9718] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 490.724357] misc userio: Invalid payload size [ 490.727002] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4351f4f6d4 [ 490.727012] R13: 00000000004beee9 R14: 00000000004d02a0 R15: 0000000000000005 [ 490.778334] FAULT_INJECTION: forcing a failure. [ 490.778334] name failslab, interval 1, probability 0, space 0, times 0 [ 490.806700] CPU: 0 PID: 16381 Comm: syz-executor1 Not tainted 4.20.0+ #172 [ 490.813739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.823114] Call Trace: [ 490.825710] dump_stack+0x1d3/0x2c6 [ 490.829352] ? dump_stack_print_info.cold.1+0x20/0x20 [ 490.834566] should_fail.cold.4+0xa/0x17 [ 490.838631] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 490.843735] ? mark_held_locks+0x130/0x130 [ 490.848012] ? mark_held_locks+0x130/0x130 [ 490.852294] ? find_held_lock+0x36/0x1c0 [ 490.856371] ? find_held_lock+0x36/0x1c0 [ 490.860457] ? ___might_sleep+0x1ed/0x300 [ 490.864614] ? arch_local_save_flags+0x40/0x40 [ 490.869293] ? rcuwait_wake_up+0x1a1/0x2f0 [ 490.873541] __should_failslab+0x124/0x180 [ 490.877798] should_failslab+0x9/0x14 [ 490.881605] kmem_cache_alloc+0x2be/0x730 [ 490.885763] ? find_held_lock+0x36/0x1c0 [ 490.889858] taskstats_exit+0x7cd/0xed0 [ 490.893853] ? acct_collect+0x70c/0x860 [ 490.893873] ? taskstats_user_cmd+0x1100/0x1100 [ 490.893887] ? lockdep_hardirqs_on+0x421/0x5c0 [ 490.893901] ? trace_hardirqs_on+0xbd/0x310 [ 490.893914] ? kasan_check_read+0x11/0x20 [ 490.893927] ? acct_collect+0x70c/0x860 [ 490.893941] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 490.902582] ? do_exit+0x43d/0x26d0 [ 490.902597] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 490.902619] ? _raw_spin_unlock_irq+0x60/0x80 [ 490.902633] ? acct_collect+0x70c/0x860 [ 490.902650] do_exit+0x52b/0x26d0 [ 490.902665] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 490.902679] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 490.902694] ? mm_update_next_owner+0x990/0x990 [ 490.902707] ? print_usage_bug+0xc0/0xc0 [ 490.902724] ? __lock_acquire+0x62f/0x4c20 [ 490.902739] ? debug_object_active_state+0x2f5/0x4d0 [ 490.902756] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 490.902787] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 490.902809] ? __lock_acquire+0x62f/0x4c20 [ 490.989116] ? mark_held_locks+0x130/0x130 [ 490.993364] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 490.998631] ? debug_object_deactivate+0x450/0x450 [ 491.003544] ? call_rcu+0xb/0x10 [ 491.006917] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 491.012382] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 491.017922] ? check_preemption_disabled+0x48/0x280 [ 491.022950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 491.028491] ? graph_lock+0x270/0x270 [ 491.032301] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 491.037824] ? rcu_pm_notify+0xc0/0xc0 [ 491.041704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 491.047228] ? graph_lock+0x270/0x270 [ 491.051011] ? find_held_lock+0x36/0x1c0 [ 491.055078] ? memset+0x31/0x40 [ 491.058341] ? find_held_lock+0x36/0x1c0 [ 491.062394] ? get_signal+0x95b/0x1980 [ 491.066294] ? _raw_spin_unlock_irq+0x27/0x80 [ 491.070795] ? _raw_spin_unlock_irq+0x27/0x80 [ 491.075277] do_group_exit+0x177/0x440 [ 491.079172] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 491.084624] ? __ia32_sys_exit+0x50/0x50 [ 491.088719] get_signal+0x8b0/0x1980 [ 491.092436] ? ptrace_notify+0x130/0x130 [ 491.096484] ? __set_current_blocked+0xdf/0x120 [ 491.101140] ? _raw_spin_unlock_irq+0x27/0x80 [ 491.105633] ? _raw_spin_unlock_irq+0x27/0x80 [ 491.110148] ? lockdep_hardirqs_on+0x421/0x5c0 [ 491.114739] ? trace_hardirqs_on+0xbd/0x310 [ 491.119068] ? kasan_check_read+0x11/0x20 [ 491.123242] ? __set_current_blocked+0xdf/0x120 [ 491.127908] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 491.133359] ? poll_select_copy_remaining+0x433/0x6a0 [ 491.138554] ? lock_release+0xa00/0xa00 [ 491.142565] do_signal+0x9c/0x21c0 [ 491.146095] ? _raw_spin_unlock_irq+0x60/0x80 [ 491.150574] ? __set_current_blocked+0xe4/0x120 [ 491.155241] ? sigprocmask+0xfd/0x320 [ 491.159049] ? setup_sigcontext+0x7d0/0x7d0 [ 491.163387] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 491.168924] ? exit_to_usermode_loop+0x8c/0x380 [ 491.173592] ? exit_to_usermode_loop+0x8c/0x380 [ 491.178271] ? lockdep_hardirqs_on+0x421/0x5c0 [ 491.182851] ? trace_hardirqs_on+0xbd/0x310 [ 491.187172] ? do_syscall_64+0x6be/0x820 [ 491.191267] ? fput+0x130/0x1a0 [ 491.194560] ? do_syscall_64+0x9a/0x820 [ 491.198531] ? do_syscall_64+0x9a/0x820 [ 491.202506] exit_to_usermode_loop+0x2e5/0x380 [ 491.207091] ? syscall_trace_enter+0x1260/0x1260 [ 491.211876] do_syscall_64+0x6be/0x820 [ 491.215777] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 491.221153] ? syscall_return_slowpath+0x5e0/0x5e0 [ 491.226104] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 491.230953] ? trace_hardirqs_on_caller+0x310/0x310 [ 491.235974] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 491.240993] ? prepare_exit_to_usermode+0x291/0x3b0 [ 491.246020] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 491.250878] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 491.256067] RIP: 0033:0x4579b9 [ 491.259265] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 07:00:04 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:04 executing program 2 (fault-call:3 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 491.278161] RSP: 002b:00007ff3e7591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 491.285870] RAX: 0000000000000001 RBX: 00007ff3e7591c90 RCX: 00000000004579b9 [ 491.293153] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000000 [ 491.300418] RBP: 000000000073bf00 R08: 0000000000000008 R09: 0000000000000000 [ 491.307682] R10: 00000000200000c0 R11: 0000000000000246 R12: 00007ff3e75926d4 [ 491.314948] R13: 00000000004c3e80 R14: 00000000004d6f78 R15: 0000000000000004 07:00:04 executing program 3: read(0xffffffffffffffff, 0x0, 0x0) 07:00:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xd) r1 = getpid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x3f, 0xdb, 0x0, 0x6, 0x101, r1}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x117, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r2, 0x65, "1e27d6", "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"}}, 0x110) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r3, 0xffffffffffffffbd, &(0x7f00000000c0)) 07:00:04 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 491.415001] FAULT_INJECTION: forcing a failure. [ 491.415001] name failslab, interval 1, probability 0, space 0, times 0 [ 491.433509] CPU: 0 PID: 16424 Comm: syz-executor2 Not tainted 4.20.0+ #172 [ 491.440558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.449919] Call Trace: [ 491.452517] dump_stack+0x1d3/0x2c6 [ 491.456169] ? dump_stack_print_info.cold.1+0x20/0x20 [ 491.461397] should_fail.cold.4+0xa/0x17 [ 491.461426] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 491.470563] ? lockdep_hardirqs_on+0x421/0x5c0 [ 491.470580] ? retint_kernel+0x2d/0x2d [ 491.470594] ? trace_hardirqs_on_caller+0xc0/0x310 [ 491.470613] ? print_usage_bug+0xc0/0xc0 [ 491.470631] ? graph_lock+0x270/0x270 [ 491.470647] ? retint_kernel+0x2d/0x2d [ 491.470664] ? find_held_lock+0x36/0x1c0 [ 491.499883] ? ___might_sleep+0x1ed/0x300 [ 491.504043] ? arch_local_save_flags+0x40/0x40 [ 491.508663] __should_failslab+0x124/0x180 [ 491.512905] should_failslab+0x9/0x14 [ 491.516716] kmem_cache_alloc_node_trace+0x270/0x740 [ 491.521851] __get_vm_area_node+0x130/0x3a0 [ 491.526202] __vmalloc_node_range+0xc4/0x750 [ 491.530623] ? drm_property_create_blob.part.2+0xaa/0x470 [ 491.536167] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 491.540934] ? lockdep_hardirqs_on+0x421/0x5c0 [ 491.545530] ? drm_property_create_blob.part.2+0xaa/0x470 [ 491.551086] __vmalloc_node_flags_caller+0x75/0x90 [ 491.556025] ? drm_property_create_blob.part.2+0xaa/0x470 [ 491.561577] kvmalloc_node+0xd7/0xf0 [ 491.565304] drm_property_create_blob.part.2+0xaa/0x470 [ 491.570675] ? find_held_lock+0x36/0x1c0 [ 491.570819] misc userio: Invalid payload size [ 491.574744] ? drm_property_free_blob+0x3b0/0x3b0 [ 491.584069] ? drm_unbind_agp+0x20/0x20 [ 491.588072] ? lock_downgrade+0x900/0x900 [ 491.592241] drm_mode_createblob_ioctl+0x1b2/0x570 [ 491.597181] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 491.602060] drm_ioctl_kernel+0x278/0x330 [ 491.606232] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 491.611085] ? drm_setversion+0x8b0/0x8b0 [ 491.615247] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 491.620805] ? _copy_from_user+0xdf/0x150 [ 491.624984] drm_ioctl+0x58f/0xb90 [ 491.628533] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 491.633388] ? drm_version+0x3d0/0x3d0 [ 491.637297] ? ___might_sleep+0x1ed/0x300 [ 491.641457] ? arch_local_save_flags+0x40/0x40 [ 491.646056] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 491.651008] ? drm_version+0x3d0/0x3d0 [ 491.653574] misc userio: Invalid payload size [ 491.654906] do_vfs_ioctl+0x1de/0x1790 [ 491.654940] ? ioctl_preallocate+0x300/0x300 [ 491.654962] ? selinux_file_mprotect+0x620/0x620 [ 491.654984] ? __sb_end_write+0xd9/0x110 [ 491.655005] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 491.682129] ? fput+0x130/0x1a0 [ 491.685439] ? do_syscall_64+0x9a/0x820 [ 491.689429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 491.694975] ? security_file_ioctl+0x94/0xc0 [ 491.699397] ksys_ioctl+0xa9/0xd0 [ 491.702878] __x64_sys_ioctl+0x73/0xb0 [ 491.706797] do_syscall_64+0x1b9/0x820 [ 491.710696] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 491.716068] ? syscall_return_slowpath+0x5e0/0x5e0 [ 491.721052] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 491.725929] ? trace_hardirqs_on_caller+0x310/0x310 [ 491.730971] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 491.736038] ? prepare_exit_to_usermode+0x291/0x3b0 [ 491.741070] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 491.745929] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 491.751146] RIP: 0033:0x4579b9 07:00:04 executing program 0: mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000005c0)=""/39) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000300)={r0, 0x0, 0x800, 0x9, 0x9}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmsg$tipc(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="beac2e6f6c52f430fcdefff75df6206defc3fdef3928c306277ab726d419b1aeaa12f52f897aa10e6f1afc1db56d4acfb45c45d3f15d228d202aea94bc24eff396570bd468d576c28a373506241a21030fc87b83d30286fb43e6cd", 0x5b}, {&(0x7f0000000400)="b1673a4af2605acecfa6c6425586fe3007762d28f34efe1934353fb2d8e8e2c5378dfcd837b6ebc10013ea6c28785a3a047a2b614ab5dc4d7d47cbdc74055486", 0x40}], 0x2, &(0x7f0000000480)="9263603ad8b4565b9c95a0080f2daeecd8ee001e8145aad3f9ba36ff061239f71b6fdea1272dfa6d94277a8d87ef8a4bf648220855d7f3d46135c6ba426a01b43b8eaaf75df0611cbeb542c7dd9a192996ed4e6129cad6927559d1602d840ed2a28e293e9a8fd9438a7bf9bd68afa534f91ef60b53b22dddd07ea2fc17ca50db301909f414bd2f7ffa59db0357fab7b5930adfdc49ce59c4b3b85c88cd892c4664461a323b1214c3b02c03c1ee72fe7e9a9d53136460d4d848ca91662cca86752dc111818dcf9111cd8d0adf5f7ce795f8ed60d647d04836b2751631f7e95d4f62d0a18eb2e05e8b9d6c1ab984abba02", 0xf0, 0x8000}, 0x4040) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x40) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000140)=""/141) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000161000/0x4000)=nil, 0x4000}) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000280)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xb, 0x3fc, 0x1, [@bcast, @bcast, @bcast, @default, @bcast, @null, @bcast, @default]}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) 07:00:04 executing program 3: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x101800, 0x0) read(r0, 0x0, 0x0) 07:00:04 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0xf0ffffff7f0000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 491.754381] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 491.773287] RSP: 002b:00007f4351f4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.781013] RAX: ffffffffffffffda RBX: 00007f4351f4ec90 RCX: 00000000004579b9 [ 491.788303] RDX: 00000000200000c0 RSI: ffffffffffffffbd RDI: 0000000000000004 [ 491.788313] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 491.788322] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4351f4f6d4 07:00:04 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x2302000000000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 491.788330] R13: 00000000004beee9 R14: 00000000004d02a0 R15: 0000000000000005 [ 491.813667] misc userio: Invalid payload size [ 491.826072] misc userio: Invalid payload size 07:00:04 executing program 3: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x101800, 0x0) read(r0, 0x0, 0x0) 07:00:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x440000, 0x0) recvfrom$x25(r0, &(0x7f0000000140)=""/4096, 0x1000, 0x1, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) openat$kvm(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/kvm\x00', 0x80, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x3ff}, &(0x7f0000001140)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001180)=ANY=[@ANYRES32=r2, @ANYBLOB="d1000000e81dd111c24ee73ab532034323f48fcecca82862ac0ced4e2cc04704b7534213a322145b873597925cff315ee1218a32ebbbca80d20a987b4cd682eed7df4470615b82cbf9b481c5302e9ed77456edfd4e87744b4cc0acc769c8edb38224ad8ca8c9b67cca231cad1e2ded06f04844613ed3cfa5c1b2d41b8d846466e9d588b5494937a2a6bc8e0a8edcc5826702e5b6eb455368e36000ac46a322542dc31bd20a481f599009ac1b02c5d744d76462033225836c16d7ff55f4014c369ee9910c59529f46ed7c587cd3deaa64b9f7812963"], &(0x7f0000001280)=0xd9) 07:00:04 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x23020000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 491.934608] misc userio: Invalid payload size [ 491.946672] misc userio: Invalid payload size [ 491.990730] syz-executor2: vmalloc: allocation failure: 4194392 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 492.022675] syz-executor2 cpuset=syz2 mems_allowed=0-1 [ 492.032822] CPU: 0 PID: 16424 Comm: syz-executor2 Not tainted 4.20.0+ #172 [ 492.039840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.049194] Call Trace: [ 492.051840] dump_stack+0x1d3/0x2c6 [ 492.055490] ? dump_stack_print_info.cold.1+0x20/0x20 [ 492.060694] ? vprintk_func+0x85/0x181 [ 492.064580] warn_alloc.cold.118+0xb7/0x1bd [ 492.068909] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 492.073760] ? __get_vm_area_node+0x130/0x3a0 [ 492.078276] ? rcu_read_lock_sched_held+0x108/0x120 [ 492.083306] ? __get_vm_area_node+0x2e5/0x3a0 [ 492.087844] __vmalloc_node_range+0x472/0x750 [ 492.092342] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 492.097099] ? lockdep_hardirqs_on+0x421/0x5c0 [ 492.101692] ? drm_property_create_blob.part.2+0xaa/0x470 [ 492.107252] __vmalloc_node_flags_caller+0x75/0x90 [ 492.112198] ? drm_property_create_blob.part.2+0xaa/0x470 [ 492.117757] kvmalloc_node+0xd7/0xf0 [ 492.121486] drm_property_create_blob.part.2+0xaa/0x470 [ 492.126851] ? find_held_lock+0x36/0x1c0 [ 492.130911] ? drm_property_free_blob+0x3b0/0x3b0 [ 492.135790] ? drm_unbind_agp+0x20/0x20 [ 492.139766] ? lock_downgrade+0x900/0x900 [ 492.143938] drm_mode_createblob_ioctl+0x1b2/0x570 [ 492.148896] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 492.153788] drm_ioctl_kernel+0x278/0x330 [ 492.157946] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 492.162803] ? drm_setversion+0x8b0/0x8b0 [ 492.166976] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 492.172520] ? _copy_from_user+0xdf/0x150 [ 492.176677] drm_ioctl+0x58f/0xb90 [ 492.176694] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 492.176718] ? drm_version+0x3d0/0x3d0 [ 492.176743] ? ___might_sleep+0x1ed/0x300 [ 492.176759] ? arch_local_save_flags+0x40/0x40 [ 492.176797] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 492.176818] ? drm_version+0x3d0/0x3d0 [ 492.185183] do_vfs_ioctl+0x1de/0x1790 [ 492.185207] ? ioctl_preallocate+0x300/0x300 [ 492.185241] ? selinux_file_mprotect+0x620/0x620 [ 492.185260] ? __sb_end_write+0xd9/0x110 [ 492.223792] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 492.229348] ? fput+0x130/0x1a0 [ 492.232636] ? do_syscall_64+0x9a/0x820 [ 492.236628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 492.242177] ? security_file_ioctl+0x94/0xc0 [ 492.246595] ksys_ioctl+0xa9/0xd0 [ 492.250075] __x64_sys_ioctl+0x73/0xb0 [ 492.254015] do_syscall_64+0x1b9/0x820 [ 492.257929] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 492.263323] ? syscall_return_slowpath+0x5e0/0x5e0 [ 492.268262] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 492.273118] ? trace_hardirqs_on_caller+0x310/0x310 [ 492.278158] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 492.278179] ? prepare_exit_to_usermode+0x291/0x3b0 [ 492.278201] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 492.278226] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 492.278253] RIP: 0033:0x4579b9 [ 492.278269] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 492.278278] RSP: 002b:00007f4351f4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.288315] RAX: ffffffffffffffda RBX: 00007f4351f4ec90 RCX: 00000000004579b9 07:00:05 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x8}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) [ 492.288325] RDX: 00000000200000c0 RSI: ffffffffffffffbd RDI: 0000000000000004 [ 492.288335] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 492.288345] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4351f4f6d4 [ 492.288354] R13: 00000000004beee9 R14: 00000000004d02a0 R15: 0000000000000005 [ 492.306269] Mem-Info: [ 492.376934] misc userio: Invalid payload size [ 492.408057] active_anon:130011 inactive_anon:207 isolated_anon:0 [ 492.408057] active_file:1292 inactive_file:4760 isolated_file:0 [ 492.408057] unevictable:0 dirty:264 writeback:0 unstable:0 [ 492.408057] slab_reclaimable:12691 slab_unreclaimable:111413 [ 492.408057] mapped:53776 shmem:245 pagetables:962 bounce:0 [ 492.408057] free:1266335 free_pcp:962 free_cma:0 [ 492.443644] Node 0 active_anon:519928kB inactive_anon:828kB active_file:4964kB inactive_file:18992kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215004kB dirty:1056kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 362496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 492.473509] Node 1 active_anon:16kB inactive_anon:0kB active_file:204kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 492.500139] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 492.526525] lowmem_reserve[]: 0 2537 2539 2539 [ 492.531125] Node 0 DMA32 free:1275892kB min:36092kB low:45112kB high:54132kB active_anon:519952kB inactive_anon:836kB active_file:4968kB inactive_file:19020kB unevictable:0kB writepending:1116kB present:3129332kB managed:2601648kB mlocked:0kB kernel_stack:7200kB pagetables:3908kB bounce:0kB free_pcp:2552kB local_pcp:1344kB free_cma:0kB [ 492.561143] lowmem_reserve[]: 0 0 2 2 [ 492.564961] Node 0 Normal free:0kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2460kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 492.591877] lowmem_reserve[]: 0 0 0 0 [ 492.595714] Node 1 Normal free:3772956kB min:53760kB low:67200kB high:80640kB active_anon:16kB inactive_anon:0kB active_file:204kB inactive_file:48kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1404kB local_pcp:60kB free_cma:0kB [ 492.624196] lowmem_reserve[]: 0 0 0 0 [ 492.628159] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 492.641872] Node 0 DMA32: 7586*4kB (UE) 203*8kB (UME) 2904*16kB (UME) 2206*32kB (UME) 1339*64kB (UM) 818*128kB (UME) 438*256kB (UM) 220*512kB (U) 167*1024kB (U) 90*2048kB (UM) 87*4096kB (UM) = 1275872kB [ 492.660115] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 492.670895] Node 1 Normal: 105*4kB (UME) 313*8kB (UME) 309*16kB (UME) 99*32kB (UME) 50*64kB (UME) 41*128kB (UE) 26*256kB (UME) 32*512kB (UM) 25*1024kB (UM) 15*2048kB (UE) 897*4096kB (UM) = 3772956kB [ 492.688868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 492.697756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 07:00:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:05 executing program 3: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x101800, 0x0) read(r0, 0x0, 0x0) 07:00:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x926, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 07:00:05 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {0x0}}, 0x18) [ 492.706440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 492.715280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 492.724648] 6305 total pagecache pages [ 492.728633] 0 pages in swap cache [ 492.732094] Swap cache stats: add 0, delete 0, find 0/0 [ 492.737515] Free swap = 0kB [ 492.740541] Total swap = 0kB [ 492.743551] 1965979 pages RAM [ 492.746705] 0 pages HighMem/MovableOnly [ 492.750710] 343429 pages reserved [ 492.754168] 0 pages cma reserved 07:00:05 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 07:00:05 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x2302) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 492.863203] misc userio: Invalid payload size [ 492.869598] misc userio: Invalid payload size 07:00:05 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 07:00:05 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 07:00:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x7}}, 0x20) 07:00:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff40049409, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 493.085193] misc userio: Invalid payload size 07:00:05 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 07:00:05 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x22c7}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffc0045878, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:06 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 07:00:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x4, 0x2) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 07:00:06 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 07:00:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xc0045878, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:06 executing program 4 (fault-call:10 fault-nth:0): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:00:06 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x7ffffffff000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:06 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0x400}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4000, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000140)=""/4096) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) 07:00:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00005451, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:06 executing program 3 (fault-call:1 fault-nth:0): r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) [ 493.865517] misc userio: Invalid payload size 07:00:06 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) [ 493.983506] FAULT_INJECTION: forcing a failure. [ 493.983506] name failslab, interval 1, probability 0, space 0, times 0 [ 494.021730] misc userio: Invalid payload size [ 494.036107] CPU: 0 PID: 16551 Comm: syz-executor4 Not tainted 4.20.0+ #172 [ 494.043128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.052483] Call Trace: [ 494.055076] dump_stack+0x1d3/0x2c6 [ 494.058715] ? dump_stack_print_info.cold.1+0x20/0x20 [ 494.063916] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 494.069059] should_fail.cold.4+0xa/0x17 [ 494.073145] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 494.078268] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 494.083035] ? graph_lock+0x270/0x270 [ 494.086871] ? retint_kernel+0x2d/0x2d [ 494.090766] ? trace_hardirqs_on_caller+0xc0/0x310 [ 494.095722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 494.101265] ? put_dec_trunc8+0x273/0x300 [ 494.105424] ? find_held_lock+0x36/0x1c0 [ 494.109517] ? __lock_is_held+0xb5/0x140 [ 494.113622] ? ___might_sleep+0x1ed/0x300 [ 494.117794] ? arch_local_save_flags+0x40/0x40 [ 494.122384] __should_failslab+0x124/0x180 [ 494.126605] should_failslab+0x9/0x14 [ 494.130389] __kmalloc_track_caller+0x2d1/0x760 [ 494.135053] ? pointer+0x900/0x900 [ 494.138686] ? async_suspend_late+0x110/0x110 [ 494.143230] ? kvasprintf_const+0x67/0x190 [ 494.147516] kvasprintf+0xb5/0x150 [ 494.151044] ? bust_spinlocks+0xe0/0xe0 [ 494.155029] ? debug_mutex_init+0x2d/0x60 [ 494.159198] kvasprintf_const+0x67/0x190 [ 494.163312] kobject_set_name_vargs+0x5b/0x150 [ 494.167936] dev_set_name+0xad/0xe0 [ 494.171602] ? device_initialize+0x5f0/0x5f0 [ 494.176010] ? lockdep_init_map+0x105/0x590 [ 494.180348] ? __serio_register_port+0x24f/0x570 [ 494.185097] __serio_register_port+0x271/0x570 [ 494.189696] ? serio_resume+0x140/0x140 [ 494.193685] userio_char_write+0x358/0x5c0 [ 494.197910] ? userio_device_write+0x190/0x190 [ 494.202485] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 494.207250] __vfs_write+0x119/0x9f0 [ 494.210955] ? userio_device_write+0x190/0x190 [ 494.215527] ? kernel_read+0x120/0x120 [ 494.219421] ? avc_policy_seqno+0xd/0x70 [ 494.223538] ? avc_policy_seqno+0x26/0x70 [ 494.227711] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 494.232715] ? selinux_file_permission+0x90/0x540 [ 494.237561] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 494.243111] ? security_file_permission+0x1c2/0x230 [ 494.248124] ? rw_verify_area+0x118/0x360 [ 494.252294] vfs_write+0x1fc/0x560 [ 494.255842] ksys_write+0x101/0x260 [ 494.259457] ? __ia32_sys_read+0xb0/0xb0 [ 494.263541] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 494.269021] __x64_sys_write+0x73/0xb0 [ 494.272903] do_syscall_64+0x1b9/0x820 [ 