x1b/0x1b0 [ 237.609897] ? record_times+0x1e/0x590 [ 237.613780] ? pvclock_read_flags+0x160/0x160 [ 237.618271] ? psi_task_change+0x370/0x5f0 [ 237.622498] ? update_dl_rq_load_avg+0x840/0x840 [ 237.627263] activate_task+0x136/0x430 [ 237.631149] ttwu_do_activate+0xd5/0x1f0 [ 237.635204] try_to_wake_up+0x9b3/0x1440 [ 237.639264] ? migrate_swap_stop+0x8a0/0x8a0 [ 237.643667] ? lock_downgrade+0x900/0x900 [ 237.647811] ? do_raw_spin_unlock+0xa7/0x330 [ 237.652279] ? trace_hardirqs_off+0xb8/0x310 [ 237.656718] ? kasan_check_read+0x11/0x20 [ 237.660867] ? do_raw_spin_unlock+0xa7/0x330 [ 237.665271] ? trace_hardirqs_on+0x310/0x310 [ 237.669713] ? __hrtimer_run_queues+0x3b0/0x10d0 [ 237.674479] ? trace_hardirqs_off+0xb8/0x310 [ 237.678880] ? kasan_check_read+0x11/0x20 [ 237.683021] ? do_raw_spin_unlock+0xa7/0x330 [ 237.687463] ? timerqueue_del+0x86/0x150 [ 237.691528] wake_up_process+0x10/0x20 [ 237.695409] hrtimer_wakeup+0x48/0x60 [ 237.699204] __hrtimer_run_queues+0x41c/0x10d0 [ 237.703788] ? clock_was_set_work+0x30/0x30 [ 237.708110] ? hrtimer_start_range_ns+0xe00/0xe00 [ 237.712961] ? pvclock_read_flags+0x160/0x160 [ 237.717465] ? trace_hardirqs_on+0x310/0x310 [ 237.721897] ? __local_bh_enable+0xf6/0x140 [ 237.726224] ? kvm_clock_read+0x18/0x30 [ 237.730197] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 237.735212] ? ktime_get_update_offsets_now+0x3b3/0x540 [ 237.740575] ? do_timer+0x50/0x50 [ 237.744023] ? rwlock_bug.part.2+0x90/0x90 [ 237.748254] ? trace_hardirqs_on+0x310/0x310 [ 237.752692] ? rcu_softirq_qs+0x20/0x20 [ 237.756669] hrtimer_interrupt+0x313/0x780 [ 237.760928] smp_apic_timer_interrupt+0x1a1/0x760 [ 237.765777] ? smp_reschedule_interrupt+0x109/0x650 [ 237.770795] ? smp_call_function_single_interrupt+0x650/0x650 [ 237.776673] ? interrupt_entry+0xb5/0xc0 [ 237.780729] ? trace_hardirqs_off_caller+0xbb/0x310 [ 237.785739] ? trace_hardirqs_off_caller+0xbb/0x310 [ 237.790763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 237.795608] ? trace_hardirqs_on_caller+0x310/0x310 [ 237.800619] ? trace_hardirqs_on_caller+0x310/0x310 [ 237.805633] ? task_prio+0x50/0x50 [ 237.809174] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 237.814705] ? check_preemption_disabled+0x48/0x280 [ 237.819718] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 237.824560] apic_timer_interrupt+0xf/0x20 [ 237.828781] [ 237.831008] Modules linked in: [ 237.834202] ---[ end trace 54b3a4550a21c9f1 ]--- [ 237.838958] RIP: 0010:__list_add_valid.cold.2+0xf/0x2a [ 237.844232] Code: 00 81 88 e8 51 bc d1 fd 0f 0b 48 89 de 48 c7 c7 60 00 81 88 e8 40 bc d1 fd 0f 0b 48 89 d9 48 c7 c7 20 01 81 88 e8 2f bc d1 fd <0f> 0b 48 89 f1 48 c7 c7 a0 01 81 88 48 89 de e8 1b bc d1 fd 0f 0b [ 237.863143] RSP: 0018:ffff8881dad07218 EFLAGS: 00010082 [ 237.868516] RAX: 0000000000000075 RBX: ffff8881d9b2c4f0 RCX: 0000000000000000 [ 237.875776] RDX: 0000000000000000 RSI: ffffffff8166b045 RDI: 0000000000000005 [ 237.883037] RBP: ffff8881dad07230 R08: ffff8881d9b2c440 R09: ffffed103b5a5020 [ 237.890433] R10: ffffed103b5a5020 R11: ffff8881dad28107 R12: ffff8881d95cc230 [ 237.897730] R13: 1ffff1103b5a0e4b R14: ffff8881dad072b8 R15: ffff8881d95cc230 [ 237.904996] FS: 0000000000000000(0000) GS:ffff8881dad00000(0000) knlGS:0000000000000000 [ 237.913211] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.919100] CR2: 0000000020e0007f CR3: 00000001b334d000 CR4: 00000000001406e0 [ 237.926378] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.933681] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.940940] Kernel panic - not syncing: Fatal exception in interrupt [ 239.108241] Shutting down cpus with NMI [ 239.113121] Kernel Offset: disabled [ 239.116743] Rebooting in 86400 seconds..