494.276797] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 494.282152] ? syscall_return_slowpath+0x5e0/0x5e0 [ 494.287111] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 494.291944] ? trace_hardirqs_on_caller+0x310/0x310 [ 494.296949] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 494.301956] ? prepare_exit_to_usermode+0x291/0x3b0 [ 494.306976] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 494.311826] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 494.317013] RIP: 0033:0x4579b9 07:00:07 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0xc722000000000000}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:07 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x2302000000000000) 07:00:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x2, "fd93b83443a312a5fdb746bf22e6a45eb1d13e7a9efdb0f1b0ea2df2aaea3d86", 0x2, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x2, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) 07:00:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffc9, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 494.320209] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 494.339111] RSP: 002b:00007fdcb31c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 494.346804] RAX: ffffffffffffffda RBX: 00007fdcb31c3c90 RCX: 00000000004579b9 [ 494.354057] RDX: 0000000000000002 RSI: 0000000020000140 RDI: 0000000000000003 [ 494.361325] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 494.368579] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdcb31c46d4 [ 494.375831] R13: 00000000004cd298 R14: 00000000004dbbe0 R15: 0000000000000006 [ 494.412881] serio (null): device_add() failed for (), error: -22 07:00:07 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x23020000) 07:00:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_TYPE={0x8}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}}, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 07:00:07 executing program 4 (fault-call:10 fault-nth:1): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) [ 494.805703] misc userio: Invalid payload size [ 494.830603] FAULT_INJECTION: forcing a failure. [ 494.830603] name failslab, interval 1, probability 0, space 0, times 0 [ 494.842222] CPU: 1 PID: 16587 Comm: syz-executor4 Not tainted 4.20.0+ #172 [ 494.842236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.842241] Call Trace: [ 494.842264] dump_stack+0x1d3/0x2c6 [ 494.842294] ? dump_stack_print_info.cold.1+0x20/0x20 [ 494.858645] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 494.858664] ? lockdep_hardirqs_on+0x421/0x5c0 07:00:07 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/status\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x8, 0x0) dup3(r0, r0, 0x80000) syz_open_dev$midi(&(0x7f00000004c0)='/dev/midi#\x00', 0xfffffffffffffffb, 0x0) write$P9_RLERROR(r1, &(0x7f0000000140)={0x9, 0x7, 0x1}, 0x9) r2 = dup2(r0, r0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, 0x33b) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) r3 = semget$private(0x0, 0x0, 0x780) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f0000000080)=""/116) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f00000001c0)) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x141080, 0x0) fanotify_mark(r5, 0x48, 0x40000031, r4, &(0x7f0000000200)='./file0\x00') 07:00:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff0000541b, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:07 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x2302) 07:00:07 executing program 0 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 494.858686] should_fail.cold.4+0xa/0x17 [ 494.858700] ? trace_hardirqs_off+0x310/0x310 [ 494.858718] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 494.858747] ? retint_kernel+0x2d/0x2d [ 494.896948] ? vsnprintf+0x162/0x1b60 [ 494.900791] ? __sanitizer_cov_trace_pc+0x44/0x50 [ 494.905643] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 494.911180] ? graph_lock+0x270/0x270 [ 494.914992] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 494.920544] ? check_preemption_disabled+0x48/0x280 [ 494.925570] ? lock_acquire+0x1ed/0x520 07:00:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff4020940d, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 494.929552] ? serio_queue_event+0x82/0x470 [ 494.930450] misc userio: Invalid payload size [ 494.933886] __should_failslab+0x124/0x180 [ 494.933905] should_failslab+0x9/0x14 [ 494.933919] kmem_cache_alloc_trace+0x4b/0x750 [ 494.933932] ? kfree+0x1fa/0x230 [ 494.933955] serio_queue_event+0x16d/0x470 [ 494.933970] ? serio_uevent+0x3a0/0x3a0 [ 494.962573] ? lockdep_init_map+0x105/0x590 [ 494.966908] __serio_register_port+0x40e/0x570 [ 494.966924] ? serio_resume+0x140/0x140 [ 494.966964] userio_char_write+0x358/0x5c0 [ 494.975500] ? userio_device_write+0x190/0x190 [ 494.984315] ? ___might_sleep+0x1ed/0x300 [ 494.988676] __vfs_write+0x119/0x9f0 [ 494.992445] ? __fget_light+0x2e9/0x430 [ 494.996425] ? userio_device_write+0x190/0x190 [ 494.998126] misc userio: Invalid payload size [ 495.001030] ? kernel_read+0x120/0x120 [ 495.001045] ? __might_sleep+0x95/0x190 [ 495.001067] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 495.001085] ? __inode_security_revalidate+0xd9/0x120 [ 495.001105] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 495.001122] ? selinux_file_permission+0x90/0x540 [ 495.001142] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 495.039552] ? security_file_permission+0x1c2/0x230 [ 495.044584] ? rw_verify_area+0x118/0x360 [ 495.048740] vfs_write+0x1fc/0x560 [ 495.052318] ksys_write+0x101/0x260 [ 495.055961] ? __ia32_sys_read+0xb0/0xb0 [ 495.060067] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 495.065818] __x64_sys_write+0x73/0xb0 [ 495.070102] do_syscall_64+0x1b9/0x820 [ 495.074028] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 495.079405] ? syscall_return_slowpath+0x5e0/0x5e0 [ 495.084336] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 495.089184] ? trace_hardirqs_on_caller+0x310/0x310 [ 495.094213] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 495.099235] ? prepare_exit_to_usermode+0x291/0x3b0 [ 495.104304] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 495.104326] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 495.104337] RIP: 0033:0x4579b9 [ 495.104351] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 495.104359] RSP: 002b:00007fdcb31c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 495.104372] RAX: ffffffffffffffda RBX: 00007fdcb31c3c90 RCX: 00000000004579b9 [ 495.104380] RDX: 0000000000000002 RSI: 0000000020000140 RDI: 0000000000000003 [ 495.104390] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 495.137035] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdcb31c46d4 [ 495.137045] R13: 00000000004cd298 R14: 00000000004dbbe0 R15: 0000000000000006 [ 495.137071] serio: Not enough memory to queue event 3 [ 495.163605] FAULT_INJECTION: forcing a failure. [ 495.163605] name failslab, interval 1, probability 0, space 0, times 0 [ 495.221970] CPU: 1 PID: 16603 Comm: syz-executor0 Not tainted 4.20.0+ #172 [ 495.229037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.238392] Call Trace: [ 495.240988] dump_stack+0x1d3/0x2c6 [ 495.241011] ? dump_stack_print_info.cold.1+0x20/0x20 [ 495.241041] should_fail.cold.4+0xa/0x17 [ 495.241057] ? retint_kernel+0x2d/0x2d [ 495.241077] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 495.249895] ? trace_hardirqs_off+0x310/0x310 [ 495.249919] ? lockdep_hardirqs_on+0x421/0x5c0 [ 495.249939] ? find_held_lock+0x36/0x1c0 [ 495.249963] ? find_held_lock+0x36/0x1c0 07:00:08 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x8000000}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:08 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x42000) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000100)={0x0, 0x2, 0xd09, [], &(0x7f00000000c0)=0x4}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff80087601, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:08 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x7ffffffff000) [ 495.249996] ? ___might_sleep+0x1ed/0x300 [ 495.284353] ? arch_local_save_flags+0x40/0x40 [ 495.288956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 495.294515] __should_failslab+0x124/0x180 [ 495.298790] should_failslab+0x9/0x14 [ 495.302607] __kmalloc+0x2e0/0x770 [ 495.306169] ? drm_ioctl+0x4ab/0xb90 [ 495.309901] drm_ioctl+0x4ab/0xb90 [ 495.313454] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 495.318324] ? drm_version+0x3d0/0x3d0 [ 495.322230] ? ___might_sleep+0x1ed/0x300 [ 495.326389] ? arch_local_save_flags+0x40/0x40 [ 495.330992] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 495.335787] ? drm_version+0x3d0/0x3d0 [ 495.339694] do_vfs_ioctl+0x1de/0x1790 [ 495.343599] ? ioctl_preallocate+0x300/0x300 [ 495.343621] ? selinux_file_mprotect+0x620/0x620 [ 495.343651] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 495.343666] ? fput+0x130/0x1a0 [ 495.343683] ? do_syscall_64+0x9a/0x820 [ 495.352838] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 495.352856] ? security_file_ioctl+0x94/0xc0 [ 495.352874] ksys_ioctl+0xa9/0xd0 [ 495.352893] __x64_sys_ioctl+0x73/0xb0 [ 495.352911] do_syscall_64+0x1b9/0x820 [ 495.375753] misc userio: Invalid payload size [ 495.379056] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 495.379077] ? syscall_return_slowpath+0x5e0/0x5e0 [ 495.379093] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 495.379124] ? trace_hardirqs_on_caller+0x310/0x310 [ 495.379142] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 495.379160] ? prepare_exit_to_usermode+0x291/0x3b0 [ 495.379182] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 495.379207] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 495.379223] RIP: 0033:0x4579b9 [ 495.402549] misc userio: Invalid payload size [ 495.406605] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 495.406615] RSP: 002b:00007ff3521a3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.406630] RAX: ffffffffffffffda RBX: 00007ff3521a3c90 RCX: 00000000004579b9 [ 495.406640] RDX: 00000000200000c0 RSI: ffffffffffffffbd RDI: 0000000000000004 07:00:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff80086601, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:08 executing program 0 (fault-call:3 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 495.406650] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 495.406659] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff3521a46d4 [ 495.406668] R13: 00000000004beee9 R14: 00000000004d02a0 R15: 0000000000000005 07:00:08 executing program 4 (fault-call:10 fault-nth:2): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:00:08 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x223) [ 495.598189] FAULT_INJECTION: forcing a failure. [ 495.598189] name failslab, interval 1, probability 0, space 0, times 0 07:00:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00000002, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 495.696525] CPU: 1 PID: 16625 Comm: syz-executor0 Not tainted 4.20.0+ #172 [ 495.703566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.712929] Call Trace: [ 495.715537] dump_stack+0x1d3/0x2c6 [ 495.719184] ? dump_stack_print_info.cold.1+0x20/0x20 [ 495.724402] should_fail.cold.4+0xa/0x17 [ 495.728467] ? print_usage_bug+0xc0/0xc0 [ 495.728488] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 495.728510] ? print_usage_bug+0xc0/0xc0 [ 495.728528] ? graph_lock+0x270/0x270 07:00:08 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x20) getsockopt$inet6_dccp_int(r1, 0x21, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 495.728550] ? find_held_lock+0x36/0x1c0 [ 495.728580] ? ___might_sleep+0x1ed/0x300 [ 495.745563] ? arch_local_save_flags+0x40/0x40 [ 495.745595] __should_failslab+0x124/0x180 [ 495.745615] should_failslab+0x9/0x14 [ 495.745630] kmem_cache_alloc_node_trace+0x270/0x740 [ 495.745656] __get_vm_area_node+0x130/0x3a0 [ 495.771541] __vmalloc_node_range+0xc4/0x750 [ 495.771561] ? drm_property_create_blob.part.2+0xaa/0x470 [ 495.771589] ? drm_property_create_blob.part.2+0xaa/0x470 [ 495.771605] __vmalloc_node_flags_caller+0x75/0x90 [ 495.771627] ? drm_property_create_blob.part.2+0xaa/0x470 [ 495.780339] kvmalloc_node+0xd7/0xf0 [ 495.780360] drm_property_create_blob.part.2+0xaa/0x470 [ 495.780375] ? find_held_lock+0x36/0x1c0 [ 495.780393] ? drm_property_free_blob+0x3b0/0x3b0 [ 495.780416] ? drm_unbind_agp+0x20/0x20 [ 495.780432] ? lock_downgrade+0x900/0x900 [ 495.780455] drm_mode_createblob_ioctl+0x1b2/0x570 [ 495.780476] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 495.780490] ? arch_local_save_flags+0x40/0x40 [ 495.780517] drm_ioctl_kernel+0x278/0x330 [ 495.780534] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 495.851455] ? drm_setversion+0x8b0/0x8b0 [ 495.855623] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 495.856029] misc userio: Invalid payload size [ 495.861183] ? _copy_from_user+0xdf/0x150 [ 495.861204] drm_ioctl+0x58f/0xb90 [ 495.861220] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 495.861245] ? drm_version+0x3d0/0x3d0 [ 495.861270] ? ___might_sleep+0x1ed/0x300 [ 495.861295] ? arch_local_save_flags+0x40/0x40 [ 495.861317] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 495.861339] ? drm_version+0x3d0/0x3d0 [ 495.861355] do_vfs_ioctl+0x1de/0x1790 [ 495.861377] ? ioctl_preallocate+0x300/0x300 [ 495.908062] ? selinux_file_mprotect+0x620/0x620 [ 495.912834] ? __sb_end_write+0xd9/0x110 [ 495.916913] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 495.922465] ? fput+0x130/0x1a0 [ 495.925756] ? do_syscall_64+0x9a/0x820 [ 495.929758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 495.935323] ? security_file_ioctl+0x94/0xc0 [ 495.939751] ksys_ioctl+0xa9/0xd0 [ 495.943240] __x64_sys_ioctl+0x73/0xb0 07:00:08 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000180)={0x5, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @broadcast}]}) [ 495.947139] do_syscall_64+0x1b9/0x820 [ 495.951041] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 495.956437] ? syscall_return_slowpath+0x5e0/0x5e0 [ 495.961377] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 495.966240] ? trace_hardirqs_on_caller+0x310/0x310 [ 495.971269] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 495.976314] ? prepare_exit_to_usermode+0x291/0x3b0 [ 495.981349] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 495.986206] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 495.991401] RIP: 0033:0x4579b9 07:00:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00004b47, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 495.994609] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 496.013535] RSP: 002b:00007ff3521a3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.021250] RAX: ffffffffffffffda RBX: 00007ff3521a3c90 RCX: 00000000004579b9 [ 496.028519] RDX: 00000000200000c0 RSI: ffffffffffffffbd RDI: 0000000000000004 [ 496.028529] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 496.028538] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff3521a46d4 [ 496.028563] R13: 00000000004beee9 R14: 00000000004d02a0 R15: 0000000000000005 [ 496.037876] syz-executor0: vmalloc: allocation failure: 4194392 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 496.077087] misc userio: Invalid payload size [ 496.083142] misc userio: Invalid payload size [ 496.096518] syz-executor0 cpuset=syz0 mems_allowed=0-1 [ 496.102500] CPU: 1 PID: 16625 Comm: syz-executor0 Not tainted 4.20.0+ #172 [ 496.109532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.109538] Call Trace: [ 496.109558] dump_stack+0x1d3/0x2c6 [ 496.109577] ? dump_stack_print_info.cold.1+0x20/0x20 [ 496.109598] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 496.109618] warn_alloc.cold.118+0xb7/0x1bd [ 496.109633] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 496.109648] ? __get_vm_area_node+0x130/0x3a0 [ 496.109665] ? rcu_read_lock_sched_held+0x108/0x120 [ 496.109692] ? __get_vm_area_node+0x2e5/0x3a0 [ 496.109713] __vmalloc_node_range+0x472/0x750 [ 496.109741] ? drm_property_create_blob.part.2+0xaa/0x470 [ 496.109756] __vmalloc_node_flags_caller+0x75/0x90 [ 496.109771] ? drm_property_create_blob.part.2+0xaa/0x470 [ 496.109800] kvmalloc_node+0xd7/0xf0 [ 496.109819] drm_property_create_blob.part.2+0xaa/0x470 [ 496.109836] ? find_held_lock+0x36/0x1c0 [ 496.154974] ? drm_property_free_blob+0x3b0/0x3b0 [ 496.154996] ? drm_unbind_agp+0x20/0x20 [ 496.155012] ? lock_downgrade+0x900/0x900 [ 496.155035] drm_mode_createblob_ioctl+0x1b2/0x570 [ 496.155055] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 496.155069] ? arch_local_save_flags+0x40/0x40 [ 496.155091] drm_ioctl_kernel+0x278/0x330 [ 496.220483] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 496.220502] ? drm_setversion+0x8b0/0x8b0 [ 496.220525] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 496.220540] ? _copy_from_user+0xdf/0x150 [ 496.220559] drm_ioctl+0x58f/0xb90 [ 496.229534] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 496.229559] ? drm_version+0x3d0/0x3d0 [ 496.229585] ? ___might_sleep+0x1ed/0x300 [ 496.229602] ? arch_local_save_flags+0x40/0x40 [ 496.229624] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 496.229646] ? drm_version+0x3d0/0x3d0 [ 496.229660] do_vfs_ioctl+0x1de/0x1790 [ 496.229685] ? ioctl_preallocate+0x300/0x300 [ 496.229705] ? selinux_file_mprotect+0x620/0x620 [ 496.229727] ? __sb_end_write+0xd9/0x110 [ 496.239413] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 496.239427] ? fput+0x130/0x1a0 [ 496.239443] ? do_syscall_64+0x9a/0x820 [ 496.239469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 496.260055] ? security_file_ioctl+0x94/0xc0 [ 496.260075] ksys_ioctl+0xa9/0xd0 [ 496.260094] __x64_sys_ioctl+0x73/0xb0 [ 496.260114] do_syscall_64+0x1b9/0x820 [ 496.260132] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 496.260150] ? syscall_return_slowpath+0x5e0/0x5e0 [ 496.260168] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 496.269692] ? trace_hardirqs_on_caller+0x310/0x310 [ 496.269711] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 496.269758] ? prepare_exit_to_usermode+0x291/0x3b0 [ 496.269788] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 496.269827] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 496.269839] RIP: 0033:0x4579b9 [ 496.269854] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 496.269878] RSP: 002b:00007ff3521a3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.269892] RAX: ffffffffffffffda RBX: 00007ff3521a3c90 RCX: 00000000004579b9 [ 496.269901] RDX: 00000000200000c0 RSI: ffffffffffffffbd RDI: 0000000000000004 [ 496.269910] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 496.269919] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff3521a46d4 [ 496.269931] R13: 00000000004beee9 R14: 00000000004d02a0 R15: 0000000000000005 [ 496.459696] Mem-Info: [ 496.462268] active_anon:129500 inactive_anon:205 isolated_anon:0 [ 496.462268] active_file:1309 inactive_file:4814 isolated_file:0 [ 496.462268] unevictable:0 dirty:304 writeback:0 unstable:0 [ 496.462268] slab_reclaimable:12726 slab_unreclaimable:111586 [ 496.462268] mapped:53772 shmem:245 pagetables:946 bounce:0 [ 496.462268] free:1266767 free_pcp:909 free_cma:0 07:00:09 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0xc7220000}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:09 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0xf0ffffff7f0000) 07:00:09 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x511180, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) mount$fuse(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='fuse\x00', 0x8000, &(0x7f0000000780)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x10001}}, {@max_read={'max_read', 0x3d, 0x1000}}], [{@smackfsfloor={'smackfsfloor'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/proc/self/net/pfkey\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/proc/self/net/pfkey\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x88([\xe6&'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}}) r5 = getpgrp(r2) move_pages(r5, 0x4, &(0x7f0000000500)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000540)=[0x2, 0x101, 0x7, 0x10000, 0x7, 0x853f, 0xfffffffffffffffb, 0xfe, 0x7], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x400200, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @bt={0x3, 0xe87, 0x3, 0x0, 0x5293, 0x80, 0x1, 0x1}}) move_pages(r2, 0x2, &(0x7f0000000680)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f00000006c0)=[0x0, 0x0], 0x2) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/51, 0x33}, {&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000200)=""/150, 0x96}, {&(0x7f00000002c0)=""/21, 0x15}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/181, 0xb5}], 0x6, 0x30) 07:00:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00004b49, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 496.496117] Node 0 active_anon:517984kB inactive_anon:820kB active_file:5028kB inactive_file:19212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215088kB dirty:1216kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 358400kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 496.553931] misc userio: Invalid payload size 07:00:09 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) [ 496.680580] Node 1 active_anon:16kB inactive_anon:0kB active_file:208kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 496.707142] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 496.733791] lowmem_reserve[]: 0 2537 2539 2539 [ 496.739112] Node 0 DMA32 free:1273344kB min:36092kB low:45112kB high:54132kB active_anon:522032kB inactive_anon:832kB active_file:5052kB inactive_file:19240kB unevictable:0kB writepending:1304kB present:3129332kB managed:2601648kB mlocked:0kB kernel_stack:7232kB pagetables:3864kB bounce:0kB free_pcp:1984kB local_pcp:1404kB free_cma:0kB [ 496.769735] lowmem_reserve[]: 0 0 2 2 [ 496.773688] Node 0 Normal free:0kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2460kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 496.800133] lowmem_reserve[]: 0 0 0 0 [ 496.804081] Node 1 Normal free:3773440kB min:53760kB low:67200kB high:80640kB active_anon:16kB inactive_anon:0kB active_file:208kB inactive_file:44kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:840kB local_pcp:840kB free_cma:0kB [ 496.832771] lowmem_reserve[]: 0 0 0 0 [ 496.837003] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 496.850936] Node 0 DMA32: 7682*4kB (UME) 207*8kB (UME) 2766*16kB (UE) 2222*32kB (UE) 1335*64kB (U) 811*128kB (UME) 438*256kB (UM) 223*512kB (U) 168*1024kB (U) 91*2048kB (UM) 86*4096kB (U) = 1273952kB [ 496.869093] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 496.880026] Node 1 Normal: 102*4kB (UME) 313*8kB (UME) 313*16kB (UME) 98*32kB (UME) 49*64kB (UME) 40*128kB (UE) 25*256kB (UME) 32*512kB (UM) 24*1024kB (UM) 14*2048kB (UE) 898*4096kB (UM) = 3773552kB [ 496.898141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 496.907224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 496.915807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 07:00:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00005450, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:09 executing program 3: r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sendto$inet6(r0, &(0x7f00000002c0)="2994c9e8fbb80f3fcfb5207e9e59cc73c2b7f4be97aeb110021b203092ae336080ef64d8807ba258befb7016f9c8f807826472ebabe1f8f0f12ee4192a5ec51f39aba7c7a349864434590eccc6ddd9b796667a468caf003b4937be70435b5bc50ba4ddb2208e3f7a6dead35e2963b1ede159afeaa75f7be9db3b12f708a8470233d984bb2cc904371f71810bb35610a49d0e0764f3d61bd78d1aa5d59e202181554ef6f0c148e4d67d431c31666117eb0d81863f33a63abf5ef31b32dadfbf5549", 0xc1, 0x40841, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x8) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000200)={0x34, 0x0, &(0x7f0000000180)}) r2 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x800) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="71000000020040b6ecda97d1791ffb27e8e79f42614d4a7d39e7f453ef58ec9ac526a786ec6401f5c33f4d48e7b5c431c6d479afcacc41b8b947991836e4833702d2f7a6405c20007fddc696b9e87135932d40c7c3dd1d899dcffc27b5d5a4ee3815fd3a2d5550d3a4cea47eb7fc03e0cec156b386766d96a0cb"]) sync_file_range(r2, 0x0, 0x1, 0x2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000003c0)) r4 = getpid() ptrace$getenv(0x4201, r4, 0x8, &(0x7f0000000400)) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0x1) read(r3, 0x0, 0x0) [ 496.924810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 496.933446] 6381 total pagecache pages [ 496.937392] 0 pages in swap cache [ 496.940848] Swap cache stats: add 0, delete 0, find 0/0 [ 496.946248] Free swap = 0kB [ 496.949350] Total swap = 0kB [ 496.952369] 1965979 pages RAM [ 496.955466] 0 pages HighMem/MovableOnly [ 496.959491] 343429 pages reserved [ 496.962951] 0 pages cma reserved 07:00:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff40086602, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:09 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="040000000000000000000080080000000500000001000100090000000000000006000000000000000000000000000000070000c0060000000500000009000000060000000101d4498c9161f6bcdf71e0000008000000000000000000000000000000090000800010000006000000ef0000003f000000060000000400000000000000000000000000000006000000070000000400000000000000b41e00000900000001000000000000000000000000000000"]) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r1, 0x0, 0x0) 07:00:09 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v2={0x3, 0x2, 0x10, 0x0, 0x3f, "3310e28950372bcc2000c5a04aefc03c0c770a182d784350d8c80bf0c3920a13d088bebdb9d7d6219cb3be78a9f6702846696ea1d8ab35bec7ba3625427a3b"}, 0x49, 0x2) 07:00:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff40087602, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 497.352426] misc userio: Invalid payload size 07:00:10 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x4000}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffc0189436, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:10 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6, @in6=@mcast2, 0x4e24, 0x100, 0x4e23, 0x2, 0x2, 0x20, 0xa0, 0x2, 0x0, r2}, {0x3ff, 0x9, 0x0, 0x5, 0x5, 0xa3, 0x3, 0x6}, {0x40, 0x100000000, 0xf5c7, 0x400}, 0x5, 0x6e6bbe, 0x1, 0x0, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d4, 0x32}, 0x0, @in=@rand_addr=0xf9, 0x0, 0x0, 0x3, 0xffffffffffffffc0, 0x364, 0x2, 0x2}}, 0xe8) 07:00:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00000002, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:10 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x20000142, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:00:10 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000000c0)=0x7f) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 07:00:10 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TCSBRK(r1, 0x5409, 0x1) read(r0, 0x0, 0x0) [ 497.531701] misc userio: Invalid payload size 07:00:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00005460, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffc020660b, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 497.571566] misc userio: Invalid payload size 07:00:10 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:10 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) 07:00:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00004b49, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 497.754106] misc userio: Invalid payload size 07:00:11 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0xc722}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:11 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/userio\x00', 0x45, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0xfff4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x81}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x93fe, 0x2}, &(0x7f00000001c0)=0x8) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x7fffffff) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00005421, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff4020940d, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:11 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff007, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:00:11 executing program 3: r0 = accept4(0xffffffffffffff9c, &(0x7f00000007c0)=@hci, &(0x7f0000000840)=0x80, 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000880)=[@in6={0xa, 0x4e20, 0x6, @remote, 0x4}, @in6={0xa, 0x4e20, 0x8, @remote, 0x7}], 0x38) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x10002, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000440)) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/userio\x00', 0x101000, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x13) read(r2, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x220001, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x100}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0x40, 0x0, 0x1ff, 0x2, r4}, &(0x7f0000000100)=0x10) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000140)) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='trusted.overlay.origin\x00', &(0x7f0000000380)='y\x00', 0x2, 0xf016c950cc7a0f9c) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000200)={0x5, 0x0, 0x2, 0x7, [], [], [], 0x8, 0x101, 0x1, 0x8000, "11891da89e388ff4687b0cb76794c302"}) [ 498.435297] misc userio: Invalid payload size [ 498.450980] misc userio: Invalid payload size 07:00:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00005460, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 498.493010] misc userio: Invalid payload size 07:00:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xc0045878, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 498.516557] misc userio: Invalid payload size 07:00:11 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0xffffffffffffffe9) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x8000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x4, @empty, 0x8000}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0x1f, @mcast1, 0x7}], 0x48) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f00000000c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x392) 07:00:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff40087602, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 498.653473] misc userio: Invalid payload size [ 498.671396] misc userio: Invalid payload size 07:00:11 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xffffffffffffffdc) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00005452, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 498.800596] misc userio: Invalid payload size [ 498.807058] misc userio: Invalid payload size 07:00:11 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x800000000000000}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff0000541b, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:11 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000006c0)='/dev/dri/card#\x00', 0x200001, 0x101000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r2 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) mount$9p_rdma(&(0x7f0000000500)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x2000, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000000001,sq=0x0000000000000004,posixacl,fscache,dfltgid=', @ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYBLOB=',subj_type=/dev/dri/card#\x00,uid=', @ANYRESDEC=r4, @ANYBLOB=',euid=', @ANYRESDEC=r5, @ANYBLOB="2c646f6e745f686173682c6673f0acf444d1aecc7569643d5c326333373264772d617765652d733636002d377538002d3d3063385f97"]) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) r6 = dup2(r1, r1) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r7, 0x0, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, ["", ""]}, 0x24}}, 0x40) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x1e, 0x6, 0x17, 0xa, 0x0, 0x6, 0x3c, 0xffffffffffffffff}}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:11 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x42, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r1}, 0x10) getsockname$llc(r2, &(0x7f0000000080), &(0x7f0000000100)=0x10) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000005000000010400000000000025a90000000000000f000000000000000500000000000000000000000000000000000000000000000000000000000000000000000400000006000000000000000500000000000000fcffffffffffffff0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008865b49a33508630e79a20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x3e5) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 499.327513] misc userio: Invalid payload size [ 499.349150] misc userio: Invalid payload size 07:00:12 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff008, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:00:12 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1f, 0x101400) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) read(r0, 0x0, 0x0) 07:00:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff40086602, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x80000000, 0x3fffffffffc) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000080)={0x8, 0x4c, &(0x7f0000000040)="e6c5b833c981ebb0bfaf019ee0a395627e16d5ef2c48b63ad330c8e1ec3a33157b4872778c3afb5280bd09eba903107c13ec20e2f93e2bf2", {0x4, 0x1, 0x0, 0x8, 0x5, 0x6, 0x3, 0x2}}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x3}, 0x0, 0x0, 0xfffffffffffffffc}) 07:00:12 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2000, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x9, 0xdc0, 0x5, 0x1}) 07:00:12 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x2239ad7f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='$', &(0x7f0000000040)="9df9a68d81dfc5d3f9aa617879d762bb98c4e860b281654889613300953c20358845b277b602b13391fafeaf31f6ff7b38562d8c98a2fd0e04c0cd6cc9f863f7856e8c88f9a2393998a1ccb17f151b4cfdd9fc1d1ead8098b250d223"}, 0x20) 07:00:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00004b47, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 499.554497] misc userio: Invalid payload size 07:00:12 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x9, 0xffffffff, 0xc4}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={r3, 0x9, 0x43f}, 0x8) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfffffffffffffffc, 0x0) write$P9_RXATTRWALK(r4, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x81}, 0xf) [ 499.635400] misc userio: Invalid payload size 07:00:12 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x4000000000000000}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:12 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40900, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x5, r2, 0x1}) read(r0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000200)=""/4096) 07:00:12 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2000, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x329, 0x523000) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x40002) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x200081, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, 0x0, 0xfffffffffffffddc) 07:00:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00005421, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:13 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff004, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:00:13 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x7fff, 0x2000) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180)=0xfff, 0x4) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000030000007f0000000000000005000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000009000000ff03000004000000000000005f000000000000002e56ffffffffffff060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400400, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x1}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in=@empty, @in=@empty}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) 07:00:13 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000200)="f577c4e60674edd7ed50ed2ef4d9a65ee3d71d71082eb73e304815ed9b0fcdc88a1609a89183eeab2ccbdf0981aa9f43ac64b43de5eee1fbd9b09e294400f42751467a13110b9e05fd9c7fcf770a9473f994635afd5d7f7e6a262e0e8aa335da82809f23a61c7d621d46f000368fb3dae666b557edcf2f027dfda7d8242cc5a19ff0", 0x82) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20000, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f00000000c0)={r4, r0, 0x2}) 07:00:13 executing program 5: r0 = msgget$private(0x0, 0x20) msgrcv(r0, &(0x7f0000000080)={0x0, ""/101}, 0x6d, 0x3, 0x2000) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, 0x0, 0x0) 07:00:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffc9, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:13 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x1017ff, 0x0) read(r0, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7fffffff, 0x20040) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'bpq0\x00', 0x2}) 07:00:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff80086601, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 500.420915] misc userio: Invalid payload size 07:00:13 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0xa4cc932cc8bc4921) 07:00:13 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x40000000}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x70) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x20000000, 0x4, 0x2}, 0x0, 0xfffffffffffffffe}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x800, 0x0) r2 = getpgid(0xffffffffffffffff) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x101, 0x0, 0x101, 0x4, 0x800, r2}) 07:00:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00005451, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:13 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x101000, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x224080) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000040)={@dev, @loopback}, &(0x7f00000000c0)=0x8) bind$vsock_dgram(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @hyper}, 0x10) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x6) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000200)={0x8, 0x0, 0x4, {0x706, 0x7dbf6b8c, 0x3, 0x38000000000000}}) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000180)={'nr0\x00', {0x2, 0x4e23, @empty}}) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000100)}) read(r0, 0x0, 0x0) [ 501.155677] misc userio: Invalid payload size 07:00:13 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff006, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:00:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffc020660b, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:13 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x1000101800, 0x0) read(r0, 0x0, 0x0) 07:00:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400000200000, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000040)={0xa, 0x5, 0x9}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000240)={0x0, @ctrl}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:13 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x3f, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff40049409, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:14 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000), 0x0) 07:00:14 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)='security.ima\x00', &(0x7f0000001140)=@sha1={0x1, "6e16e9f6f7334c8228f581db806ca9c5b7c3b514"}, 0x15, 0x2) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7aca, 0x2400) ioctl$NBD_DO_IT(r1, 0xab03) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, 0x0, 0x9b) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000001180)) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000000c0)="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") ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000080)=0x4) 07:00:14 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xc7220000}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff80087601, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:14 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x100000101800, 0x0) read(r0, 0x0, 0x0) 07:00:14 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', '', [{0x20, 'eth1em0/wlan0user'}, {0x20, '/dev/userio\x00'}], 0xa, "b66107879b3a6e5333651b0d3b46b2"}, 0x32) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 501.977904] misc userio: Invalid payload size [ 502.015838] misc userio: Invalid payload size [ 502.035211] misc userio: Invalid payload size [ 502.041286] misc userio: Invalid payload size 07:00:14 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0xffffffffffffffff, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:00:14 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x8, @time, 0x1, {0x2, 0x54721f5c}, 0x9, 0x1, 0x1}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000002c0)={{0xffffffffffffffff, 0x0, 0xfff9, 0x200000000401}, 0x25, 0x2000000}) 07:00:14 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) 07:00:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00005450, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:14 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) dup2(r1, r0) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{}, {r2, r3+10000000}}, &(0x7f0000000100)) [ 502.198966] misc userio: Invalid payload size 07:00:14 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8, 0xa0000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1fffa, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000200)={0x240000000000000, 0x2, 0xa, 0x0, 0x0, [{r0, 0x0, 0x7}, {r0, 0x0, 0xc3}, {r1, 0x0, 0x800}, {r1, 0x0, 0x2}, {r1, 0x0, 0x6}, {r0, 0x0, 0x2}, {r0, 0x0, 0xee74}, {r1, 0x0, 0x4}, {r0, 0x0, 0x3}, {r0, 0x0, 0x9}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x9fe1fa6108d1ae9f}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x3f, 0xffffffffffff428c, "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", 0x80000001, 0x7, 0x3, 0x0, 0x88f4fc9, 0x1d, 0x2}, r2}}, 0x120) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000100)=""/9) read(r3, 0x0, 0x0) 07:00:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffc0189436, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 502.234416] misc userio: Invalid payload size 07:00:15 executing program 5: socket$bt_rfcomm(0x1f, 0x800003, 0x3) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x802, 0x0) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x14) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000140)=0x1) inotify_rm_watch(r1, r2) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000002aff7f000720dadd961bde0751a488dfcf9e44dc9dc9da3faff01be27eb3eebbbf56fc0e13f690b58170d98626e9441f1df5e6817cbc7eb1a539ab4a1b7f"], &(0x7f0000000180)=0x4e) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000240)={0xd20, 0x5, 0x3}) [ 502.419397] misc userio: Invalid payload size [ 502.438130] misc userio: Invalid payload size 07:00:15 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0x4000}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:15 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x1, 0x0) read(r0, 0x0, 0x0) 07:00:15 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x80801, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) select(0x40, &(0x7f0000000100)={0x8, 0x7f, 0xcb1b, 0x3, 0x8, 0x20, 0x8}, &(0x7f0000000140)={0x6e1, 0x20, 0x10000, 0x0, 0xb9b2, 0x8001, 0x8000, 0x77}, &(0x7f0000000180)={0x80000001, 0x6, 0x8000, 0x2, 0x8, 0x5, 0x2, 0x28dec96d}, &(0x7f00000001c0)={0x0, 0x2710}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00005452, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 502.871599] misc userio: Invalid payload size 07:00:15 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff005, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:00:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(0xffffffffffffffff, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:15 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x101c00, 0x0) 07:00:15 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) signalfd(r0, &(0x7f0000000080)={0x8000}, 0x8) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffc0045878, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:15 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) [ 503.060011] misc userio: Invalid payload size 07:00:15 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x4}, 0x35d) r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x6, 0x101000) ioctl$NBD_DISCONNECT(r1, 0xab08) read(r0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101000, 0x1) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) rmdir(&(0x7f0000000140)='./file0\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, 0x0, 0xeb) 07:00:15 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4668fdbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={0xffffffffffffff9c}) setsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000240)="e94a719d7853f5e05d6c6134f57ef94d363f46382c9bd987a353739d9d0409ac20b1c6a65d2e0b2f88ac3241e1026c55c98567b457861cd74e330e20b6b213b47f230e08930bfa73197f1c82006e0399eb1512f08490c1dfc785a0555ea8e0f7cef415b72f533bd65b1ae48797e5bb13a795c5b0ee68d6d8ba4d1803903919eadc3463f0ef6f89b4db6bf487ffd9932fd2c9f1546d26400bfe4b23a7aaa81ed49b25ab7c3f30989dc08afbd7c3b2797681269ff758be36290c54f42d13323e77d04ba58e103791eff66ce41b020db3ce17874067c10db9aa08b5eeeb72b08ef27278da0a", 0xe4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 503.220695] misc userio: Invalid payload size [ 503.253727] misc userio: Invalid payload size 07:00:16 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xc722}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0xc01, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x9, 0x6ddabc04}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:16 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x1017fe, 0x0) write(r0, &(0x7f0000000040)="6ef28c95eec9670cad848b4c7dc8529b9317cfcfc577253412addbaa2ae00b624dbdd109014b1098803a5bbcd2950a6c342fc59f18e31d6bf3c1e3da1bc59ce930af7dbb9ee67cd75ba3033f3c6a92bac978f101b65fdd7ac012134d0bc787753067fb6427ed3276ba9ecf94d6bf12eef8fe257129386bab5e2db3235fd22d12a223e5ead1c6b8c8e503f997522ff1994a1cd15d6de37a99207f8353d04d047d4c4e5662bee6ce1cbb6bc9e583d4f458f378077cecb4df51b473915db2851b535e1223f021200795399a5ee6d6621711bca7b109e6043a3c2d6fcbab792a882aac55f31db0cc136f918f9686c7c8fd851ddebea22bc5", 0xf6) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x0, 0x8001) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10020}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e5a0ec6b36a976be625ee773694e000000000000", @ANYRES16=r2, @ANYBLOB="12072bbd7000fbdbdf250f00000008000400030000000800060001000100"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x408c0) read(r0, 0x0, 0x0) 07:00:16 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000380)) write$P9_RSTATu(r1, &(0x7f0000000300)={0x67, 0x7d, 0x2, {{0x0, 0x4c, 0x3, 0x5, {0x98, 0x0, 0x5}, 0x45010000, 0x4, 0x9, 0x0, 0xc, '/dev/userio\x00', 0x4, 'self', 0x2, '-@', 0x7, 'trusted'}, 0x6, 'wlan0\xf6', r2, r3, r4}}, 0x67) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 503.744743] misc userio: Invalid payload size [ 503.769910] misc userio: Invalid payload size 07:00:16 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff002, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:00:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000300)={0x7, 0x6, 0xffffffffffff0000, @remote, 'bond_slave_0\x00'}) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x511000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3f83586", @ANYRES16=r3, @ANYBLOB="00012bbd7000fedbdf25110000000800050006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000140)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:16 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000000200)=""/140, &(0x7f00000002c0)=0x8c) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x4, &(0x7f00000000c0)=0x4) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x6, "4b71c9118260cfca1f91ab9096bdb5c86a03e8482fa10fd02cc1d27f8e67255883b3f4c90faaade58dfc78a88de70bd3b969517389a923842561ea0eb6cf554fb29a449a794dd5f9cb470f6cd2f96125"}) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040)=0xfffffffffffffff8, 0x4) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000180)) 07:00:16 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x800000008003, 0x80001) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000180)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) fstatfs(r0, &(0x7f0000000080)=""/143) 07:00:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400000, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) recvmsg$kcm(r1, 0x0, 0x100) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 503.967773] misc userio: Invalid payload size 07:00:16 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x8, 0xcc, 0xcfd, 0x7, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480), 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000)) read(r0, 0x0, 0xffffffffffffffe0) [ 504.020665] misc userio: Invalid payload size 07:00:16 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f00000000c0)={0x0, 0x1, 0x7}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0x5, 0x3ff, 0x2, 0x40, 0x5, 0x5}, 0x100000000}, 0xa) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 504.151828] misc userio: The device must be registered before sending interrupts 07:00:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f000023b000/0xb000)=nil, 0xb000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 504.201431] misc userio: Invalid payload size 07:00:17 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0x8}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:17 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x105005, 0x0) fanotify_init(0x29, 0x80000) read(r0, 0x0, 0x21) 07:00:17 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000001c0)={0x1, 0x1}, 0xfffffffffffffdf5) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000180)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/131, 0x83}], 0x1, &(0x7f0000000340)=""/170, 0xaa}, 0x100) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000400)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480), 0x1000) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0xfffffffffffffffe) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x140, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x0, &(0x7f0000000440)={@empty, @loopback}, &(0x7f0000000140)) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 07:00:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)=""/106, &(0x7f0000000140)=0x6a) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 504.604587] misc userio: Invalid payload size [ 504.618145] misc userio: Invalid payload size 07:00:17 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff003, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:00:17 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x400000, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r2, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:17 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x9}, 0x2) 07:00:17 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x80000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x880, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000280)={0x44, 0x6, 0xc0, 'queue1\x00', 0x4}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x8, 0xb620}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0xd032}, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, 0x0, 0x0) 07:00:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(0xffffffffffffffff, 0xffffffffffffffbd, &(0x7f0000000240)="1498b6168641371321bfd99834ef8614ca4b89bbc97d653882ffc639b2970e010100007dca96425698dd2af0c0fb7fba2254e5687c27bf91206b3bf749c3f60549eb598c6a7e139728b0833eaa7d05f2a4a0f864afd50a5846f88e1d831891a5b9d02df964077bf7083367308d28d3f46e5b6184b86d64a9410ae4403747ba21295371520d530000a3809bfede0dc7ce981eea8318ba0dcc56ac2f9645067074a25d77f994fe24163a5bd60e4b3ec1") close(0xffffffffffffffff) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80000, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/68) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0xfffffffffffff3dd, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) [ 504.860662] misc userio: The device must be registered before sending interrupts 07:00:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1ff, 0x8500) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000240)=""/237, &(0x7f0000000040)=0xed) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:17 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x228000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0xc0300, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2000, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) read(r0, 0x0, 0xfffffffffffffe5a) 07:00:17 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x78) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x800, 0x0) [ 505.211668] misc userio: Invalid payload size [ 505.235830] misc userio: Invalid payload size 07:00:18 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xc722000000000000}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x800, 0x200) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:18 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@rc, &(0x7f0000000100)=0x80, 0x800) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)={0x8, [0x80, 0x5, 0x9, 0xad, 0x7, 0x7fff, 0x80000000, 0xffffffff]}, &(0x7f0000000180)=0x14) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x23c) r2 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000000)) 07:00:18 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x100000001, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xd7, "b4531aca95217c2cea90ff1c0bac0db41d0345f6419cf6c778aa82500f582270eb082f5421308f21c068afcdf08822d027edcb9206eb83e6facbdb717348236c3bc12566ab38926cb3783eadbc6d109a53afab50b151d020dc62bc8667daf98a0896381542413a4a0f690fc07e729d3c6c27cbaf0d836ebabc105ee79e9cff59e57945b46f9aab6af48dd490c815bf2b184780b463b20f06b93393c4ea652fa500bc04cec8b90882b2d5b21be868ce788e3ac83f2829a38a495298648f151fa7fab70f975aaffc61e3b73363aba462e52ab7149262107b"}, &(0x7f00000001c0)=0xdf) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={r2, 0xfa, "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"}, &(0x7f0000000340)=0x102) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 505.528042] misc userio: Invalid payload size 07:00:18 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x2f, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:00:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4001, 0x1) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000040)={0x1, [0xf98]}) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:18 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101803, 0x0) read(r0, 0x0, 0x0) 07:00:18 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x180, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x55, 0xfffffffffffffffc, 0x80, {0x7, 0x881}, {0x9, 0x6}, @rumble={0x3ec, 0x3f}}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 505.829368] misc userio: Invalid payload size [ 505.854623] misc userio: Invalid payload size 07:00:18 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000040)={0x81, "dc294b7441e1c08f5dc80c35e8f394821827726903de682c3d7532e48fc6127d", 0x300, 0x3f, 0xbf, 0x11, 0x7}) read(r0, 0x0, 0x0) 07:00:18 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x200, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000340)) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000200)=""/255) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000380)={'team_slave_0\x00', 0x1}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @empty}, &(0x7f00000001c0)=0x8) getsockopt$inet6_dccp_int(r3, 0x21, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 506.105080] misc userio: Invalid payload size 07:00:18 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x2000000000101800, 0x0) read(r0, 0x0, 0x0) [ 506.126805] misc userio: Invalid payload size 07:00:19 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0x800000000000000}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0x0, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/dlm-control\x00', 0x100, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/zero\x00', 0x400000, 0x0) recvmsg$kcm(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:19 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x20000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:19 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa08, {&(0x7f00000000c0)}}, 0x2) 07:00:19 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0xfccc) 07:00:19 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000100)={0x3, 0xeb, "f3791a98d3cff7c3ebd6f663063a004aed23e7b613f519b28fcad26e520294c3e1dd03626552005b8a0e776d977b1d2f2d467f723c6931d8ede501a117ba18e7f19b296f1f5974c5403e4584ba6cd653a77be49277fa01a5cb918b93b87836c387179815095e3f7851722573d69672b6cde538e69d1b2c29b9014e9441161500d8051b1a3e640655ee54f989000a836b93b7d88ddaccce4addfa9099d9be09506d40bb8ccbb6cd3f648b12994777dd95207728c83242bcc54153e9202e45b7b52f16518b232be6d191d8a81d1879c0649316aaf544f43aee87bbfa8fbf0b51ed9bb8846de7fd34206fa1bd"}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40001, 0x0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x4) 07:00:19 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x480048) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x48c0, 0x0) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) 07:00:19 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000001900)={&(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, 0x0}, 0x0) recvmsg(r1, &(0x7f00000016c0)={0x0, 0xff70, &(0x7f0000001640)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x0, 0x4b}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000040)) ioctl(r2, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x1}, &(0x7f0000000240)=0x8) uselib(&(0x7f0000000340)='./file0\x00') getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000280)={r4, 0x62, "93798559bff3fe2056f83dee93ea6f59c38e41747f0081d4f3a3741a196f7fce005efc0680ac796c09b92859377612b39c838c10bd54139b6ce18ecdfe130dd0c13060644092cd7b629c5a244884f0cd0a6acf17e2d7283db5edf918d027c293c01e"}, &(0x7f0000000300)=0x6a) 07:00:19 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0x40000000}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:20 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='/dev/userio\x00', 0xfffffffffffffffa) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x220000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x381300, 0x0) keyctl$get_security(0x11, r1, &(0x7f00000000c0)=""/6, 0x6) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) read(r0, 0x0, 0x0) [ 507.327283] misc userio: Invalid payload size [ 507.334074] misc userio: Invalid payload size 07:00:20 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) getpid() r1 = shmget$private(0x0, 0x1000, 0x216, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) r2 = socket(0xd, 0x6, 0xea) sendmsg$kcm(r2, &(0x7f0000001400)={&(0x7f0000000080)=@sco={0x1f, {0x9, 0x0, 0x5, 0xfffffffffffffffc, 0x4, 0x8000}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="81a3a2d05c678960d175efd5e5d99a656c67cdc6c4ecfe7185f88580da1776a0e032249285e6bee890ebf040e7888211e28324393949fd7ad6611bf1e0099fbe5e90e3955f6f5baa8e8bdbb5b663f3ce471cc2842f2c9b6da8c0dd51f95403a7b6eebe8166f0c5ee32d5c45915983a35f7750903ecb5a348b0a5133ef3b44e5f6ce8f1f9066e40139380c949a9ab3b1832942d9d6ec2cdc5c7bf92d9eee94cc8de9f7eb807a20823b7a64556f8bcba5b64d1fba9659b8b993fb9dac0b81e23eb9a8a9f7c57d80a6affbd8234d592c724b908c18bfb965895626d4ee41f1d690a31a0d7e87e18e23866f0147c74be2254", 0xf0}, {&(0x7f0000000200)="1f853159d802154867a4c28178f9eb396a7ad787631c0bf40794fefa35e3fbbd3aa42c5f4d4ca76c52dc20d9e5528f4e84dab906b0004fcaf3d3dcab3982be3586f8d7e719729e635ed862a6b2", 0x4d}, {&(0x7f0000000280)="9775", 0x2}], 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10d0}, 0x10) 07:00:20 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x400, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)={0x100000000, 0x8, 0x2, 0x0, 0x1f, 0x101, 0x9, 0xd6, 0x3, 0x7ff, 0x81, 0x5, 0x0, 0x0, 0x0, 0xc2, 0xffff, 0x0, 0x8000}) read(r0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x400000) [ 507.617672] misc userio: Invalid payload size [ 507.654004] misc userio: Invalid payload size 07:00:20 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, &(0x7f0000000000)=""/150, 0x96) read(r0, 0x0, 0x0) 07:00:20 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x40, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f00000001c0)={r1, r1, 0x4}) r4 = dup2(r0, r0) r5 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000000c0)={0x1, r5}) 07:00:20 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x8000000000101800, 0x0) read(r0, 0x0, 0x0) [ 507.912846] misc userio: Invalid payload size [ 507.929604] Unknown ioctl 35076 [ 507.942990] Unknown ioctl 21545 [ 507.983092] misc userio: Invalid payload size [ 507.988095] Unknown ioctl 35076 [ 507.988635] Unknown ioctl 21545 07:00:21 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa05, {&(0x7f00000000c0)}}, 0x2) 07:00:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000040)={0x0, 0x3, 0x44, [], &(0x7f0000000000)=0xae20}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:21 executing program 0: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) rt_sigpending(&(0x7f0000000000), 0x8) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x1f}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000140)={r2, r3, 0x8}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:21 executing program 3: read(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) 07:00:21 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x200000001b, 0x0, 0xffffffffffffff1c) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:21 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0x22c7}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) [ 508.775424] misc userio: Invalid payload size 07:00:21 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x679dd871, 0x400000) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000040)={@multicast1, @local}, &(0x7f0000000080)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000000c0)={0x8001, 0x6, 0x9, {}, 0xffffffff, 0x4}) [ 508.798634] misc userio: Invalid payload size 07:00:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xc2100, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x5) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:21 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x57) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) 07:00:21 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'system.', '&#\x00'}, &(0x7f0000000040)='/dev/userio\x00', 0xc, 0x2) [ 509.048744] misc userio: Invalid payload size [ 509.078589] misc userio: Invalid payload size 07:00:21 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0xfffffffffffffd8c) read(r0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) openat$cgroup_type(r1, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0xfff, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x501007, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x8000, 0x0) socket$can_raw(0x1d, 0x3, 0x1) read(r1, 0x0, 0x0) [ 509.252241] misc userio: Invalid payload size [ 509.284821] misc userio: Invalid payload size 07:00:22 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa04, {&(0x7f00000000c0)}}, 0x2) 07:00:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0x2, 0x3, 0x101, 0x3, 0x20}, 0x9, 0x9, 0x12e20000}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x20, 0x0, 0xffff, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xc94d}) 07:00:22 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0xfffffffffffffd43) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:22 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x23e) 07:00:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffff7, 0x2202) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x1) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in=@loopback, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)) 07:00:22 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0x4000000000000000}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) [ 510.222723] misc userio: Invalid payload size [ 510.257706] misc userio: Invalid payload size 07:00:23 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x80200, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000f80200000000000008010000000000000000000000000000600200006002000060020000600200006002000003000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80008010000000000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000001000000000000002800727066696c74657200000000000000000000000000000000000000000000020000000000000020004e4f545241434b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8005801000000000000000000000000000000000000000000000000380064657667726f7570000000000000000000000000000000000000000000000a000000070000000200000003000000ff030000000000002800727066696c746572000000000000000000000000000000000000000000000c0000000000000060005345540000000000000000000000001100000000000000000000000000000700000000000000e7faffff000000000500000005000000fdffffff958e000001010000d60000000000000080000000ac0c0000000000000000000002c50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x6e2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:23 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x7, 0xfffffffffffffff9, 0x80000001, 0xba0, 0x7}) 07:00:23 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4000}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x101800, 0x0) read(r1, 0x0, 0x0) [ 510.444433] misc userio: Invalid payload size [ 510.460399] misc userio: Invalid payload size 07:00:23 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f00000000c0)=ANY=[@ANYBLOB="f7ff6f5bd791852eab90000100000000000002c7be4508"]) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000100)={0x1, 0x4, [{r2, 0x0, 0xfffff000}, {r2, 0x0, 0x100001000}, {r2, 0x0, 0xfffffffffffff000, 0x9a9ca6b042206c7e}, {r2, 0x0, 0x1000000000000, 0x1000000}]}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 510.609009] misc userio: Invalid payload size 07:00:23 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e21, 0x8000, @remote, 0xe7ec}, {0xa, 0x4e23, 0x401, @remote, 0x8}, 0xffffffffffffffb6, [0x5a6bb8a1, 0x1, 0x8000, 0x3, 0xeac, 0x1f, 0x1ff, 0xfe8]}, 0x5c) read(r0, 0x0, 0x0) 07:00:23 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f0000000000)="8cba4df14ae25164f54557f45c8f002378f647193b39cea2bd08e3eff5f628cc1e971907030facdc349d3502149adce686e8b253e724e3b4bac70911a8e549eeb9c3ffa153c24c622917c46debc6cadf6daa44a0f9a2fe695d67756f9a505c14d1281d6ca56e6dd5767def77a08bd993b60d0821be773298a739139912508116d5094dbdd1b321e897e272b194e00e492ab78ed04ff21386cd") recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 510.630178] misc userio: Invalid payload size 07:00:24 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa06, {&(0x7f00000000c0)}}, 0x2) 07:00:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x141000, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000180)={&(0x7f00002eb000/0x4000)=nil, 0x4000}) ioctl(r0, 0x200, &(0x7f0000000340)="8d5436f2e535e100ef8664c15d3222b06482ee726db5fb95c7fa61539f54c4af11f820a2ecd355e1b28b94bcc81ad438582dafa40dd3a893831daff26a66dfa326de965b7487257494b487f7054ea3b83bea61bf2d0bb6aa6b82949615975363eed6bf34cfe6209a148791d50ac25bb8476d7f5fadd39f4f50784318c6a1fa5307dd746b10f6f6f596be11fd20753cb22b14292071a65cc9d0d162a1e051162f4a5a31494388b1ab2eceb8865d5fd319fdf2a8a7f97bea") ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f6600006530205e7d6d696d655f74797065260a6910b3636de75b0c3dd3a1dce94beec5906bcb2a4ecf994c1d52df4e9cea4f9cfd7977c30d9fb9da4f77d09a8504177a0eaddd4d97ba0328a897f6c0bec39155ce030018a0bbff6c50b82f0ad487855e563c34d96cd545e1216e8ee781c0431da554fa1e217330086370f5444b5ddf08009ebbf01a53334a0636cf8a757d5fa380a19cb997da6fd3ecd1cd7c6e222f7c4c96dd1500603a2c2f4ee5a6f372d4000a1a3366202108b0f2b5f5b9de1b04fb0e724b6fa0eab94b"], 0xd0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RXATTRCREATE(r2, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:24 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x5, 0xffff, 0x4, 0x7ff, 0x8001, 0x8}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) fcntl$setsig(r1, 0xa, 0x1a) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100)={0x1, 0x1}, 0x2) read(r1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, 0x0, 0x0) 07:00:24 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) dup(r0) 07:00:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000040)) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="01ad9618a987037667ed5598bcd875d213fb38efb90300000000000000eaab939f4ffe01446f9af8ee232335c6582043"], 0x2) 07:00:24 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0x8000000}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) [ 511.699336] misc userio: Invalid payload size 07:00:24 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000040)='\x00', 0x1, 0x2) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x300, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) 07:00:24 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x6123, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, 0x0, 0x8c) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) mbind(&(0x7f00002e7000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000240)=0x3d84, 0x81, 0x7) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0x3, 0x1, 0x1, 0x95, 0x5}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x3, 0x3, 0x40, 0x3}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x5, 0xc22, 0x0, 0x7137, 0x0, 0x8001, 0x3, 0x5, 0x30ca4fab, 0x7fffffff, 0x6, 0x20}) 07:00:24 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x101802, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0xb, 0x102, 0x3, {0x7ff, 0x1, 0x1, 0xee8}}) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000100)={0x4, 0x2, 0x8, 0x2}) write$FUSE_LSEEK(r1, &(0x7f00000000c0)={0x18, 0x0, 0x1}, 0x18) read(r0, 0x0, 0x0) [ 512.025263] misc userio: Invalid payload size [ 512.032667] misc userio: Invalid payload size 07:00:24 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x400002) read(r1, &(0x7f0000000040)=""/129, 0x81) fcntl$setsig(r1, 0xa, 0x36) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x22, 0x9, 0xd, 0x9, 0x4, 0x3, 0x0, 0x118, 0xffffffffffffffff}) read(r0, 0x0, 0x0) 07:00:24 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000000c0)={0x1, 0xfffffffffffffffe}, 0x3d4) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x100000001, 0x3, 0x0, 0x451, 0x4, 0x1}) [ 512.146641] misc userio: Invalid payload size [ 512.177892] misc userio: Invalid payload size [ 512.217615] misc userio: Invalid payload size [ 512.232162] misc userio: Invalid payload size 07:00:25 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa02, {&(0x7f00000000c0)}}, 0x2) 07:00:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x404041, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x8080, 0x0) dup3(r0, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') recvmsg$kcm(r1, 0x0, 0x20) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:25 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='/dev/vbi#\x00', 0xa, 0x1) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x2000000000000127, 0xffffffff, 0x9, 0x400}, 0x6) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0x200, 0x9, [], &(0x7f0000000080)=0x36}) 07:00:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x200, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000040)=0xaad) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:25 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x3}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:25 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x2, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) [ 513.217195] misc userio: Invalid payload size [ 513.242686] misc userio: Invalid payload size 07:00:26 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={r2, 0xd7, "17aef86dc518d5b19f705389de895dcad5a0a7fd412b715bc8b5d22eb04eeb7d1870e0b1e5e917492e3081896a0f2c7d36cabb945e522832a73a59128f70993e5463e57721e6e7bbe6d517f1b095b3f94325504504b1947972af55ce017cee7f809b59c4c92d66d14fc6b6b71acce88e7edffb062821deb0ab6032904f7f2ced7de5f1466f9b60fb44264003a0c0aa2dfd215a09c737c8fc5712f0a08f665f8e45454d86f9e2659ebdc1b4c0f84ae4d8ccf4cb21336cb6c81c4f52bb66842636e943a8df8cd572c7b16731cfa2340ea2171c1d91b1bce3"}, &(0x7f0000000180)=0xdf) connect$nfc_llcp(r1, &(0x7f0000001240)={0x27, 0x1, 0x2, 0x6, 0x1, 0x7, "d8f38d26ea6081b62a3bb7c491a1de2db35065abe11eac334d615d89af2f6f4a87cf43e78922882a977c30bbd0beb2e7cdc0b46f7a0a259fba2169c83500b8", 0x2c}, 0x60) 07:00:26 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:26 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x680, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x20) read(r0, 0x0, 0x11c) [ 513.456745] misc userio: Invalid payload size 07:00:26 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x490c, 0x220003) ioctl$TIOCNXCL(r1, 0x540d) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x1668, &(0x7f0000000080)=0x1) 07:00:26 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080), 0xffffffa0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x30000, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 513.552584] misc userio: Invalid payload size [ 513.563561] misc userio: Invalid payload size [ 513.625217] misc userio: Invalid payload size [ 513.630972] misc userio: Invalid payload size [ 513.637541] misc userio: Invalid payload size 07:00:27 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa03, {&(0x7f00000000c0)}}, 0x2) 07:00:27 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101000, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x15, &(0x7f0000000040)="bd8b22ccde7bdb1bd7911fc6e754a4f38820b4026997bfc3c81e0271550e5f22313c57fd105929e73c91cf044d2c7a1acd5aa42a257f88eae3dba7a6a404af27f5c9718cae", 0x45) 07:00:27 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) socket$inet(0x2, 0xb, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x420200, 0x0) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000001c0)=""/14, &(0x7f0000000200)=0xe) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x585, 0x8200) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x4, 0x40000) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x8, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, 0x0, 0xffffffffffffff80) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000140)={0x3f, 0x6, 0x1}) 07:00:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000152000/0x2000)=nil, 0x2000}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="100026bd7000ffdbdf25050000002400070008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="080001000000eb00000c00030000000080000000000c00060001000000000000000c000200000001000000000008000100000000000c00060003000000000000000c0005002300000000000000222bf3e4eadda3d0062e2de2623264c9b373b6107b00040ffd6085d49a2eeb337185109eb0550dd12711881ed2507490eb3a938f9fa6c8d4d619ffe9e1f9a824c207c9450ebce67fb618db3bc2eaccc8a58fc16b928829bbb6eb6fc34cc8fae3e06d532c4b09220405fb40c5ece2ebee3e590f1e20be99345f0e30526568edf9cb6462180b"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) r4 = getpgrp(0x0) fcntl$dupfd(r0, 0x0, r2) ptrace(0x4208, r4) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000280), &(0x7f00000002c0)=0x4) times(&(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000000, 0x101000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:27 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x300, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:27 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x7ffff) 07:00:27 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x420, 0x260, 0x0, 0x0, 0x0, 0x0, 0x350, 0x350, 0x350, 0x350, 0x350, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc8, 0x110}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', 0x3}}}, {{@ipv6={@ipv4={[], [], @local}, @ipv4={[], [], @rand_addr=0xffff}, [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'nr0\x00', '\x00', {0xff}, {}, 0x29, 0x10001, 0x5, 0x4}, 0x0, 0x110, 0x150, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x8ba, 0x2, 0x1, [0x8, 0x9, 0x2, 0x80, 0x0, 0x1, 0x9, 0x1f, 0x9, 0x8496, 0x0, 0x7fff, 0xa5c, 0x7, 0xfffffffffffffffc, 0x8], 0x6}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9988, 0x4, "fc7b1501b18933f882e29e075dc5b1d94ed7bdb11786f59399c5168ce2d2"}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x37, 0x8000}, {0x3, 0x100, 0x6}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={0x0, 0xc9, 0x0, 0x20, &(0x7f0000ff0000/0xf000)=nil, 0x4}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x12}, 0x87d, 0x1, 0x3, 0xf44124f4fe4bae25, 0x10000, 0x1}, &(0x7f0000000140)=0x20) 07:00:27 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080)=0x1, 0x4) read(r0, 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x401, 0x800) setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0xdd1da959a6ff0ce8) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000142000/0x3000)=nil, 0x3000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:27 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x20000008) 07:00:27 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000080)={0x9, 0x0, [{0xc0000001, 0xfff, 0x1ff, 0x0, 0x6}, {0xd, 0x5, 0x7, 0x1ff, 0x70b5d185}, {0x80000019, 0x200000, 0x3ff, 0x100000001, 0x7}, {0xa, 0x0, 0x80, 0x2, 0xd73}, {0x8000000d, 0x6f, 0x0, 0x6, 0x7fffffff}, {0x4, 0x2, 0x0, 0x6, 0x9}, {0x1, 0xa1f0, 0x2, 0x4, 0x126}, {0xc0000019, 0x4, 0x9, 0x3f, 0x8}, {0x8000000f, 0x8, 0x800000000, 0x6, 0xffffffff}]}) read(r0, 0x0, 0x0) [ 514.869568] misc userio: Invalid payload size 07:00:28 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa07, {&(0x7f00000000c0)}}, 0x2) 07:00:28 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xffffffffffff8001, 0x0) sendto$rose(r1, &(0x7f00000000c0)="a54aac387d64599bc16f12e3c4f7352282e194283c9003cb264c40a4a7d6455fde818bb622af980a2defca7da6097aa96c915b307611a96da2d29773c3c750d39c2436f9e061934bc28302ed40e6fcb650265dd1f316e527a852164ddbaff0fcba8be9c7e8b7e9c85f98a1c2b0605985a6a4f5", 0x73, 0x4000, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x40) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x40, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000280)={0x18, 0xd, 0x1, {{0x0, 0x0, 0x1}, 0x4}}, 0x18) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@remote, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) sendto$packet(r2, &(0x7f0000000040)="b524ef5890a185c3d99660cdc727c04b44f74822878c00d176301b741ac4c4380f2f7ca6f7470e", 0x27, 0x77000d2eb58e0a28, &(0x7f0000000180)={0x11, 0x10, r3, 0x1, 0x9, 0x6, @local}, 0x14) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:28 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, &(0x7f0000000300)=""/77, 0x4d) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101000, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000140)={0x7, 0x0, 0x4, {}, {}, {0x3, 0x5, 0x7ab, 0xfff}, 0x1, @can={{0x0, 0x1, 0x3, 0xb7}, 0x4, 0x2, 0x0, 0x0, "610ddc7f60486f95"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$TIOCSCTTY(r1, 0x540e, 0x100000001) syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2, 0x7e7fe154}}, 0x10) read(r0, 0x0, 0x0) 07:00:28 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x200000c8) 07:00:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400800, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040)=0xaa, 0x4) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)="5fab0ed8a16ad039e11f11e8ceb8b5742bc721fd728607c9d6066dc9237d5bf2b8f989252a2ba78a597f73801d93f14a89b70247aafaa94c", 0x38}, {&(0x7f0000000140)="d888e268baaa9debbac529e2c7957a32e474", 0x12}, {&(0x7f0000000240)="7ec2f74601b683ca8799e8f3fb8cdeb8ae8d916b8b40e009503f16ec64a725bf667069c1dde468854c71c500376557ac224d093999ac7b51ce61d307932d0fb5b0263d7e2cf941fd81b110837213c704e812cddf20c29725c8453a1b8206650c100ad3cbf7390daff6083559d01d59dc56fc03bbe11817b76f", 0x79}, {&(0x7f00000002c0)="205db53c7c603da2956bfc68da8b9f936f07bdc62b063d385c7e6031ff1dd23e339f48f8ae9ca9cf7f68efcc9c25cdf731d0c2534c53bef15eae6f5568121ba82f578870662e649435003ee936d4c8b9e149a32ff416e9f001f9f378cb2b3351a90bdfa62d3ad73bdf600f1a133202e498c415437fd3ae3a4cc0029ff479df0b81bc46065738cfb6a044bfda76a53902efdbe365b5e4209a0de3814e3cf53f2382313d83437825b5b92442cbd508696481a7c6a32e27e49a3dd59b571fb190b5205a56a55bbe065320cff58c65d621050de2f4579e5134ab58341d39574b7fc413a5c028017be3e03e72848305c3c4", 0xef}, {&(0x7f00000003c0)="7c5011108a8510cc20fd8584d2e5b5e777ac853bf65b7283d5806ad49daca9f45c50e43dc51c0f5a9580c9b9efdfb1e06bb2e518bc99f0de1fc7d5bf2b517fca1b", 0x41}, {&(0x7f0000000440)="8f943976230da036c8de9963ba3cc2711f3fb5b22f8ee82463923dd0bf611c33b80d36e6935b096996fcd65824302814acc557dff033d69e4ddda3ab23bd3dff99caeef9d020bdeaf22c492240979fce510b9372deba895365aee145f4a6b265117021707ea1f9878d07bba54f0f2cd7e2932114ad5755aabe62a0dd24f57dcc9d50", 0x82}, {&(0x7f0000000500)="9b4a498887f772f24f5b316f8f95e621202032891998881501434779cc7c03978b0698ba957b525b721a96973662dcfea4d2403f7a50f25d6fb693e76f201f7cd5c21caf29548501e3c17ad2686a79526c6f4a850a4b0d9499f98e759007eed5a4e23ddc30d9b9aa0d7622bcf11651571731d93d61f379e554c5b3f7dc5c8804e80c10dbad57e4d72ba9174d86cd47251915d69099fbf2401139c52c0157cc699f83391383eff20c3bc25ad64e7832", 0xaf}, {&(0x7f00000005c0)="a9fd0603931f4f36654d0843b811ef50a8dd807ceba4d159e7ce1933ddc66d468ae223fd0c758ceb5dbfafba02c747cda4fb940569b55bd516fa47705f5ab475c2406e515ed4432615c8e38c148d788288fb676d8083512f55087db0ef7bc2cd4d2d204b0cb57122096cbb5097861699ff3d0ad6df8e6c3912fd19103bdd0d30409aaa705eb711573b30a51ae32b3b991163c1ab8d76a1e8db48a09363ea52dd2c8131d11b292f0aa5150f3d05d0721dff00a565a2b2f05700e1955ffd7a3a7b0343e913ce11495eabce1525338aaf62b19d5006b4a1e7cfa893364fe10b09abd1bd3beed434e8", 0xe7}, {&(0x7f00000006c0)="5e53ee44aa9ee8bc4681739fc54c30219f852d4cd47420e6bd784c43f1798776e5a80db21828d689aee76f450567f2ff3de7637fe7ae7cf95c4b9889e854e97b088f57ea67a40f697c87b74838fd0b9c7562ea90af6b30363864c4cbd18e8e23302d04bb641e0cbe16c7758ffd58d2db20c37d476317d0669e13903dc150c91ff676811039adc07977428ba454407415ff2d2e510f69ffae1f50ca85", 0x9c}], 0x9, &(0x7f0000000840)=[@iv={0xa0, 0x117, 0x2, 0x8a, "8fdcd695bd485650c06ee3e939ce51b9c73b80e55874049ed082f36e852b280142fe359b65b378a3c36b85617935aaf55e25f1a4a718982e7ba4f537d1cc5d98f78881d23699be3b6e402cdff6e230f124d75df0a12bee436424577ab717b455cbb6ce265bfa11c1f0b7f5630e9c06d8a55bb3f523f30753150d9854c2c0298d5ad22f115051bf772259"}, @assoc={0x18, 0x117, 0x4, 0xfffffffffffffffc}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xd0, 0x117, 0x2, 0xb8, "5fcf5bc6eb4c8cf78a29514122c332ffa16f494fb470003d34a8656fc7c982fe290cf441cb8914e97fb4262b71ff8d2c65dc9c637c72a20e1b12c1aae7c5c563a5db1fd8d46c980cf451e28ab76297a81fe253d43dee56c48fe37683b81790b20024cf02f5761eb36493b38905265a57cc92f37ee5435299d52c99b5250494f9b11d5b654740bd09e0bfe1842221b2487702dc187d05cc82c986fe8559358e8ecd3585427b75bff1e2b2ee77bde8de0835eadd997504b8c2"}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4f7}], 0x200, 0x20004000}], 0x1, 0x40000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 516.103901] misc userio: Invalid payload size [ 516.145958] misc userio: Invalid payload size 07:00:28 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x7fffffff, 0x10000) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:28 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, 0x1, 0x80, 0x9, 0x3, 0x1000}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000200)={r2, 0x1000, 0x4b, "617727e10a514466c4c70eaa2cdaff81d7f0fc454315675d9ce3334cb739586d89e8b45ef673f0d2bab11c3d16c5abb76e28372d7a4ab587e27bd1b58d7a353eebfba59c3ece721e8d8deb"}, 0x53) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@sha1={0x1, "19ed5db4571d5974dbe53e3428c8e8257193e9cf"}, 0x15, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x800, 0x0) read(r0, 0x0, 0x0) 07:00:28 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x80, 0x0) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) inotify_rm_watch(r1, r2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) accept4$inet(r1, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10, 0x80800) 07:00:29 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhci\x00', 0x20000, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000003c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000000c0), r3, 0x1}}, 0x18) [ 516.388135] misc userio: Invalid payload size [ 516.399324] misc userio: Invalid payload size 07:00:29 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/checkreqprot\x00', 0x40000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000440)={0x1, 0x638, 0x39c, 0x1, 0x6}) read(r0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000000)={'bridge_slave_1\x00', 0x100000001}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6a54, 0x0) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000080), 0xfffffffffffffe5a) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000200)=""/136}) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) select(0x40, &(0x7f0000000300)={0x75e3, 0x7fffffff, 0x8000, 0x0, 0x2, 0x12, 0x0, 0xde7a}, &(0x7f0000000340)={0x1da, 0x82d8, 0x8001, 0x2, 0x1, 0x2, 0x9, 0x7}, &(0x7f0000000380)={0x1ff, 0x9, 0x2, 0x80000000, 0xffffffffffffffe0, 0x3, 0x7, 0x48}, &(0x7f00000003c0)={0x0, 0x2710}) [ 516.505958] misc userio: Invalid payload size [ 516.542005] misc userio: Invalid payload size 07:00:29 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000340)={&(0x7f000029e000/0x1000)=nil, 0x1000}) ioctl(r2, 0x0, &(0x7f0000000240)) close(r2) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) linkat(r2, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x1000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x3, 0x100, 0x8, 0x2, 0x800}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0xba, "92a5e24fea9df87854d7b5e87bfcbff83949625e57ecf40f44225c67d5d1e0d8adaa588e6f7fd372c2e4727b686d795d28b7b38cfb40c98a2aad7502a3cd62b4948bdebe9f0203b9fdfeba298a53756c754c99760ac431ca8bd669d1366155c44f9d45c9e35901a7fead75915feb5aed1675b9f9ae20308f986f813cd1231338319abc21cb8ef7d44efc3d366694ef17ae8a6884cc1376d3cfb44bad47133cc4981e9f29c17df9a254212e4acb00ebebf39f1b5457c68608dd6b"}, &(0x7f0000000380)=0xc2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000400)={r3, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000440)=0x10) 07:00:30 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x7}}, 0x2) 07:00:30 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000140)={0x20, 0x0, 0x8}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r2, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:30 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0xab3345c0917e0920) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x111200, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 07:00:30 executing program 3: prctl$PR_SET_UNALIGN(0x6, 0x7) r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) read(r0, 0x0, 0x5347e3c4e9156d5) 07:00:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f0000000040)) close(r0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={r2, 0x4, 0x3, 0x5}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xc90, 0x0, 0x8007, 0x3, 0x1f, 0x1ff, 0x42fd, 0x9, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r3, 0x4) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:30 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000007c0)={0x0, 0xe3, 0x1, [0x800000000000]}, &(0x7f0000000800)=0xa) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000840)={r1, 0x100000001}, &(0x7f0000000880)=0x8) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000400)) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000008c0)=""/238, &(0x7f0000000740)=0xee) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000600)) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x90800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x1003}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000100), r4, 0x2}}, 0x18) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000440)={0xfff, 0x8}) r5 = dup(r2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000500)={0x0, 0x9, [{r3, 0x0, 0xfffff000, 0x1000}, {r0, 0x0, 0xfffffffffffff000, 0x1000000}, {r5, 0x0, 0x10000fffff000, 0x100000000}, {r3, 0x0, 0x4000, 0xfffff000}, {r0, 0x0, 0x0, 0x100000000}, {r0, 0x0, 0xfffff000, 0x4000}, {r0, 0x0, 0x2000, 0x100002000}, {r3, 0x0, 0x10000}, {r0, 0x0, 0xfffffffffffff000, 0xfffff000}]}) r6 = getpid() ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000700)={0x3, 0x401, 0x2, 0x0, 0xd, 0x1, 0x3, 0x40, 0x7, 0x17, 0x4, 0x3}) lsetxattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="6f7332147b1c4000"], &(0x7f00000006c0)='eth1\x00', 0x5, 0x2) ptrace$setsig(0x4203, r6, 0x0, &(0x7f0000000480)={0x17, 0xde, 0xbc6}) 07:00:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000040)=0xcb, 0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2400000000, 0x4001) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000140)={0x0, {0xffffffff, 0x1}}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x1, 0x1, 0x1, 0x101, 0x10, 0x8ef}) 07:00:30 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x1, @bcast, @netrom={'nr', 0x0}, 0x2, 'syz0\x00', @default, 0x800, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}) read(r0, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000200)) [ 517.618505] misc userio: Invalid payload size [ 517.657845] misc userio: Invalid payload size 07:00:30 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x19) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:30 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) [ 517.911885] misc userio: Invalid payload size 07:00:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x81, 0x4d0100) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xc8, 0x4000) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) write$cgroup_subtree(r0, &(0x7f0000000340)={[{0x2b, 'io'}, {0x2d, 'io'}]}, 0x8) read(r1, 0x0, 0x237) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0xfff, 0x6, 0x7fffffff, 0xffffffffffff01dc, 0x0, 0x4, 0x80000, 0x5, 0x8001, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x9, 0x2, 0xfffffffffffffffd, 0x8, 0x5ac, 0x5, 0x7fffffff, 0xfffffffffffffbff, 0x3, 0x9, 0x80000001, 0x75e1d85b, 0x7fff, 0x4b, 0xa54, 0x2, 0x8, 0x3f, 0x0, 0x401, 0x6, 0x1, 0x4, 0x0, 0x8001, 0x3, @perf_bp={&(0x7f0000000080), 0x2}, 0x2, 0xef1d, 0x7ff, 0x3, 0x698, 0xded, 0x4}, r2, 0x1, r0, 0x2) bind$packet(r1, &(0x7f0000000180)={0x11, 0x17, 0x0, 0x1, 0x3, 0x6, @local}, 0x14) 07:00:30 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20300, 0x0) read(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x40) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0x7, 0x1, 0x16e, 0x9}) [ 518.708607] misc userio: Invalid payload size 07:00:31 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x400000000000000}}, 0x2) 07:00:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:31 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x18bd7b9c) 07:00:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={0x0, 0x9, 0x7, 0x8, &(0x7f00000f0000/0x3000)=nil, 0x1}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:31 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) fchmodat(r1, &(0x7f0000000100)='./file0\x00', 0x1c0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:31 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0x4, 0x0, 0x2019, 0x80, 0x400, 0x80, 0x80000000}) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x18) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000140)={0x1, 0x4}, 0xfffffcfa) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xfffffffffffffff9, 0x8970000000000000, 0x0, 0x5, 0x10001, 0x7}) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 519.047536] misc userio: Invalid payload size [ 519.066028] misc userio: Invalid payload size 07:00:31 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff0001, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x449, 0x20400) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) read(r0, 0x0, 0x0) [ 519.112211] misc userio: Invalid payload size [ 519.149279] misc userio: Invalid payload size 07:00:31 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x396) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:32 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r1, 0x0, 0x0) 07:00:32 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 519.393635] misc userio: Invalid payload size [ 519.405035] misc userio: Invalid payload size 07:00:32 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x204080, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0xb3e, 0x3}, &(0x7f0000000100)=0x8) read(r0, 0x0, 0x0) [ 519.439559] misc userio: Invalid payload size [ 519.440040] misc userio: Invalid payload size 07:00:32 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x101000) getsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f00000000c0)=""/163, &(0x7f0000000180)=0xa3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 519.609181] misc userio: Invalid payload size [ 519.621122] misc userio: Invalid payload size 07:00:33 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x1000000000000}}, 0x2) 07:00:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x2, 0x3, &(0x7f0000000340)=[{&(0x7f0000000000)="11142153fc63f59b3656e949596b60cee4cbc0bd7ed1ee5ef935f287ed9d9cdf28b91dc3d119095709d9f112abc53b650ab7b0ef3a5813c9223bf2e3dbc2fef28eec6191", 0x44, 0x8001}, {&(0x7f0000000140)="c41d95dd4e08dbe835a91f4bb62b841cf58a62ffbd4d4551aee9406acd445c22e026acc45043da2c7be1cf64734e7dcb382e2248be94d7c158f6c90cb46781c857f102ad7cba88e524cf8ff5fe1649835b03a8ffcad2f2fb6ae5091bfd78d260903fdda98a1a14d508e34ea420319cc96c2994a394c0148ea48ccca11003", 0x7e, 0x49}, {&(0x7f0000000240)="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", 0xfc, 0x10001}]) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:33 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x4000101800, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffffffff80000000, 0x4000) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x1) lseek(r0, 0x0, 0x4) read(r0, 0x0, 0x0) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x800) 07:00:33 executing program 5: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:33 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000100), 0x4) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) [ 520.523154] misc userio: Invalid payload size 07:00:33 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400, 0x0) 07:00:33 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 07:00:33 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x80000000}, 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x5, 0x81, 0xbd, &(0x7f0000000080)="5787cb2fadd2bc5d215ce3873a9c44ae620858e61fd82ba5c1032bf269251cffc36bdca0b099c58167e94f5911ecc324a63d2512e9b429abf3c44a240a439be961a1ade90a38c0fea0d43072c71f7b638630de41734eb552fe8550ef1ff2998e64dfd87eb0ea6980908b9b789bc8a907a57bfe1cd867d3757acccca7fdcc3187b7dc20364eaefc2c439f4816f26df2c61440282f3cddaad5c1ff84067ac6a5c1207665d5e322b6b271425eaa544002ef2fc34fe63d2c76caf4b7f842d4"}) read(r1, 0x0, 0x0) 07:00:33 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0xfffffffffffffe39) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x240080, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000080)=0xfffffffffffffff8, 0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x6) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000240)={{0x0, 0x2, 0x6, 0x3, 0x6}, 0x9, 0x200, 'id1\x00', 'timer1\x00', 0x0, 0x3f, 0x0, 0x20, 0x8000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 520.997951] misc userio: Invalid payload size [ 521.010347] misc userio: Invalid payload size 07:00:34 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x4088ffffffff}}, 0x2) 07:00:34 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000000c0)) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCCBRK(r2, 0x5428) read(r1, 0x0, 0xc9) accept4$unix(r2, 0x0, &(0x7f0000000040), 0x800) 07:00:34 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x200) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x2, &(0x7f0000000100)=0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@llc={0x1a, 0x5, 0x5, 0x100000001, 0x5, 0x8, @dev={[], 0xf}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="6d34e3964f272245c282febaa0", 0xd}], 0x1, &(0x7f0000000240)=[{0x70, 0x0, 0x5b, "97cb3f4f324eef3bb3fc06a220ec9acb6b9c9464d0414c30aba926da01091d27cd67f34bdf69e5d9acf5b2093ecb1f39a7b2352c474ee1f48c2148f524b71dba359104ed03349c724be3ffe07a7eeb68b3b1c900a691fbbc7a58e3ca828f"}, {0x30, 0x10f, 0x2, "89a8bd2dff57ad4c81b9b897ebdfc1b1bb6d326e3e3eb0da93"}], 0xa0}, 0x4000000) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:34 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sctp\x00') connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x1}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x7, &(0x7f0000000240)=""/219, 0xdb) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:34 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x4, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) [ 521.981329] misc userio: Invalid payload size 07:00:34 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x0, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x501000, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000040)) read(r1, 0x0, 0x12b) [ 522.025300] misc userio: Invalid payload size 07:00:34 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x18000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x4) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000080)={0xf5, 0x0, [0x5, 0x3c05, 0x7, 0x9]}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r1, 0x0, 0xffffffffffffffb4) 07:00:35 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x20000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500)='/dev/zero\x00', 0x100, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="d00d02005aac7bfc9d7b5f5a05001ec465ed20394bfc3a55665474457aa2d9b82f4e9f168797e6dcd6fbe3168bad677e4b75ea94869031de86fe38e84428c3bde7391415234346eeca1cc66504f1e97716e0631064f291c7a54ff951d44b98b2117acae0187525d2d03c1046a174ce31b4a64ed4d8331d1672540ee18a57da51dd717499b5b9f8752f2993f86184de64517252c460f28f0d5ac78278655ece0279edec57e7f7511a7f0409e294127276eadfd7b2b4610406363ba229534ee09b8eb4dd981dca6fe42e822c90b6704c55a3e4a3e7b949fbb3f9c1a0b248ca", @ANYRES16=r3, @ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:35 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) recvfrom$ax25(r0, &(0x7f0000000040)=""/111, 0x6f, 0x2100, &(0x7f00000000c0)={{0x3, @null, 0x5}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) read(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x45b92538c45689b6, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x8a000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000180)={0x9, 0x0, 0x2, 0xfe}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000200)={r2, 0x6}) 07:00:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000240)="802727391b39e22a04e108c6c03dc5a7014cba80794bcedc404d56d43d2d62394efda96037fc94486067e45638faa14662f5cc325eb63ad0fc162d71e5ee93044012c344641d112c8ce28b514fa20eff5fe3138cbb76cec3bcf17ba3b282e14aadcb32793047ad451e8c98de726ad0702cd9c5932566a5f9e04d3fb0c7035262db2166ce33634c90897a0e32b31ef7fe1537c21c80e3df104905229bd2186933dee0188b1626579f661c0479b60d6c9661fff25744bc0933ccb03e4493f7694491f0abd2403278ac346d3754fb40edd5bedadc902772143db35468f95b1faefc67a4fdc8a99a45a3", 0xe8, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:35 executing program 0: r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = socket$inet6(0xa, 0x80000, 0x4) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r4 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@nfc, &(0x7f0000000240)=0x80, 0xab0f73f249240adc) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x602000, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) poll(&(0x7f0000000340)=[{r0, 0x2}, {r1, 0x400}, {r2, 0x210}, {r3, 0x4044}, {r4, 0x1008}, {r5, 0x8000}, {r6, 0x3009}, {r7, 0x320c}, {r8, 0x1000}], 0x9, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r9, 0xffffffffffffffbd, &(0x7f00000000c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) close(r9) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r10, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x1, 0xffff, 0x0, 0x1}, 0x0, 0x80000000, 0xc94d}) [ 522.459463] misc userio: Invalid payload size [ 522.479421] misc userio: Invalid payload size 07:00:36 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x14100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x103ff, 0x3, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x80000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() write$P9_RSTATu(r2, &(0x7f00000002c0)={0x6e, 0x7d, 0x2, {{0x0, 0x4d, 0x0, 0xff, {0x80, 0x3}, 0x14200000, 0x80000000, 0x1, 0x1, 0xb, '{vboxnet1){', 0x9, 'wlan0self', 0x3, ')%[', 0x3, 'em1'}, 0xc, '/dev/userio\x00', r3, r4, r5}}, 0x6e) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:36 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x381801, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)={0xa, 0x0, [{0x4000, 0x7a, &(0x7f0000000200)=""/122}, {0x5000, 0x87, &(0x7f0000000280)=""/135}, {0x4000, 0x8a, &(0x7f0000000340)=""/138}, {0x4, 0x55, &(0x7f0000000400)=""/85}, {0xf002, 0x83, &(0x7f0000000480)=""/131}, {0x7006, 0x6c, &(0x7f0000000540)=""/108}, {0x2, 0x40, &(0x7f00000005c0)=""/64}, {0x4, 0x89, &(0x7f0000000600)=""/137}, {0x0, 0x6e, &(0x7f00000006c0)=""/110}, {0x4, 0x39, &(0x7f0000000740)=""/57}]}) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000900)=0xc19, &(0x7f0000000940)=0x4) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x80430182, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) fsetxattr$security_capability(r1, &(0x7f0000000980)='security.capability\x00', &(0x7f00000009c0)=@v2={0x2000000, [{0x1, 0x1}, {0x7, 0x3ff}]}, 0x14, 0x2) waitid(0x3, r2, &(0x7f0000000040), 0x6100000f, &(0x7f00000000c0)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/nullb0\x00', 0x280000, 0x0) read(r1, 0x0, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000a40)={"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"}) socket$inet6_tcp(0xa, 0x1, 0x0) 07:00:36 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x1000000}}, 0x2) 07:00:36 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2}], 0x1, 0x0, &(0x7f0000000040)={0x10000}, 0x8) 07:00:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 523.482571] misc userio: Invalid payload size 07:00:36 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@caif=@util, &(0x7f00000000c0)=0x80, 0x80800) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000300)={@initdev, @local, 0x0}, &(0x7f0000000340)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000e40)={'veth1_to_hsr\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'team_slave_0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f80)={{{@in6=@mcast2, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000001080)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000010c0)={'ip6gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000001100)={'lo\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000004d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004dc0)=0x14) getsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000004e00)={'team0\x00', 0x0}) accept4$packet(r0, &(0x7f0000004f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004f40)=0x14, 0x80000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004f80)={0x0, @local, @initdev}, &(0x7f0000004fc0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005000)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000005100)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000005140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005180)=0x14, 0x80800) getpeername$packet(0xffffffffffffffff, &(0x7f00000051c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005200)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000005240)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000005340)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000005840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005800)={&(0x7f0000005380)={0x44c, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9d7}}}]}}, {{0x8, 0x1, r4}, {0x100, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x1, 0xe5c, 0x3, 0x4}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r7}, {0x80, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xc7c}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x9c, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x7, 0x18e, 0x3d66, 0x3}, {0x6, 0xfffffffffffff3d8, 0x0, 0x7fff}, {0x7191a363, 0x43d4, 0x1, 0x100000000}, {0x7fff, 0x7ff, 0x3ff, 0x3}, {0x100000001, 0x2, 0x92e9, 0xfffffffffffffffc}]}}}]}}, {{0x8, 0x1, r16}, {0x68, 0x2, [{0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x5, 0xff, 0xee1}, {0x80000001, 0x80000001, 0x0, 0x10000}, {0x0, 0x8, 0xffffffffffffffff, 0x3}, {0x8, 0x7fff, 0x0, 0x7fff}, {0x8000, 0x8f5, 0x1f, 0x1}, {0xfffffffffffffc2f, 0x9, 0x81}]}}}]}}, {{0x8, 0x1, r17}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x80}, 0x800) read(r0, 0x0, 0x0) r18 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x2000, 0x0) ioctl$KVM_SET_TSS_ADDR(r18, 0xae47, 0xd000) 07:00:36 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x2ad) [ 523.746585] misc userio: Invalid payload size 07:00:36 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x80, 0x0) read(r0, 0x0, 0x0) 07:00:36 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x300, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000240)=0x1) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@default, @default, 0x5, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) kexec_load(0xfffffffffffffff7, 0x2, &(0x7f00000003c0)=[{&(0x7f00000002c0)="790982dee84e578cd0ea76ed28376c04a4155f09109df03a2228adfaa4e7a7a7d0e3f606ea498bebaeaed25234533bcfb898845a3a35b64426be79906b5002bf72eeda3967b59695a984a1cbc7dc5d30fa058e21b35f3073d975e8dbb8405a6e416068be45e95d7b42fb643cd6cace9748a8127f1f4f6f106c32e756965291a15b1dae92d250914e9c2e97270532bc32e91281c9537ea0c47e81e96111427cafb525de4779a8ba83b8790e58563fd64ffeb326", 0xb3, 0x5, 0x6}, {&(0x7f0000000380)="1c87d652", 0x4, 0x5, 0x3}], 0x3f0000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000280)=0x14d8000000000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x131) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x8}) [ 523.777678] misc userio: Invalid payload size 07:00:36 executing program 5: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) 07:00:36 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x200, 0x0) read(r0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400002, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4401600}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x9, 0x7, 0x2, 0x70bd29, 0x25dfdbff, {0x3, 0x0, 0x4}, [@nested={0x68, 0x23, [@generic="c6d7de5e47cbb4425b1634344be79e3d8a4b1fe3030e2e95b12f3383297447a311f93468adfed1a19f8a1cb0202404394f37625c5d90007b6daf090675c5a2e9cbfcd6af0c12560da28e4b678e5fb6fa619d54f2aae66428d42cc167cefcff1c5a5d583c"]}, @typed={0x4, 0xa}]}, 0x80}}, 0x0) 07:00:41 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r2, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000040)=0x800) 07:00:41 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) writev(r0, &(0x7f0000001600)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="49da2b8cb00d2239b7619f350bd3d436df2b1bcb2bc4403a51aa1ea3e31f0dce8a2be8a4c83a3bca93ec5b555d6f661be35d095b280c0401e8cf82cb73c7b0ea420e513c86efe8f84b58c91faf06c11afb5dc006896cd4d7f1561a5a80ccdba74050f32e6f3f9212d434dd62c4db4b4b0782851469eca86dc9938a940fe55bcbdd3cd31bc50744a23006649f5e4750b170e4de70d705e2502222f135991bea7250d98858ee4f57589f56d05cce0bd2", 0xaf}, {&(0x7f0000000200)="749c362b033555f810c80df2505572e9ad06fbe35cb00a6f7f1a071a19fc83eab0f9f6bfd9de7f7acbcbeae32c10d04b65c48968f4b6ac56907bb1f07058c6f0b055ef887672e6678bee0c0f3f05641ce802bb4f27f3fd932a34973d5438869fc97772ef9912a9fb0bed5cbfbd42fed841114066571aeeb4bd62b92f064fcc2fdb6ee17c7911e2b3c7a851ec9b6fb08af7ae94467b45a28cdd760735131ed090e9f6711217c4aa84cfd4ec96a376fc01b4b77c10b7e18f", 0xb7}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000140)="52dcea610216b3c88d2ebd545320efa2017733bff96cff9ef4bc12078bc4bff1670ef95d3f4fe9793cecaba86a7d90a9cf6d179406b7be23b9dd4aa20fe33c3ffd2f0b88d00289676e08ba92f1eff7715d1161fdc42126b18e0cc57a1126b6bc288849334af69caeab1f191cf9429ecdaeb952134b696e20f3fc7dffc3751b84", 0x80}, {&(0x7f00000012c0)="3fcc18ecccb991f842772ff4d46378e2592c391a70436e5c1a69ed4c6c1ecfc1659589f11b0f298109080854c0a68ae2bc69c388616ddd13f0ed6be81c86eddd46a1a51e64dcfd6b1f559396f329303572285d45e866bf6dcf2683937c392fe5fe5a185634b2d357c944a8c314cc31320d393ceb84a3e472dac52c4a", 0x7c}, {&(0x7f0000001340)="f59b23335e1a9f90f7bc2b6ffbb9f7d3d7ee5bf85f61b2f577cb2d235566699074ce002d6cf326f46fc853bb624e15664f9d882f95391e5387802386718625c3e624f786308ab26c5249d614dac1bea99c895768a88194454313bfb7fd0a9af28c83e00bebf2d85c78bc4e0764aca36fac0e0ecdb41882fd3e7073b36b29cebf58becd046f6b9eda0f62be13082ab603ea404c850f4e4795578b8ab109087f82abf1bf7ec445851a4c570a20643706ed0a89f85fdb", 0xb5}, {&(0x7f0000001400)="d73a752239d6965853bed5b3cc09ae2a15a21b6fe3a630dd49b3f3df57599c675c238ce7b8d62b500c7410c7cd593ac797cdf3ee4a8f6bd786a7cb42f11f29b90600185e675cc54ba5a6497863c1ddd0628b2e7a53381bf1464980bcfe2a8622a96a47929ffa3450f83e146ed380fac383aeda45985ed241a12e9d3c82d61f77b993fabf", 0x84}, {&(0x7f00000014c0)="10a221696f458536be28b89d29dd96b0dabe2cf5df42b4966276764d05942c9da90b9ea00b3036b0519a9733af5aff82cdb185f0e0a9e0afea6303810ef9cbba9ccceb5df747f004", 0x48}, {&(0x7f0000001540)="ee035d3a96e5545e758c282948e97c1f46fa520559c28bbb42d5ec7d560227487b81236619e1806f12e62f52524a945d7dc0dc8cbf5020557f950d874f0da1d17d13f0e790e96b9f2844d4bf062b2ad91736f498ccad1c16cce0ab11eb94a9d35380bb1b4f0eaa38ad2b3810c797e200ba405a695f2d3d1c30bd5e0049aac30f096c1f0de6a7080f6ad1d9d09ef1c14ff61797da25f838e8ee9f21db27f142fefddd85c92b69c3209b", 0xa9}], 0xa) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x40000) 07:00:41 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x400000088000}, 0x2) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x101}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000140)={0x4, r2}) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) 07:00:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x7fff, 0x0, 0x10003, 0x7}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000001c0)={r1, 0x47}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x1, 0x53}, 0x7f}) 07:00:41 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='\a\x00\x00\x00\x00\x00\x00\x00s/net/ipv4_d\b\x00\x00\x00ate\x00', 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r3 = dup(r2) ioctl$TIOCGPGRP(r3, 0x541e, 0x0) r4 = semget(0x0, 0x2, 0x1c) semtimedop(r4, &(0x7f0000000080)=[{0x1, 0xffff, 0x1800}, {0x4, 0xffffffff, 0x1800}, {0x5, 0x4}, {0x5, 0x3, 0x1000}, {0x4, 0x8, 0x800}, {0x0, 0x3, 0x1800}, {0x0, 0xffffffffffff0000, 0x800}, {0x0, 0x5, 0x800}], 0x8, &(0x7f0000000140)={0x0, 0x989680}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000180)=""/1) 07:00:41 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x8}}, 0x2) 07:00:41 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffffd, 0x200) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r1, 0x0, 0x0) [ 528.926066] misc userio: Invalid payload size [ 528.937653] misc userio: Invalid payload size 07:00:41 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xff) r3 = getpgrp(0x0) sched_getscheduler(r3) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, 0x3) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:41 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@mcast2, 0x43, r2}) 07:00:41 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) dup3(r0, r0, 0x80000) [ 529.187100] misc userio: Invalid payload size 07:00:41 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x33f, 0x2, 0x6, 0x1f, 0x4, @dev={[], 0x10}}, 0x10) read(r0, 0x0, 0x0) [ 529.227891] misc userio: Invalid payload size 07:00:41 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) getsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, 0x3017, 0x27, 0xb7, 0x80, 0x10a}) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)={r3, 0xe2, "5f838ed5e19497dbb9f6dd8f721b8b2dfdc1b5f5c0bf6fbe1fec1f0cd7273a1cface10b3dfd7270bc0fa3d9ff998f8c95e6592480807a753cf7733f1e786315d881e120e1e25dbc11ce56dec7c88d5adc800b4984d723265aacdb2825b73c1995158999ff4fae4ce6924e62ad191232d9cfac4be75c82eb60ff58431cdec6035ab6b6fff264e05ba12539e307496e04c14f5434ae2692554570347c5392e75f02d44013244f2c5049998d4560c8b41572e6ac23c3710e72c31944e8c57903c719435c6b516f5c78ea991f78f9f67b77c227141c631d39aff3b13eee741c36762bc9b"}, &(0x7f0000000180)=0xea) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) sendmsg$kcm(r2, &(0x7f0000001b80)={&(0x7f00000003c0)=@l2={0x1f, 0x200, {0x401, 0x3a763ebc, 0x40, 0x101, 0x1c0000, 0x4}, 0x2, 0x4}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000140)="19ce75fe7bf05d3da661188e0e961904ae196cae3cb54de0", 0x18}, {&(0x7f0000000440)="56fffe51292c69c5321a37d344a7277d67a83aba3b410c", 0x17}, {&(0x7f0000000480)="02533b0e4074e5ddf8762a5cf1e7950a1cb839ba2b7d5a83", 0x18}, {&(0x7f00000004c0)="a1b0a98a8feb3fbd2cf082fa25efa11b62a6d73fd4b9490d515a126fc9a41f2e9bd6bad0790b02c72041579bfdb3907c4af8e6e6e1a2bcecc5ef89d4908e6ad8054248fd973a7a5f82359809bfe3ba917b9f3ab384ae4dc83a35c357a8674ffd55e6ddf256c1814d98c9ccfb1a0c9fef0788c2d3eb363dae98", 0x79}, {&(0x7f0000000540)="9c39fc4301b631370b372ac74fe54f39906c956a438d3d76e431870748fb438b35e620e76dfb915c87d78f8c1802f14a85adb8eec9115099ae14dc2fb4b8e941f647beff546db73d791a6d15d3eb4affa6347878873cee4e43d49106d7d1688a718a2b4eeae25e86f189f5f330c734548fe256b50a52bfbb28400e13364cdf6d7dd6c1d58f", 0x85}, {&(0x7f0000000600)="9cb27087b0ed1c65e1b5c68c97b4bec7b06aad5ca29addff82fa9d691b173f25b2071ef4da04dd6ee28a3e71873476aeca5eda6cec066b292d21e12c770eb75bae1058cbe24a2056c0f1c4154374426f4b9df48db220660c9fa02fcf86beea1d1caa03a4cc81fbfd861e587c42561821e41cc61be56c20d9865c63ce59cac5fae3d2626e42e6fd6316d8ab9179c76c482cd2c5d3594775eea147e8b7dc84536e497e31c21b37e2844e9d49dc82d58c1c317ae85e25afd54c30b1d87b82ffcbf6ba5cacc8853a53db74c081a69bd5e75f7e84253cce28a222c0f7c3106ea17449d1a233491dffa8fc8baec9b97c1f72c9", 0xf0}, {&(0x7f0000000700)="f56e8b28a19375625c0c54a66f003c3ee4a2c8d3277996efdba405edb5e0f9f016e8c97c2bfbfab974a60362fa7dfe4ba035baf0dcfdd323cad2e1495a5d864bc61c576c85a89dc67f7d63868eb11d99e8ac60eb4921a34b3d1d5ea3c178664a13f65fa5a4bfc56a65c6edffd15a8b5a217e351a8bfc41bb92755efebed666b754ffdef0c4a2a64cf452fc26922ce6e3e65c3d081e8d16d9adc740b1a69da0bf285dcbbb8df280b0b0d3c2c50482a7314709f15034d15cd864571737d81d97476bf8df8e8bec9d9a9fc25fc7e2deb3c88027f1aaf059d0a0df0345d3b72df70b453891c0ef157104835ccd0cf397a84c75211d62328e5562069dab17587a58aa7c44608adee3ab9536b50d7bf9a1be19c9f75fd6ae4f4c642c6d5ced5583dc6bf39c8b0ac96f379543485b4266d04e0fc30233c92360737341b09551a5ce0e0522719e44626729220ead31673be453797b8d50acfb68fe52d0d23d1faecfbf31cf358cce6920e279db2b574e3f73e9eefa0113c486598552011a84b4af3b07e8fdbb5b349d8699abd7a9b584b1c5f55a9159dc4cd34fe017d329c8aaf1f00652d0edc766353f6e4250bc7e9b60b6f66ca1737d227c7fb796f325153110a17735e46770fef0d5002b5f2341345482203c13ecf3dc15a9441adcf5db81acfea5ceaded47ca314dbd9efaa9c83fb78990664e2c36f5d7c8c0027e4bc81639c55c7ca5bc970b037a770d3e8af01960d7ac1ac5b327e5d97b2d88180c422aad74891c3e79cdac065f27c7e72b3953a8b230a4f12ef0677e89f1de311830bbc1ebf68addeca456891a2384e1e225de2248025822211a9bd01030e39f2d1ffb96c89548e707b6f23f71cb5a5f2478ac1fea0da3d39808b347ff0fbd1de0190c2e3964ffd7c47e3ebf8112f9f8047c7e31ae86a81db7ac383171aa637eb8f30fe13711bb76e9c562f47015609537af575b0e89efff31d81187d98bac60af5f4014c7000963001821e241e91c5ce024e78c9cfc99b31982fbfb319193a1bd22ff0aba39753bf1ddb77fbbf6396dd81c6dad92e28c2aeaf5665848276b653a5a6fdd5749b9c31ae7c4e8577871d64010cc99e1f7a386970dccdd5f52dc6456c2c936f71f1813a442b2d17716cc4b77d32509603c0a443024be06d70007cb2cfef0819fbd75dd82eee07cef8e743aff25235269376bacfb4ed7e4de7c29218cf97e597bf37e9d83acf97f7ca56798ada9199c55e15f3f47dd64418cd5f7c8bc12cd2ffb5501405fa2d1237f955206792380dd7c4827020a8da19e33f454aa8d56224d40b3a91abcfc0e9f5b93b811af202ef334b18d49c795c0cbf3c3e532d2565d261b4059248bff42316a5267d7b7fd9fb3fdb5fb0b76c59f7b6793ea37e095d4229384f9540e4d1f8194dc683c5642d3c5ff15cbce183eb0075fd3ca6236830e5eb4e5b379f2512aa5c68b7727e4d6bb26d3c3ea2c413d63439fee6c96ec71206e1016db0bf695fea1de8bb2ffa58a164b563432050681575c1691f3c227f87f24ae2feaf78cfb560bc476fab1936cb57a12050ba21378c5a83df10cbf03155fe8aee6dc28430751515cecbbb412a65a550596b832c4698574ac04be73dbd8578d26721fd90df4e4c36953bc230210bb7f5fa0472f30c6215b145dc66b3634e46bd3072614a76017bbc1b7d637cf6c796b4f98d5ca3457cc1ed03e32e630aab6f6897d9994ffb9d531964e230aab7e754834be13f12c3f464140287047f1c42cd817fd8cc089b584208e618ceeb35fc782a83ca2b000477f902cf85a213065230ad7bb8bb5937b33211cc06801128ddf1de8a3e4e45203d8033172eb268724eb8227dd26eb44631fa52cbc4b4dbbd3fdbc6baac9f58df1912f32712c7021a495d185cc6f24e2be0013524ffecbdf94a612073b59d5edf2539e322fdb340b03490dc3cbc92589d7611d21afc74cd0d0ae40e0526c74350fe4b1a438501277dbdc52741ea95d74773afc8b7850354600e1b7ca30b64ffecbfbbbc3701ee921f2915a3dd57eca1e104310e98897c59059874ea33fb421627e45f638ebd962304dc5f45fce3559772dd649c437d6e08f49470bd8e8bde17264fb61078d16df1d79ae719e35ff7294fd62c6d6932fe96b71a2a8213fff964e2b54b815e20b1a45d6ad073551565eac0fe6da23e4090a425e5958bb6405534a534626e502f33a5870b4fa5d41c76fe395344356984aa32426d7e93723e89db0e3de863916f32be390f5914164fed842ac73250c9bae83b2f46a95e6519a886393c560e61cb2344fedf35af7bab54c261898192aaa57bf0bc7291dd0aef70b62ed1b000c8d45b3bef03ebf56bb5d620a33b1c33c5638f59c8d273386a723afdfccd3518d7e3b772ec62490e7b528424a54d7bf31be21b255d76da36049779242e4b98102f5489bdaef4236358067f729b4d0a2e2f49feb088ba3cb8a1801fac3fca2834e82aab1b8e6d76d7df8c2cad5562764b5c4b018efd8f90d12e5652f39b55876239dfe651e4fdc75b04753a6f766e61670eb19db86be42fda00b1c8ab6792eb61856ca3ab5f855e2d554f8050d2085dd75080d9eb9ceb8e8b97033f4af2ad6756cc6e03b6750ffefe6c4e4725334046ce8c505a78baa139ecde315ff1fc23c9f1e67bddee8d6ff415172062d0496b5e2214e1ec4c22e0adbfedc9e0750ff1cca8c15d1dee3f64950faf7993c6e829347bd57db0186bbadaa6920b1eb549b63e43469c65a9a325fadfff6cc066edfe026a08c4a1a0cd5d82bcb408b16359ef309ef0df22db59fe5306f2a6f0169a301da30ca41186b89302289a1f49d070d6574da320616c7e5dd18ea33757672fdf82efb9eb8f1b2999ea29e3448c095d112ebd4d4add20b813336e391af83407cc642ffbb628fbfa69e7fb56469b6253c5c1f01494e4a294cb2a2cbd66593b88cc2f2edef365a83fc042dca92356a6908828d6b8be72a186740571eb8e3c8f212f1ad089baf4cac0af9202fe65a329da7ed1a4ff3df4a7e39b249f02441c20e069d60842872ff3d412fbba556c551814bbd9ae5148976347728671dc64c829c84437263d6b9f605bbdf8074e39449204d08cc5db083be917c4def0e67f9f397c8c0707fe3ec794f05c845fe9a7f2f993340c64353c19907ff30d0e5808db12eceb71db446cdfef4dfbcb5de6735d1ee85a40e68767dff09aa4886dee604fed1b9d0a2cb1327a3a4ef1964c00de35442454f86ac3615e7b8d62a8558c67793156d9043a9f58703aa7824947f5a23f267f9fdc83748563d7f01dcd3ff1d5c926af5de3e13a13557d5cc183dbaccd128905b0f107598a1ef415b6a82268c5d0bc1916c37511ca4d6031175523d83e71c7d4b89144b0601ce9b897faa68838d529884be5d0668cf6609c13653540caff73c3cbdb6b74e6227f8932304109e5bd271072832a2f2b34344ed60e1d851bafbad73faaf394311214704abc6445856e87e24baf19163580e69a51a1bd2246719b6d467dfd83dc2d44f4e4619b804c883c64f166115611783c711db2eac8488ddb14a9843338625b1f43d30b7ad77a3a45482cc6265437704bbb754b1a78fd25999359d050b926dc2d5039c195a8c145134236bf012f65122bc9002f5c6e3dcac31087780519c233ca28fa994beee5b8d9669d42e937960c2c6af246575f4ba64a0d06ab97019b7fd3cb3e402712f42432688890baf2e895488e0fe08b66e4df2dcd37c410cfeeeb058364858e3ec062899448d88d0ae96c0743a08350ed139b38ff4a4bfa654b2f8b2bb630229baa06784fe2faba6eea9e624fdc0ee974509c5dbf39493be891ccbaa84447e99bb19ac0d9e21024be98fbe2b4124dbad9f8af38f6b3f0ae471aed7471cee0b3f14e6751f5335eb074a3c00167e09ec707d554ace83e9fb769fd84cfaf079f9f4f8072562f4bdfb1aec7c2a6cd4bda49b42c1c3f25d4e2a13e802098109a66319a0836a215aa51ce9f70bbcc79e499ab3d9bcae8574eaaf43d3905821ed61e87654940b7ae8262bc71e9a171c5f4588fbf3c04a123b773da411786a6c0e36034c7af28c1d717236cc98bd5cec5518a51054848588760f3642c516412ab36556cf2e0162606d172637930199297ccac8b307df6e22970dc4d026eb16c1500e08526b64a4a96d33b761dcab88c4cbf91dcefae330c3940fa54347ddea428e7fe67bf451ca56482be6b0626020dd20d7810281d897f896b36d094cb72b47abeb8c5f3bf123784dc84572b4d7b7987e6f4317ee0b22b2dc09ed3a6a7135933a83198bcc50c751f7b68ced29e21d395bd1514baff4b4995ca4f63f2c0ec32e189b02fcf12a3fe8ac4ee08d6bf76cae9c24788780b93a3e883a7d5aaccc5b0b0eb7019f7b5d82fd9bd600105b57586afd1b0d6cff314655132c59b1eccf8f544c16f2009e9714ccde9ddc811c153421c1c0de921ed38cc1ba777ec83a5a9260886f723124a6b8a8f466212d93e7d3d22da82c39acda326ad7ed68c25ad0a428d21088b70e9475d7f6c5a03d31e9b2c5e6b683fc0ccf05741427a3d118d9e83ca9cd6a4d113d0ab94da0bfd3cd9c66ca40973655c9e72e9ed28937e49f13b8572579bb6e09a972db851f831b9f0c2b6650e0fa5e98ee80181c0d6f9925ac8a73fb8099fdb8569021e188afdbe350953253291b5f94912cbbe68a74150af58da27ed96b0d645c0153bb5eefdfcfea390453f448a287e5baaa27b632513c423f889ca7638c6ef6d98d747441c896ace3da14fa287ff4c62b06e6974c9fe8a75248e3f710067425933a120e46462d173c6412f0b235c1628a711a08b0c58325973dc724da7e1688f4e667d76076d4f72230a923224ceed22b2d93a3a9f5beec09c034151f80ceb7551b9002b4875d71ec036d5b0c7c7759a6b04f336ab1b69b55c0fce903fdef99ed76e74af43c8e75c53e544edebfd197c680c884e284ea0fc61930966765562b479bb5f8c0cbe6383c3521ed2cc24d77cc09e84af0aa06b6ce7c74593265c33d98ee4bd46e4c45ae71556c194f93e1e91a243186cbf7b9ce9224b23aa510b15fe774e6cc3bd7762ad2ae7900dbede5fc54980728683c96fb32e4efdf538493ab5d07736d29e728f3dbbdf7dfbf529891a8b69761afab39cc3f1e5e2e85f4d0bc1822bc7285758205e1ad1a3542bffa29bfefde084e7254f14654ff15eda35f004b36c0fa961bbcf0d4336140ac5b3850c77d20e5310c43300230e8abc29eaa70cfc70493b4044d165707dc42821fb2140d6847eab4a156edc6381a605baa148c25854e2cb586c7eabc1781da7c22d17b5ba8ee66132e9721d54eadc78002658a40bbe6eab1766cbde2f4c25dcf133f88961e891ebb1a9b8a600f46aaa43b57c34fc2cf88882193b87bb533f8563f35c8b2ac16efa587252dea1a23d66660d1eba267c4f05a99931f98d2bbe98f6ef7dffdbafd1eb1daea2f81f727356ee49757d8d9b78a430848c26183c4e93eeb7314c37915e3074f93b266d63d91dd77a829b38a3e473d92fccfff9347798d1a86fc77fead31888f6a10a75f878542a71cfc7c7a4ecee81d5d8df5994848b7748819ab73edf34cd35efc7871dac5cd1b5112de3cf162adc8b8260a162b102ab764d577b65f50329daca05e3afeec48f644454e1f778e30e2b89251d829cc951d0d9efe408efef138ac5e28843b5c5992aac562c3804fdce826b9517e71cf146ed591b8d35f90e06f63757e1609e2de9ecb95a427213da5198c878ece6a52271c94fd749ef639393ebde979789e36f645d822", 0x1000}, {&(0x7f0000001700)="0a2c34fceb6b3e69019538f7986b6beca77545a85a39c969224ee6993f7bb2b3beea97122665a3e554f8bc5c6361c024a7354abe173fd6ddf64f02290b030f4e832f4cfd0408d3f08c25be61c24de4100a3ff6608ef4b2cdec893f796d705ecbe808ffba3dbe215f637328a3709484a2b60a7f189072e5799ccc4a1fe6211ee017da74c639b970519a1865acfac9759da10ee795f8446945b105fa737df83329e4c6b5a38d4e787040ac432004352d28c50185d3fee750ed1670f51e58d5be3b251aae2981928ac5e8b792e2724283a8b15b1f1828ea3a29346ebedfa559bc6614942e86ba7c5a588c0190b2d9feec11d5dffb0652c0a8", 0xf7}, {&(0x7f0000001800)="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", 0xfd}], 0x9, &(0x7f00000019c0)=[{0xd8, 0x13d, 0xffffffff, "e40adaa8f911c0bde46c5f51fe3c57adad038d23f74b7dddf35f7da74fabe81a59d98c7b0bb4e2370d815781a158dd04d70224135780427688650db041a1ff75a6244df44a1c6983ea86b27cb26ba9c5780ea80a75af242b27073fe526892d3f8ee58f156f16ba4ab04c2e4ec2cad2eb43f4c19a29db2d6614d51995e0193b4f8aa46de13c6ef443307d6a8151f02d1fbab14b62f3aeb9303364723000008426ed7283dc449512fcd19499ab4758786c1245f96849478e6db22e6e846c4c3971db8c39d321"}, {0xc0, 0x101, 0xc128, "df30e7abda8cfcbeb26411440767f8b1036e364cd5f43e0f0c8a8c84c7504f5f508c8b859cd24e54ce1d5d65bcf3e4a34a0b2e213a7bc78b9676a818ffe5ba0263af673536da6c0dedf2dbc3250e3f9076d0a69ffdd8fc0b8867e179df57d8397fe63771c87765943bd4dbfae5df9489db22ff695521718eb8cd597167fdb14fddd0b715c829841400b2770586018d3a42733876ba5def7dd879fe2c74323a511de367c5b4d92cb3d77d"}], 0x198}, 0x40800) r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x800) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000040)=0x9, 0x4) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(r4, 0x0, 0x100) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:42 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x2040, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000340)=@buf={0x66, &(0x7f00000002c0)="ddc236db88fbb493dcbfdabdc8b76fac2bc746f8bd428415cfe5b5b4b11937ded4e868b49102d73586987cfd2ea9155e0b3e38139aeeb177595ca31a99cd93216654c016d1b9cb34c76938205d1e92eff69d5e7d8004eef866338543f2dcf8b3acd66b7f67a5"}) accept$ax25(r1, &(0x7f0000000200)={{0x3, @bcast}, [@default, @netrom, @null, @rose, @bcast, @bcast, @default, @bcast]}, &(0x7f0000000280)=0x48) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f00000000c0)={@local, 0x0}, &(0x7f0000000100)=0x93) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', r2}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200000000000000, 0x0) getpeername$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10) read(r0, 0x0, 0x0) [ 529.379726] misc userio: Invalid payload size 07:00:42 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:42 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = getpid() fcntl$setown(r0, 0x8, r2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 529.605054] misc userio: Invalid payload size [ 529.611351] misc userio: Invalid payload size 07:00:42 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x200280, 0x0) sendmsg$rds(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/83, 0x53}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/250, 0xfa}, {&(0x7f0000000380)=""/83, 0x4c}, {&(0x7f0000000400)=""/90, 0x5a}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f0000000580)=""/37, 0x25}, {&(0x7f00000005c0)=""/100, 0x64}], 0x8, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0xff, 0x7}, {&(0x7f00000006c0)=""/111, 0x6f}, &(0x7f0000000740), 0x0, 0x4, 0x5}}], 0x48, 0x8000}, 0x4000) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x0, 0x8, 0x8, 0x7fff, 0x7, 0x400, 0x0, 0xdc, 0x1, 0x101, 0x40, 0xfff}) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) [ 529.722870] misc userio: Invalid payload size [ 529.743025] misc userio: Invalid payload size 07:00:42 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x8000000}}, 0x2) 07:00:42 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x101801, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="000700000000000000ff01"]) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0xfffffffffffffe52, 0x4b, 0x1}, 0x7) 07:00:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) time(&(0x7f0000000000)) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x14) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:42 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x7, 0x2}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 530.382563] misc userio: Invalid payload size [ 530.413923] device nr0 entered promiscuous mode 07:00:43 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) accept4$x25(r1, 0x0, &(0x7f00000000c0), 0x80000) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 530.465455] skbuff: bad partial csum: csum=355/25970 headroom=64 headlen=3712 07:00:43 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000080)=0xbd0, 0x3, 0x1) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) [ 530.586696] misc userio: Invalid payload size [ 530.601224] misc userio: Invalid payload size 07:00:43 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000300)) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) r2 = semget(0x3, 0x1, 0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) r4 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000540)=0xe8) fstat(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000600)={{0x938, r3, r4, r5, r6, 0x80, 0xfc}, 0x100000000, 0x0, 0x5}) mq_open(&(0x7f0000000240)='/dev/mixer\x00', 0x41, 0x2, &(0x7f0000000280)={0x3, 0x200, 0x10001, 0x2, 0x1, 0x5, 0x458, 0x3}) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40080, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000140)={r8, @in6={{0xa, 0x4e21, 0x6, @mcast2, 0x1}}}, &(0x7f0000000200)=0x84) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x200000) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) connect$l2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x1, 0x2, {0xa, 0x4e21, 0x1ff, @loopback, 0x21a478aa0000000}}}, 0x3a) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r3, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r2) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:43 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000140)={r2, 0xee1fe42876859466}) r3 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="2900000006000000000000000000000005000000000000000200000000000000000000000000000008"], 0x29) read(r0, 0x0, 0x0) 07:00:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x2, 0xffff, 0x1}}) 07:00:43 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0xfffffefa, r2, 0xf20, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x1) read(r0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000180)={'hsr0\x00', {0x2, 0x4e21, @local}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x100000001, 0x7fc000000000, 0x4, 0x7, 0xffffffffffffffc1, 0x7, 0x5, 0x9, 0x7fff, 0x6, 0x59, 0x95a, 0x1, 0x7fffffff, 0xa28]}, &(0x7f0000000300)=0x100) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000340)={r3, 0x1, 0x3ff, 0x4, 0x26f9, 0x3}, 0x14) [ 530.858333] misc userio: Invalid payload size 07:00:44 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x6000000}}, 0x2) 07:00:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x8, 0x2) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/11) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r1, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x2000, 0x0) ioctl$TIOCNXCL(r2, 0x540d) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, 0x0, 0x0) 07:00:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:44 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x507c, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1a}, 0x1c) read(r1, 0x0, 0x0) 07:00:44 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xce, 0x90000) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000100)={0x3, 0x105, "7219bc2e5316afe05f2b552918e55124058cf678ed432ec77d2ccecb2b6c90db", 0x7, 0x200, 0x40, 0x5, 0x200}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) fchdir(r0) ioctl(r2, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) fremovexattr(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="977365722e835700"]) 07:00:44 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x10240, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c8}, 0xfffffffffffffd6a) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xffff, 0x2000) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000180)={0x0, 0x1, 0x8, &(0x7f0000000140)=0x80}) r2 = semget(0x0, 0x0, 0x4) semctl$GETVAL(r2, 0x2, 0xc, &(0x7f00000001c0)=""/219) socket$inet6_udplite(0xa, 0x2, 0x88) [ 531.780231] misc userio: Invalid payload size 07:00:44 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x200000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) read(r0, 0x0, 0x0) 07:00:44 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x80000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="eeecff9ab07b090643beaf6aa39ce69c724c8f02b2a01ec9cbc593721b89e9e657acade6c5aa64b102fd3550c52ecef9c8aecae5fd042cd8267a774bbca613a625e93c44f314733878", &(0x7f0000000240)="f2e99e8306f0b281ed201ac6a56b54ecc4df3a618bac63551d88f0f89e97a0ebf090da69d9d4af9313c05dea3f72990c092bccf330f6f861eacb30c319c85f054074a6ad34bdf9b3da4da5b8ed067bc12466934dda1b538871da803488facdbb4b457d1d2b7cf81b613b1759ce8751d5960c16800b7175b9f6d2f5739a4f778dfcb5b4f04e6b3b5f0c18523fbb83d642c214ddf2c37beb04d9bc8e50b945d406a2043f1f078bad049a60c1625696581072bb078264e7c1c5e5f503e26124c640fb583e5699ccbd", 0x3}, 0x20) 07:00:44 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x100, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, 0x0, 0x0) [ 532.043512] EXT4-fs (sda1): re-mounted. Opts: [ 532.079404] misc userio: Invalid payload size [ 532.089529] misc userio: Invalid payload size 07:00:44 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x2, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000000c0)=""/244) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x40) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) [ 532.210427] misc userio: Invalid payload size [ 532.216656] misc userio: Invalid payload size 07:00:45 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x600}}, 0x2) 07:00:45 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x800, 0x0) read(r0, 0x0, 0x0) 07:00:45 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x200, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000200)) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x3f}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e23, 0x800, @empty, 0x8}}}, 0x84) 07:00:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000080)={{}, {r2, r3+30000000}}, &(0x7f0000000140)) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L+', 0x2}, 0x28, 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) fcntl$getown(r0, 0x9) 07:00:45 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)) 07:00:45 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x20000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x40, 0x3f, 0x2, 0x6}, &(0x7f0000000100)=0x98) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000240)={0x2, 0x28f3, 0x5, 0x401, 0x5, 0x6}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x200, 0xa5, 0x3e7, r2}, &(0x7f0000000180)=0xffffffffffffff4a) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={r2, 0x0, 0x3, [0x1, 0x600000, 0x5]}, 0xe) [ 533.252941] misc userio: Invalid payload size [ 533.284207] misc userio: Invalid payload size 07:00:46 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0xffffffffffffffb5) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:46 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) read(r0, 0x0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, 0x7, 0x3, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0x5}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000100)=0x9) [ 533.515102] misc userio: Invalid payload size 07:00:46 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x300, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 533.540349] misc userio: Invalid payload size 07:00:46 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x7) read(r0, 0x0, 0x0) 07:00:46 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgid() r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x0, 0xfffffffffffffffd, 0xffff, 0x1, 0x4}, 0x0, 0x6, 0x7f}) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = fcntl$getown(r0, 0x9) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r3) [ 533.678161] misc userio: Invalid payload size [ 533.701982] misc userio: Invalid payload size 07:00:47 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x5000000}}, 0x2) 07:00:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffff9c, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040)={0xffffffffffffffff}, 0x2, {0xa, 0x4e21, 0x3, @mcast2, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) recvfrom$llc(r2, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:47 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/243, 0xf3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000040)={0xd, 0x49, 0x2, {0x10, 0x4, 0x88}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000200)={0x79f7c7ac4ba0273b, @tick=0x3a21, 0x8, {0x7fffffff, 0x7ff}, 0x8, 0x2, 0x4}) 07:00:47 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x203315ef8ad964ee) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000000c0)=ANY=[@ANYBLOB="160000000000000000000000000000000400000000000000"]) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:47 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x101100) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000480)={0x7}, 0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000900)=ANY=[], 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="75482a0b994c1b6e6d000000010000ffffff7f0000ef00b0d2a44b3a05e329f0cf4def7e1fcfba4093b91999ae78c847a6566a63356d183df5d735a0f091d0347c93e80c64369d826a8b97664c48a5d97997cfc7a832228dcf3caf43ea7fb633340a30c58d0e232decefbc593f9103bce347077d0f32a447e291a4a02e83273b71804360f6225da48f34ef7e7ecc1bb47a6ccc637ae65cc7eb049e285fa93dde15995250a727a12c77657af28a86b03838a437e7726a6d4b501a7712f6f8bbfa1fa9604e91102ecad314153f1b999fe4cfb3c08f98"], 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r4 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r4, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000a80)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[], @ANYRESHEX, @ANYRES64], &(0x7f0000000ac0)=0x3) recvmmsg(r4, &(0x7f0000000f00)=[{{&(0x7f0000000500)=@pppol2tpv3, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000580)=""/78, 0x4e}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/255, 0xff}, {&(0x7f00000008c0)=""/108, 0x6c}], 0x4}, 0x7f}, {{&(0x7f0000000dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000000ec0)}}], 0x2, 0x0, &(0x7f0000001000)={0x77359400}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00'}, 0x2c) sendmmsg(r4, &(0x7f0000002880)=[{{&(0x7f0000000e80)=@in6={0xa, 0x4e23, 0x6f86c084, @local, 0x7f}, 0x80, &(0x7f0000000f40), 0x0, &(0x7f0000000f80)}, 0x1be}], 0x1, 0x4000041) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001080)=ANY=[], 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'irlan0\x00', 0x0}) bind(r2, &(0x7f0000000300)=@hci={0x1f, r5}, 0x80) 07:00:47 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x101000, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x108000000) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f0000000140)={0x23c7}, 0x8) [ 534.740901] misc userio: Invalid payload size [ 534.766675] misc userio: Invalid payload size 07:00:47 executing program 3: read(0xffffffffffffffff, 0x0, 0x4a9) 07:00:47 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0xfffffffffffffff7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:47 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x440200, 0x0) writev(r0, &(0x7f0000001340)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="3969f1c1202bf95a2748539b271c9f3d4bed5d", 0x13}, {&(0x7f0000001140)="8ecb77bf50ab0b90ea59428de482d9ecdbe84e20a7075457cdc4973524897e123a838afe81eb926f1426d0286d0191efd1cfe85fc4f8a2fba9b4e8d864d3319db59f6619ed6a1e893c918c9fc4cff85efbc4ccc9b8a6c370251129fa8bb015bdd1d1f66afece1b626707ec23af19d0c70afeb0cc2711fd2a4e1e52482b51d26b977f2373c23a9a", 0x87}, {&(0x7f0000001200)="7c3eedfa57a78bad3c086175bc1195ed48980e072425de517ad4168d9ee69bbe0413b9c2747ffc70dd6ee9322800c1bdca5a7a1d3456ba0d07e2c516e50d553a4a9617114de43ddab62ef4d41ecdc192b1d03d88e88130f0edc1c102252437e283e3413ff169469e7883cf3475df0e27a6eb21eae973184525fd32593158c581ed45f8fd8bc7b5f41692eecf229c364b7f8a6656c067336e4515059dbd79598b36801e2d37b101359e6793f9ac76ff660467869a9f8b957303ee38bad1bd9252c0f9397da87123f4c0adad65c85d43bd", 0xd0}, {&(0x7f0000001300)="4e5eecf6d7922de4b86d5fdf822bbccdd39f3141", 0x14}], 0x5) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x101800, 0x0) read(r1, 0x0, 0x0) ftruncate(r1, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x2, 0x4, 0x4e5ae5cb, 0x80, 'syz1\x00', 0x1c50c}) [ 535.013903] tls_set_device_offload_rx: netdev lo with no TLS offload [ 535.044498] misc userio: Invalid payload size [ 535.078035] misc userio: Invalid payload size 07:00:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x200, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x84000, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xe}, 'bridge_slave_1\x00'}}, 0x1e) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) write$P9_RLOPEN(r0, &(0x7f0000000140)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x8}, 0x100000000000}}, 0x18) 07:00:47 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) syz_execute_func(&(0x7f0000000080)="c4617a2cfbc4624937bf0b000000c4c17c51e065f22e80650036f04281b209000000cf6e894c8fa8788fb900000000c1c44179df712a8f8978812c00c4c178528632233333f3af") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x1, {0xa, 0x4e22, 0x3, @mcast2, 0x3b50}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) 07:00:47 executing program 3: r0 = socket$inet(0x2, 0x8000f, 0x10001) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x11}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x0, 0x10}, &(0x7f0000000200)=0xc) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x3, {{0x2, 0x4e20, @multicast1}}}, 0x88) r2 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r2, 0x0, 0x0) r3 = dup3(r2, r0, 0x80000) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000000c0), 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x101443, 0x0) 07:00:48 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x500}}, 0x2) 07:00:48 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x442, 0x0) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:48 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) read(r0, 0x0, 0x0) 07:00:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x7) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080), 0x4) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000000)=0x5000000000000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r1) ioctl(r1, 0x401, &(0x7f0000000240)="0333c422f3b21ef0b1b981c3e2be48c20674d315211f7a39c83b0c1dd4014f736e67b905635298083988200b94756da9c50cafaa092ba83850634e327c9cd937f4143975432d5d67c0a76f602f5ab04209c983438a754f610f14cda1a054a39a04a7f5a33a1f95bb959a8165341b3994b72162e64d1a45cf5a3a969fbfa602fc6f311c967b48afdb477dfe85966d493040d5516596632fddb87a6556a82607e05ca90866f20ec38cb1e1912d6fafa9c6e72ad9cda74722996333fd275036a20b4a701d46f21a44b53d17969d829964c778c85cc1") ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x88080, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000240)={0xff, {{0x2, 0x4e22, @multicast2}}}, 0x88) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400, 0x0) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x11) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000001c0)={{0xfffffffffffffffc, 0x0, 0xffff, 0x10000000001}, 0x8, 0x0, 0xc94d}) 07:00:48 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) io_cancel(r1, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x6, 0x8000, r0, &(0x7f0000000100)="6295c029123319333ff5dba617bd4d970b49a511ae9a7e40a3b4c0fa07f013e6ba19ab866144e1f4fc9e7beb7d604b460afb37fe6cdce615e1c93f1f7c8902dad57634057d2112056f4d229a4a0fe845bb9feeaefc917a14ee1853bbaa7dba42435f4fb1f1ac80c57fdcf4a383b96052776130e8d6aa5814cb335dadba51dbd9479189c6555a572e5af8c8e308de921b6defaa044cf241e064a536642c5618125804f90dfe29a89c93c290eb7be27269d3926ac1f0126a7309a52cbfe91c04dee3636944e1ae099cb536b7234e7397ef452165763e0aa8abdebd63e0cd8afdf179e10bc1249f61c0ce36e253037d5ec5d68470c588460142319ba403b823bce654b788b6c54e9b674e9ace9533e441e4a77b39e5d416981684602ddc02a59780c9b74853a0b61aee5e085fd5e3c34caa800ea5e2bce0483ea5345922cfa2d21c7cd406572e109abfbeb5cdf85505cb5789c6cc41b0812a65910802281042fc7154e0d6d06171ec31be8dc9ea98abf41b085821849f80e3a7b9554a104f8c68903273975799867ec2218b0a0efa777de62600a341ccef65ed57c9db1c6a6da124eacbab22787f04abc85e5deed57227531c4a564d11e8bd302ca240c80cc026b1f46731a88c37690be2fa79d2bd078eb4d5273c037838ef968d06b571b424a236a5f2d49f657303b186b7f728b5401eec0fd2aacd6c64b01f5691ea3b3746236098dfe77a76f616b8231b1244a775f03092644cc8454668a78a64e310471a51c77e0f33b4fd9052141348f689d5c79c767e3e6cf53d60adb09d0022d7d25d4b5c35cb43a833d18e47c10103ff0cb1e0361bed2402c19bab953a9c6257e372ad2dec4af0de75c9b5695a6daf19e55dd908bbf9f2846bdfb18fe67e88d1dbab91af35b4df83c88175e0453441c7709bd3738c6a7204337f9c608b60aa8698fc52535c5a062162def4d43a7964262c52b35cc3d979a8b3f394f3c41b19076b8fb56bb36bfc48fa92ad3d0d2046c3826d129e12254f0752e44b343e40a8332498e1d6465eee915dd066498e55e9bd4f474010264ff72191a6546856bd1c247fcd5276f009e0a9f7150043e2e77c651da9aff6f202a1d78ce06a1f5d4fdafc60ab54d393fca82e774fe31dde41873283df0a96e9e48672bfa63b30d27628c314d2b916588a0090949e207ce67f532655302221e1a590ccee3514bfe36604bb23c99834eda3a3ea505d02fa2f0831953b255655a82530c4f50de03aca884ab1be7ddda3c0034d923b85cd109845546b95275611bdda969b6410c01a149f56116943b7504792c1a014ce3f5a155959008c6354db19299cb6a38d4386dd3da2746829c4083d99a9db199f2452818e06b2b360abbdc4d5ef9bc9dd39669357309550eafd4511aa7ce88ed1a76cc0484ea3aaa27e07d7ea9fba81c2bdbd136a72532bf06b2adbd2716fa096521dc6b4abf196a6216fc14757f291b4462de522af8926445aa45e24ab2e0ef6eb4d1ad7229803ef6029fbd0ff216667e6702493b23b572515af89bd84ebe6c358c2e8ca9edd0332bec9e802576df544be770ed1bb8a6c7890ba01c81f07c304ed38dbf6aaab3013f92a993a6ce931b9058c5e131879af8cecd464dcda2e554722f382c0121f795bf35ce22cf98bf3e8356a10bb1d26c8e0848cdd0182ca6df258811c189f63c24a79d23d6c95833cc06379f777b03c72399141260907128058f69ef38c5688d242317f02301d14bbcb2e0ad1095fe15e450fe171a358b71d3ebd7f9ad51fa131235e8ab083aeb0682a3133cd6acfe69ffdf5db62dd0b02997597f73777909ea6de4d2e04557a2563348a1639e0bc17814c11d4dabd8f51843ef2534d2ce631f639e26dc9ad2cfe135a2a298dc20a4631e5c6a688ea625cf1ccb175c50d50028397363cff80de15923a2bae7f04ee1eab56a9aed2c9ab4e83f688a15e8b36d8331c6f83bda29face82e244b88b6f20b5784e78d264168e43914d7e3cee5459b58b923d5b9ea4e99d59178f46aaa8426f132714be6e3bd8d2a14651cea64e17256ea0165326ecd71ff82b23be721d3c22c5a7e6776e156e6e03fba9381290dec61c98f396656cefd1f6192c1273e3e1505afe5f2834fc3599a89dbc6502575f409b457cdbb073ebdc8dd59d21ef1e689e4e873a51c7124c37fa785478c266b5b4af4d90e04fe94af8fddfc7535d9ecf9c86be68bc8ae3094c487870ba43f926f782c09d5a9ca59582ebda586ab7ec2361cf47ef3174596bacfbac6ea72dc65b5e9b0ec9d9127a4e31fae8ac4df38617bf3eec2110e70f07eace457f2622bf585c4cdc66af529bb3d03c9236ec30d145d1d8ec0cda868d1aea2d37b3e22aa4ef6fbb7aee25d2662ce4c1f84fb7680209dc16e69ac933dd6345d2d5360bf08888859b0fb5a4e3e51b3d2e88b73eda5ee4eebe7a5022d52759076ecba8e3192cd04d6268517a2e3cb889fe5cb18a69aa2bc794e9ef3164184244442541581395db770f90cc81e7cdbb741d0f4eb826e4c3dd58d4134ce3ed2acb0215e76eabe55a8d35ebbb112b2f56183e3217cbf3d63de95db35ff180c101507857cf0018b61be3bf9ebe8bce6c3eb5ff39259150320f0b5870d7b7802827697ec3c405bca20f35a7a7e2f77c6f6ffe501ee945541c305b2de8b4e7b9d293e59b7a6c13c70d7085a401dc667889553b337fa91d21e4376d1d6a1a028857a407cf61d719aa93e0a96fffb897bd566e408cdfd09012df17fdcc15e36ccbf82539bfd944a09c783a434f8aa682d7153686f89dcd365ad2634df025fce23fa8cd4aa5a89e9fe247e226b5b6b63a5cdff5dbe9a384244249d2489bdb3ac590bc8049c76c99afdec36fa769c2457de64da59b5bd37bfc006604feae144f2abdb0a05cba7edde5064e1a228d6f273a39cb0d12e635d4697be80810351c632926998d6a03e76a3a5cc2ac5a724159b55e70930769a46a32e3fa1676e21ec6f38803f5d743bbae37f8af829a50c55c983b7bf4a53f1bf5a31415305dccd209ba09b8976a76b497bbbc19d0df98bed904d104cb81c552cdb9b28699f7340cce574981c5adb3a439fd0658ebba3daac4b6a81dea9fd217cc8f05ce05afe15f313cf1190369fcfb86fe566e2da2fc85fef5e71a3a20225c174836a437692f609b8d91ef0004cc77b3eff5b32eb01a56d54f7df37909ecdc84df713829bb12c2813cc777ba1313ad95aed921b99dc37a010d2bbd914242171401b1e89f869df49b794b4993887091ef6c7498eb9ffe53c9230fd8fddee571bdb843eb2cc8aced91fc5182d26bee8f18fd864c257a7886969155ef138bc6c561d3d4888a31445182bdcda0b4e72cbb0c8dd8cf712607ae90aeb1437812e68263c51cbc8cdb7e641240855646f6cb267aa1987ea2663977e324d96fc0d5ac8e808b81e9f32e82e8b069c5d25543e98462e67fce6a5995f2988cb37837c4d6e9358a2f1564343b155254decf775963a61d792104f3ad57d446ad9c61075388d630db1a86c95b9bb17da8d88b0fc5aa8e7fee55a739db7afbd71406f71a33747584e5d42d203c2a34595da7220b386bc3f63f7361d189bacb5a4e8325b846f2e43db88df12f75a3a6e6dd0550f7511b96c7b079ec2bdf013487729e81c09c163dd83a3ee7d6ebb5eb45f8cbdd139377841190003611e27f5317fedc476ebc1f62b35b376894b145b35c374dd638dae8506530a7343ff40389cf690b734c10ba98a70cf3ddbe1f4a56d95e6f61902281c4777a0326df1a4a959e4c0b82692d2c9f8fe689908ee782ac9119ce66c9d4bd16b8ed4e2e44657fdcae1eda58e9cef853c756e086454c785ce62080a95f8b7075112e39b1afb50987bd9dd0d374a6755959319e6152c08f518e506633db8e181091ece4fb56621a74b65ead941cc52878482264ef9e7de839431095dc94dde7ae629b3ecfe75de6eeeb016b81b1dd4028430bfd7911c2e8ebf85b57969fb53279e29426ab941c0ba2accdf73f8129bd32defe54b1455b4f9cb21951ae869d13ca2ddded6da7f1328b3ab3fc44d700700c5382c829f124a5009fdf66966a7269b5118c8ce0f6582b56b077e4df287af20c52172936bacdf8af031ab2aefbbca299f52b95df6dbc730389d9275d3085a43f7ccb553fff8bf7ec91efdeddee47bc458d1632bf1b077e293df6f8d1e2909a1eea8d65d86f88b6f28a7bbf8f300689f4e1901651bc5cfb18fba763f8bc361de43a3deac68d2e192bc832e417da4fdce00ae1a040d79c38727667b03709780c989c13d6d829d95acade7c3102e806598b5eb7f0df49346080b60698dd916bb72d3881a0930412634943c9d0e2eb25736da17400f12669972f9994cc6eea188b73550d1ae0073fdd794b8548f7052ba82d1124959e8cc04716b0c9007be1fb0298b001fb0d99d2259bd8d1d5f77d32d4663bd6f4a9b3bbf00f4f23052edd5d66a76d9f7dac56aa0f1223c5d8ec303401b9bcdc035515bbf27011a19c833b11ea8ac434137cbb23a7b90c55b64ae0b819b5df7d0177127edf1fdb6e373d9a0daa7f90c47ec76050baca507bdd21bcdae0ff5f81c195dc6312766b85ff0b9ffa9f3101d56dd470f6a3c4776b09042b3e0a955e4d54b9d0d7b3b777d3b54d4506df5cd694823f285a48d98c44ce8a0bc69ec575ea422b3d99b5f8d9a8d51ad1e05a10d24f4e362bc18156a146afe85911e0d85b624350580daa10d7149d5599507edc9f3fe563b1a5bb258fffc897ed02291d6049f8714221a483d7f92965bc2da3f04f8614340c74f99a3746a5a549d9996533fec1e26b70b100ad446397d4cd6b17623940067c9c97f86aa6b9a4d41fd7493b844b11c8524cbbd01b055a15ed76e0a8118d58a06558b499634013104edc1858b191cb6dfdaee27d089a8d5b50b47d48a7a6f2abb77f6eff41f491aff3b2cc0c2da5752f9bb77b42455af5acaed7431688c87c63c51225812e24fab84284945ca7b4cb90f3fa2d9d9eb83999cf7d7750b37d5445d8b4559746a1a395014c6c7309439d46968376c08526a12a95d58952ebb2b1a3f49c3074993815115be54ba0f8a0fa8316da8cfe154f5c2e76f62b063638d07e61396253bb3c7795663089be4f70bcfffa18318d4036c21ff99ac5314722125a9cfc830008fc016c15b8f2a840656d687cf5bf90c024370100f6d1f6d491d5f4deba04ca7e274ebd583b0c9b733a667013bc318d2715a3bd6f933c565664425195db983129120a85ce1a98054da01a18e77c097d99df321e22e79c1a53cf2b9d838987c452f017c02fc6f0443d415aaeabc6ce91f460d1ff06ab105b79ca0c2f2eaddb411b319b39ae68942f19ddee38564523c72da1600ca2dd58c870247fef48ad067353e9a8e1a3854cf4522a8fc314e89fc3de843ba14f70ed20f1c0a3fe0150d3f29db6d37c0b95350b14818f24c66b07c67394d80fb08ce7110ecd11f136db41e807296a9a290c44686af009a83228a1360908817e64b3071e307ea90738c3a4764bca3288aebf10af83626fbc0095c62bd513cde1b6269b41f686812ef9d3a6f640a88d48f1e952343a24e9e39eff811967d3b09f3c24ca4c70d6ec1c2b393c2145cf02a5e68cf3764ed7b673f629a3815a8ece2829be6a1e2971bc9f0281a350133f290bb7981b8adc362aac5e9436dc27fad4e53b4739398433cde7469421754ba944e1c65fe6a4969b926e7bda8df646754778a09f00b5ac627e43811ade871730c1bee8bb361a6a4b826d9e2b1a0f0de14509a610cdf4ab54d6474283d7d1c", 0x1000, 0x3, 0x0, 0x0, r2}, &(0x7f0000001180)) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, r3, 0xb06, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = gettid() mq_notify(r2, &(0x7f00000011c0)={0x0, 0x3c, 0x0, @tid=r4}) [ 536.197906] misc userio: Invalid payload size 07:00:48 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/userio\x00', 0x101000, 0x0) read(r0, 0x0, 0x0) [ 536.240166] misc userio: Invalid payload size 07:00:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0xa99ac100a5ae082d, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000240)=""/137, &(0x7f0000000040)=""/14, &(0x7f0000000300)=""/222, 0x2004}) 07:00:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x6, 0x8000) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimensat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={{}, {r3, r4/1000+30000}}, 0x100) 07:00:49 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x0, 0x101280) accept$ax25(r1, &(0x7f0000000180)={{0x3, @bcast}, [@null, @netrom, @bcast, @default, @netrom, @null, @null, @netrom]}, &(0x7f0000000200)=0x48) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0x80) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:49 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x1) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '{/^'}, {0x20, '/dev/ptmx\x00'}, {0x20, 'trusted.overlay.redirect\x00'}, {}], 0xa, "79280e0e9d74d9483d5f56a8ef1658"}, 0x44) read(r0, 0x0, 0x2d) read(r0, &(0x7f0000000000)=""/17, 0x11) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x800, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x3) [ 536.454892] misc userio: Invalid payload size [ 536.461534] misc userio: Invalid payload size 07:00:49 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x6, 0x2000) read(r1, 0x0, 0x336) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x40000002, 0x0, 0x4, 0x2, 0x2, 0x56c9, 0x5}, {0x80000000, 0xffffffffffff8001, 0x4, 0x3a, 0x81, 0x2, 0x7}]}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x1a3) [ 536.669460] misc userio: Invalid payload size [ 536.681076] misc userio: Invalid payload size 07:00:50 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x700}}, 0x2) 07:00:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x89, "1c0d210714ea04bd8e3ebdbe1b3ed8607bce6e8a3cdfc5a6cec085b31aab550eb2b59fbef68eda7d352c58dda51b9213c4b107e8150f8811f42ff9d6ac4bd315bbb08b1f1adbabb26b98f7e48a85b1d2ec842c01f185cb06440cc21524e9e4355f932b73b72e3bef787f98b2e24242d4ea6cf022cb9b562cfd137b39922015c0c68dd3035e10182626"}, &(0x7f0000000180)=0x91) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e22, @empty}}, 0x100000000, 0x80000000}, 0x90) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:50 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x101800, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000040)) read(r0, 0x0, 0x0) 07:00:50 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x42, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x200, 0x40) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000100)=0x7) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000000c0)={0x1, 0x1}, 0x3a5) read(r0, 0x0, 0x256) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0xffffffffffffffed) r2 = dup2(r0, r0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0xb83338fb943f62b9, 0x0) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x9, 0x2, 0x81}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}]}, 0x38}}, 0x10) 07:00:50 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x1, 0x0) accept4$netrom(r0, &(0x7f0000000140)={{0x3, @netrom}, [@netrom, @null, @remote, @rose, @default, @bcast, @netrom, @netrom]}, &(0x7f00000001c0)=0x48, 0x80800) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r2, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r2) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x1, 0xfffc}, 0x7, 0x8000, 0xc94d}) 07:00:50 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0xfffffffffffffffd, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) [ 537.654519] misc userio: Invalid payload size 07:00:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2a) ioprio_set$pid(0x1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x33}) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) 07:00:50 executing program 3: 07:00:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x2120c2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000400)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x40, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000180)) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0x7fffffff, 0x3ff2b95b, 0x1f, 0x0, 0x3f, 0xac, 0x5, 0xf9d3], 0x8, 0x80000001, 0x1, 0x0, 0x3, 0xb7, {0x20, 0x4, 0x2, 0x6d, 0xfffffffffffffffc, 0x4, 0x1, 0x8, 0x10000, 0x4, 0x4, 0x4, 0xb3f, 0x8, "9d7b3047211f1ff6aa5292c9b00027db5279b1cbc6cdd099b87931d73cc51bf6"}}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffc, 0x10, 0x180000000000, @buffer={0x0, 0xb3, &(0x7f0000000440)=""/179}, &(0x7f0000000500)="921accee6977eb94d18001d70039f090", &(0x7f0000000540)=""/189, 0x1ff, 0x13, 0x3, &(0x7f0000000600)}) 07:00:50 executing program 3: 07:00:50 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x6) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000400)={0x3, 0x7, 0x1, 0x7f, 0x1, 0x5}) getgroups(0x1, &(0x7f0000000180)=[0xffffffffffffffff]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x1}, [{0x2, 0x1, r3}], {0x4, 0x4}, [{0x8, 0x4, r4}, {0x8, 0x2, r5}], {0x10, 0x1}, {0x20, 0x6}}, 0x3c, 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 538.466903] misc userio: Invalid payload size 07:00:51 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x4}}, 0x2) 07:00:51 executing program 3: 07:00:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xffffffffffffffff, 0xfffffffffffffffe) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x80000) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0xffffffffffffffff, 0x3, 0xffff}, 0x0, 0x3000000, 0xc94d}) 07:00:51 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x6020, 0x4) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x9}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000380)=0x84) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:51 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) r1 = dup(r0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x9, @ipv4={[], [], @loopback}, 0x6}, {0xa, 0x4e23, 0x0, @local, 0x200}, r2, 0x8001}}, 0x48) timer_create(0x7, &(0x7f0000000080)={0x0, 0x40, 0x3, @thr={&(0x7f0000000100)="2a64d18e8ed384a040bb708410b059338a44e65c67b65bf9a887866495ee4a674d589d985d915f725ff7d0f25b164d0a654fb35f5f3721e0115dc429a5f3aea7456f6d4d2961eed80cdce5ad8cd11eaf", &(0x7f0000000180)="bb1c94b995aa319c75b7b0ff7ed1d59b345b9a6b2f1c7ccda592266cf6494bf2265725abafc5b9e6c236ded03a7e217e115bbc6906ea231f07079006da333267de159dcbf40078e043bf9e5a6be12c65104e240735b6ed8f5b"}}, &(0x7f0000000200)=0x0) timer_gettime(r3, &(0x7f0000000240)) 07:00:51 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) r1 = socket(0xa, 0x8080f, 0x80000000) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0xb00, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x5) ioctl(r0, 0x8, &(0x7f0000000080)="fe896fdf6712c6fdd238beaf47de10a7f7e3b5728cc287f5ba579640c24ebd04e8b7e4a617570df18958dc80bc2d1f96dcd6d598813134a4aad8833def1a678cc252bc985edaf59032ddf0e58de46d8683c15b44ab2d33ab27a523d4899f7de44dafb2464598a61d174522d62215e8d0ca27c027f3381f0699d9c19d0546cc5a4700500a8ff729ca2e0ebbffa7bf03df9200562d3dd3de0fed86a151031ae559bd77e76b46e67f9322587b5a3aa0c29b9f950da3d90c1edbc3c3f72b7925a04c4a74d1e4e698e93aafe91dc5dde7fd5984d1622b5df35fd43fce0e011e1f7b8d5334edfd1e87736bf39b2c62574eedede20aaae5f654") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 539.092070] misc userio: Invalid payload size 07:00:51 executing program 3: [ 539.114975] misc userio: Invalid payload size 07:00:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000327000/0x2000)=nil) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000040)={0x9, 0x8}) 07:00:51 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0xffffffffffffffff, 0x40, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000080)=[0x8, 0x8001]) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ftruncate(0xffffffffffffffff, 0x7e28be8e) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x200096dc) socket(0x0, 0x2, 0x80000) 07:00:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) ioctl$TIOCSCTTY(r1, 0x540e, 0x4) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 539.285300] misc userio: Invalid payload size [ 539.312936] misc userio: Invalid payload size 07:00:52 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 539.445512] misc userio: Invalid payload size [ 539.478917] misc userio: Invalid payload size 07:00:53 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x2}}, 0x2) 07:00:53 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x100, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001680)={'team0\x00', 0x0}) bind$xdp(r0, &(0x7f00000016c0)={0x2c, 0x2, r2, 0x11, r1}, 0x10) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x3, 0x403}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f00000000c0)=0x5) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40, 0x0) ioctl$sock_ifreq(r1, 0x8977, &(0x7f0000000080)={'bond0\x00', @ifru_map={0x7fff, 0xd8, 0x2, 0x0, 0x2, 0x4}}) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x7fff, 0xfffffffffffffffc, 0x100000001, 0x4b8a, 0x16, 0x0, 0x700000, 0x10001, 0x400, 0xcee7, 0x2, 0xffff}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x1, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7fffffff, 0x8, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:53 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0x3868e35e, &(0x7f0000000240)="2131e2fd6a3a44962c29b8d14b94e107d000ad10b5614b1f9ba9bb9cadf5221020f6df96923d61eb323d084f1870f35e9b3cac7d41c7c4bb96e24323f8c8f0e2d8f32a33e2023657572b5bcd2d86639fffaf20d96f11d78d87dfa6f850d715fcc03012cb61d10b9a5a68318f0c59dbe07ef9e3233b6bb08275d1ab90c6ed46adc42f88ea345a4440f56f6dac1f62f428af25d036708b71fa8da0f3c410") close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:53 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ftruncate(0xffffffffffffffff, 0x7e28be8e) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x200096dc) socket(0x0, 0x2, 0x80000) [ 540.510009] misc userio: Invalid payload size 07:00:53 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x200, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x4}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xfffffffffffffffd, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000140)={{0x9147b0e7b240506d, 0x2, 0x3, 0x2, 0x9}, 0xfff, 0x3, 0x1}) 07:00:53 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) sendto$rose(r2, &(0x7f0000000240)="668610182c7d465e3155df09c355e977a97881d87f0897ca81680ffae8d4266dfd5d54e6134e786371f22ea84cd250d0918a4d320bdae37918bc9c9a1d8f0aec3edfdd8e70f72e1df264e1006937af55e5e6a6b3fb92fd9115960fdef47e9f1c2d9a8001d7e9d5d05845e00b245bc2a82c6630603d49023fd1fec0ccf2de969a720067163d7b444c292d633eb341cf38e63b5b7232cd742abf44cc0bf29f047c0e26ebced510ce65b0977c7faa13aaab532a26af0d098af8d3b68098ba0c421ec0ec7298c5d18db2574553f5d3829000ddd7b5cdec0780014d2c290a27602fccd2f9bd50d6decb4599e7c12f5b84ca8abb499cb74996173c5e3f871771794bedfcc3d66e76e8cc3222defb5dc58e9c8e07afe5943a364b6a1a5de30ac67ac832c639538ba8aee7754bcd7b92aa6d534e0c84d49b7ae0e2226c2381dcde5542402e3574bd0f0ebd6002d5322aba9797dfbcccc6741dadfb882b4a60bc983349d13e7a8a9bc9a77e3db4a64140437601c5ee53239ecb4eea0430b5ca337fc9255e2e9b47b868b401c9696050167a45cdc2c0eed4c3a69e1b0cb1f94e79cee92f0b8d076d3e6f9d08b8c0ec6d84dd3d34e683de2698de8a721a854c40371b5708ccbc742106469f46ebe306f488e7d27d367d5c281e160799516eed279719cb4b81e2b5cbe000ce09b659a55884d854e6926cd1a8de2945efa2d320c76728ab5cdf877c7aae83aa6822d6b8a8b8a77dd227ce7abdb991b1537db597b0a7ed8c7be23cccde6e7f6f9190ab0fcc50b7e5dcbc5a765e23c1183a586fd86d6e57ba87ba6d98ea79467ba2a2f591ffdcd9bb94ea396a788834b8ddd48a69ff53605fb0fe65cde4f3f1640b2cde0a54231181aaf24ac05309a36072ffa6c4a129146ae3fe22423a37ed43b25cf65e5d1606cf9ab7e97ccd53934b2e1a8505fb6da585320ba29d7c44bad5bb0e7092f9b7b17e3e15f134bb68d06d2e1e4fd0cb62037c59628003dffd81b45bca5f65586493deff3433ecd45e5049de17eaa4d3e6667e6def37e472659a5b53c27fd22cdbd8e80432bd3e28fdad74f8c9fb25b04b24dcd0f4b857a07eeef8aaa0394f9f717bd257af09ae2c87b80da33cd9575062c5ea9b93134013828b1e64abc2098d832a7e8c59b9f199cb76ff71dfbcd41af3b1e7b2afb518c635018d5ed3403108c9f321454203095033105db700e27ca9705525a990ae0fd8ef7000eb00b386c7c5e2fceeb7ae4b621f2a3dce2689c2151a9ed9b4712c9d4bfbb88ad6bdcc21574b9767b8f082f7deb417d0661e7f773b3c6b480fc8ec5e39dd6150ab30efb82fb5043d64efd8691199f2b65ee758d14f91eafa4f7c8f7bcf84104eabe2c590100ed8044148b5a3a2ab4c6bb88b7f2998d72eb83d2ed07aa53c13511247783aba4d2c34402ddd0ba81904b56705bbcd4cfbc408f491392b7c979bb62db9b669aa8d8858c254d3deef7e08611230ed7987bac8849f13242ab47226fef98742cddf3835422018ef3c5f298a2470d299e9a0a64f76006f0f84d1999980b6ca851559f24898791e815df6f07af12f31f4079930754f01cdbe7db8d3de78808eb98a3550ed284d770b6bc96aa0c47da097642db5515edf2a838dbae18fbccd7a355613cdff7b960fe78bc00d14f2e346963a90ae061e2125886d70242fb9735bb07e5414f7ff32493265e76e953f24359aef0c9015b53bcabdbc5c03fdfee23cf2adf4601395ed9a3de28572e5824e51a666ba2578bc03648aefda90effec8aeeadd3f9ea7c86f26aa9ece3887416c984d74a85fd35e40e3ca5a5062eebfc3d898b485fd79021de5c5f4934d05c9d57c8a81cbad0ae2bb4258b3dc7133642c719545de1a99c8b9d200f88904bb0516e32b16b446b6a23158fd62a1f984dee7efa5c6c5798f54a8bdad37827f0e924ab1f035607dcf198d327621dbe5e82591698193781403ccff0a7bea0570e181b559e50aecfa3a89bc61b81eee5589047040a924e75833deb8981c1d5830e0009b8a4e504ac4b4b12a4b27aec0c29a72c623779e0384cf4c61252ed9a08082e7ba55d859efaa3aa190e0580b54586e813fd8bc61b4ef8d036ce9161fdc8640cc246cff07c7923ac706193788de3dfdbb3f1a73feb2518d30ac855b68a4f261561c47262519abe7b7915c84e37b2f8833725c517d29ad9d374e184cdcf442184ca71ca9e74670f8c97fac619579a49bb0ac9a0c9a8fa4b24b2a70e6fb5e28ddebefac9b2e1c0cd2d6f6894da5359c56ce4c8f1ee564e07bf7d00f64a57ba5aeebe4a2bdf1c1898283e6e2e829cf1d363c4c001a9bc3e9d6916d601166a0e446fb567ee3084e4199a2e02335305d2b6fda08f827c543213c5ba2ab9d1747787afad709294acb37cf334dc71dedb7f2b196cb209fa843935c2ed0aca91e9e3bb3caa4ba2a10cf79d4d0191fa3e7ac7ff8027573df0ea9dcd387199b4c2176f51cec21d73cea16064d6c2df076d0006b420e465ac312d5c70ed1d6eea4f896f230e002d65403acb870af5535f3cb8dd4abd4b2ccc67b3911aa1900c3c16b51116fad690c4b5d0d3e62d8020bd5a9dff240fb8999c99d485905e563bc8fe6075f27ea015300c7c00760b5b0b560c18b4e27a59ada89dbcdc4d542fda0271bddbddec3669a04c645373fbbdb9a69b4086a6572c47c5642ef3b8c9f69acd77c77d4e70bb8d681e648cdcc92d4c613eed8d349736cebc4c122e70a5274e01cbe35183086bd340edb0bf9c46eb3a00d3f10cc5661e97ccfefc45a8b78f1fbff9f6dc585fb48bc56ff2612ace96146ce850487614533254ea325d245d3db950aa8578d01ae5c5a7ecb08e4668fe8d1ba3a77fffa8d2ccbfb244249e40504490dce01e06cde9895aa0dd68978391cfe9c65ba3065f603797458887c04d1d4840e934b0fbb66298a25b52673b33bfa59cf16c3c092af85256d004c9a42cec2182ab12f20be656888a1903083210bff9b456e23051b67047451b3194d380c3b0b1e04b3eca443edc0ffa386b47b669e8184a34b66f0501fb7182d73e26f8dd427775ef721b60c8e6d649cb2e7050c4cca415121138493a6c571118afa19f602bac17217b5bf381f081ae0cef4be00dcc186515b8ce77d16dc1972bc86f1947e184589e4beb83a03a76e917846de725ada25cebda302d1fb635719e8fda31a4972ad6e6a4b82b7c4172d9de4be7426f711c567d3c66809a6841fc1ed453f093b86e802b3f1f9d2965616c65b127d32cd2137c4c1b37737ff373eeda033b749e5c61d3ba06efb09b02e8943d15c4d1ef1776bbb13441230da0898cf92f9fbccd7467b450ce0adb486c10f83069a076fbf38e92b1d722f05bf2b9b76583f54f8faa494db6053e51d3d5978fd6c89fc8d422ed7abd85fc05710b43c39b531cd7c2a60edd6b5ba13595c6a15266cd5bb7199a9d15650381c40a6570badf6b7cd69c9dcb049b048fd86e6a68d3119ebb0c9ac637c4cc03e5b5912a8e3e7a5a336bba104dd630e3a4f4d171aa25fa9fb42cc2fe8cc4ef34a307cb75ae95dcd05e6471e32579ca3a4afbaa77d49a0e7b48f77e05d618542b3beefa388d85084ef11e90713d0fa80044c253db4602bbab1b4f3a949c5f8ce0a53e34e6645db21e78a6f2eccc1a58a46aebff4553664004d1d1890b34c21c201b32f2effd2af15173028b3fb1fc34914f26f8b58d4a1b4f989e49d9181f244066eda8082e652cdeb9f0bb9cc07eb0b8950c79b6a3871ffd17871f796094e0cc64ae997b1b2007a715bd11250c223bb94c6eae1366962ad686cc8d5f977b1974769997fca6a62c1aea47e8ac45a00770f9d85c947e83c3117c3cc040e4ad44eccaf02fa385aa67f51f8ebd5ca6830396582491a124c6a9b210ad53c25a728c9ff8a6e0530471642188916f4a646c46faa57bfe91cf79c44d21233115f8378af28385580198ed49b00ab9232a2cf783b01ecddf8bd69a74442efedaa8d652b866781630257261cb2ac45320cefd3aab78645568abcf8be21ff59e549539b7e498c17a9224b6f1f61a368678b3d22b66d45b977465c9cb66e8a3e273a7863f389b11e98f3ab19c2e7f402c56a859434e43ed80531964841644b1e6c2df191c89e83c14fffd958d9a5b71a5d3814d1aabc07cffa1820f5835cc78f4c497e0bd568cdc4a0f37a06fc5ca834430f503f839245fcf05b8f4d71fcc81e64b773ef7873a6145cb064be407b8510bd7198eaab2833eaec5b7336c6307cdf3a1aad75418ffabc92fd564b019b699d34352afc5ce2dd58e7d81a56b4ecfe8a22bfc5fd96fc8cebfe16f4c9ed54123bdb0fc2a834c0acae1efc0d4aa8bf4bca57f5afef90b6975aff86dba50e4b7bfe90f287f17365d5b5997da5b7d017f479751bd83dc7f5e802fdb1741ac5c408467717a1f03e23f847bf276ceb56d3f01b48c4edc264692b345cff1fac21a57f73453b0a73e3f7d6d75c4d53d6d4739be8ab0e307e623f3721276c76716929efba4c38ee961b0f4c42b5a5363d5826c2d0aa11843694ac7036fefaead00b9b8cf04248684155ea5a3c50f8c71cbaf5e68cd2d590428489001f7c7241e11b5c9bd3d730be5ffb01c36eb0c6e9d5be11f3f707547be7f671721d819e0d73b0378b4df18bdcd030d555e49ec967b9f8690732732eaddc93a44c76d8b1437c1762917c14e71ac675a59912b446ff31fb0517df40e95a97f60070aea95756b4caf9b837a0225ddf28f539e07511d246412f55513bb699afbb73f044bac9c5bbf9e9a10b6d1b619cad714ca7ec19a8105e98d63b58d79a199f675b4ec8d8b64186577f824eeb9365fe6656092d1a68c6f164956d1ed3a135fa4a793ad9b4746f8980b9cef49be2da35e9848eabe46435936983d404a0d46ddfa826f6650115559ffc8e295ce8333aa3da66e77c5a96a13e95d9b42abbab5ccb0608f32ffb118a03aef8abf75869c527c262065012bb8346667b0801c8c287fd7ec3136e891fc27a752b512f1b2625a4fe406d35a29391d077c6d8967097b238fe9af6d719cf6416a09e4b41c36d306fd8a03cd167ffb579df80f53388d692391cbaf6c218043fac8015d550d9d405bf2aeb5c0a1c8d1de446d8f2514d979f6f23b2cbdecb5dd3e1aacd898765b2f69298cbd71dd51f79a8f774c4ca3318f8993a5c4abee1e3966471d3b14b1b7fceda4c157a4ad6235e01d221d678fdda241c95c0558f09bf77116d62265fa6c4159bd0ff12b77e6b44877df92ee9ccd8a9cf1eec813f1ffe2af99bb0fbeba5901290d8efe61dd2ec6b298f18d7ed49ab98a4ce0fc2e79b06b747bd081ff0342f8e53a2dd644183d2e5fe9e96a4ba27d6cc055ee48972c78424ac3521c841f05ede964ac179b9a4c777e93c46d662b451bad214343e6720729e2d5d670920ffb2ec9c933aeaee9f358959fc2d7120d206f1b970f81dae13491a1214b35726f2e7d194fd8a6abdabeec250a0781c29cbc0ca7631486cfa18903d546f94ca7d2e1ec874c50751944585553de9dd41b73442469bde0fa489615137db3a7388abe5fa8d9e334c1190bd12de9b7c50149ba5b276cf4afabfd1a18aee57b909c2f9d6dd031a55753567624f00a666be9ddcf95580888c14badc7c3a642e2989674a4b69861b1cc5d89be8305dc2d0d708d285be2f79eb26b8bed31473c3a81266c381afa9fefbd73cdc4f62f81cdc2b27f2916a29d9ccdcb718b5f35b66b76d8a3f9c020cb589ec906dd6fd188e30092568155d3e86bd40277acefa66737866a2bf96eff49538fcb199fdc1b033061292c5cc5b", 0x1000, 0x0, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', r3, r4) 07:00:53 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r0, r1, &(0x7f00000000c0), 0x1) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x8000042, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, 0x0, 0x0) [ 540.873104] misc userio: Invalid payload size 07:00:53 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x2, 0x2) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) mount$9p_virtio(&(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0xa, &(0x7f0000000140)={'trans=virtio,', {[{@mmap='mmap'}, {@access_any='access=any'}, {@afid={'afid', 0x3d, 0x6}}, {@nodevmap='nodevmap'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\\em1[}system{+]em1vboxnet0-ppp1\xdfem0}\''}}, {@permit_directio='permit_directio'}, {@dont_measure='dont_measure'}, {@fsname={'fsname', 0x3d, '/dev/userio\x00'}}]}}) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000240)) fadvise64(r0, 0x0, 0x200000000, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x28, &(0x7f0000000280)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={r2, 0x847b, 0x10}, 0xc) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:00:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}, 0x0, 0x800000}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000080)={0x5, 0x5}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x900, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x5, 0x1000, 0x878a}) 07:00:53 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/73, 0x49}}], 0x1, 0x0, &(0x7f0000002640)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') pwritev(r0, &(0x7f0000000100), 0x278, 0x0) [ 541.071312] misc userio: Invalid payload size [ 541.076199] audit: type=1400 audit(1545980453.760:77): avc: denied { create } for pid=18451 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=key permissive=1 07:00:54 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x3f00000000000000}}, 0x2) 07:00:54 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0xffffffffffffffe3) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x200, 0x80040) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @in={0x2, 0x4e20, @local}}}, 0x90) 07:00:54 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x410000, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x800) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000140)={{0x8000000, 0xfffffffffffffffc, 0xffff}, 0x0, 0x20000, 0x5}) semget$private(0x0, 0x0, 0x44) 07:00:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x8, 0x4) 07:00:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r1, r0, 0x0, 0x80000000) 07:00:54 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) pwrite64(r0, &(0x7f0000000180)="8ab75f2fc61568e3a905cf", 0xb, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'team0\x00', 0x1222}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x402, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r4, 0x108, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9a3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:00:54 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x3b}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) [ 542.144749] misc userio: Invalid payload size [ 542.154894] misc userio: Invalid payload size 07:00:54 executing program 5: r0 = msgget$private(0x0, 0x20) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000100)=""/228) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x100) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) connect(r1, &(0x7f0000000200)=@can={0x1d, r2}, 0x80) fsetxattr$security_smack_transmute(r1, &(0x7f00000003c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000400)='TRUE', 0x4, 0x3) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x400042, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r1, 0x0, 0x3b6335724a42e703) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, 0x0, 0x0) 07:00:55 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x1, 0x0, 0x2, 0x54, 0x5, [{0x7, 0x80000000, 0xfffffffffffffff9, 0x0, 0x0, 0x200}, {0xb9, 0x1000, 0x748ba990, 0x0, 0x0, 0x404}, {0x2, 0x5, 0xfd, 0x0, 0x0, 0x108}, {0x10000, 0x33, 0x6, 0x0, 0x0, 0x80}, {0x6, 0x7f, 0x10001, 0x0, 0x0, 0x1000}]}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x20a}, 0xfffffffffffffff3) read(r0, 0x0, 0x9f) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000240)=0x200) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x7, 0x8, 0x100000001}) 07:00:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1001, 0x70, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x4374, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) write$binfmt_aout(r0, &(0x7f0000000240)={{0x0, 0x2, 0x800, 0x138, 0x19a, 0x7fffffff, 0x6}, "5167459cc773657e028acdb7a605fad9df933584fa7bd960e656571846d22ba20b2bb06c00f7b33e2bf5caf828ee1676a35ef9663a24f68c5053ec6a2f93c3a4fbe44da0b5086e3c2502c6f45baf20d00ac8edb8e528d7cef6624da0559d8c98a5e811b48e43c5a3555fa57fc6112f10d1cb9dbc5458a67f53545c890ac47afdf6069e812cd7be1d24692bec007deb01f9a97fa0ed0398244d54f10b171e221759caf455a328e0cab3559af9520d3234c4e7ba17584d5ed7ce7b6cae3a21a4", [[], [], [], []]}, 0x4df) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x2, 0x4) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) accept(r0, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 542.451605] misc userio: Invalid payload size 07:00:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002800)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000002840)={0xffffffffffff0813, 0x7, 0x8000}, 0x4) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 543.196195] misc userio: Invalid payload size 07:00:56 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x700000000000000}}, 0x2) 07:00:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0x9, 0x8) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:56 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:devlog_t:s0\x00', 0x1e, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x800, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) 07:00:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:56 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@loopback, @loopback, @empty, 0x3, 0x0, 0x0, 0x800000000113}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 07:00:56 executing program 5: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) 07:00:56 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x400000000042, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffefb, &(0x7f00000004c0)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000580)=[@in={0x2, 0x0, @remote}], 0x10) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='nv\x00', 0x3) sendto$inet6(r2, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000002000000, 0x0, 0x801000cf00000000, 0x0, 0x0, 0x0, 0x0, 0xd9050000, 0x0, 0x0, 0x1200000000000000]}}, 0x1c) syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x0, 0x0) r4 = gettid() openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000340)=""/243, &(0x7f00000001c0)=0xf3) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r4, 0x401104000000016) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="cc9af7e45143c00c1354067e5f1bac092c904d1bd97e702b0f9c78becae8c68faa9058bef20308e5adba0d759c081a2559d6d3d6ae5f3af2a0c51a6c9fa6ec5b441ff2cf6079745e304bfcce06abc561b32f40e50dc95a994a71298cd1782b5da3b344f648cfd4d8746cea134dae60b8305a00563ab0e96f5cf538d523a125f9c360c53daf1b8dd68b4a5dab7f878a0530bcf6b966344a53a3aaea66a85f636551be5db760e638edc85fdb83f5bfce1fa3c348377be8292cd47cd29c08ae23a5dafc95126e995ca90c40e13540b66e610736e6c5d8559dd2771479967705c5f96ea5f45f150674d6eda3bbce0b82", 0xee, 0xfffffffffffffffa) keyctl$read(0xb, r5, &(0x7f0000000200)=""/11, 0xb) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000002c0)) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x1ff, 0x80400) ioctl$VIDIOC_OVERLAY(r6, 0x4004560e, &(0x7f0000000280)=0x1) [ 543.552745] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 543.640661] misc userio: Invalid payload size 07:00:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3, 0x4000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000040)={0x5, 0xc, [0x20, 0x8000, 0x80000000]}) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x3, 0x0) [ 543.821140] misc userio: Invalid payload size 07:00:56 executing program 5: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)) unshare(0x40000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@local, @multicast2, @dev}, 0xfffffffffffffe6d) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) [ 543.984336] IPVS: ftp: loaded support on port[0] = 21 07:00:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'hwsim0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:56 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x3e8, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) munlockall() r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x121202) connect$netrom(r1, &(0x7f0000000100)={{0x3, @null, 0x6}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) [ 544.243494] IPVS: ftp: loaded support on port[0] = 21 07:00:57 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x800000000000000}}, 0x2) 07:00:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9, 0x80) getsockname$inet(r1, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0xffff, 0x6, 0xa9a, 0x3f, 0x14, 0x2, 0x1fffe0000, 0x100, 0x9, 0x3, 0xff, 0x3}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x3, 0x0, 0xffff, 0x1}}) 07:00:57 executing program 5: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)) unshare(0x40000000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@local, @multicast2, @dev}, 0xfffffffffffffe6d) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) 07:00:57 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x9, 0x500) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000108}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x90, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x15a}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}]}]}, 0x90}}, 0x1) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) r3 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x410000) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000200)={0xa0000, 0x0, [0xe6, 0xffffffff, 0x3, 0x7, 0xd91d, 0x4, 0x80000000, 0x100]}) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000001c0)={0x5, 0x1, 0xfb, 0x100, 0x12, 0x6, 0x739d, 0x80000001, 0xf90, 0xdab, 0x7ff, 0x6}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000001600)={0x0, 0x1, 0x30, 0x3, 0x5}, &(0x7f0000001640)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001680)={r4, 0x800, 0x7}, &(0x7f00000016c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000480)={0x0, 0xb1}, &(0x7f00000004c0)=0x8) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000580)='trusted.overlay.upper\x00', &(0x7f00000005c0)={0x0, 0xfb, 0x1015, 0x2, 0x3ff, "a3d96593e26af02fe2f4e3a025511b83", "8de2f7a3a538003149476d700c6038bc9e9283e069cf5668b98bf7978b89f949ca012c3ca754d7499aea7f9ea83a3da45fdd1cc7d3da628ac124d5cb27c6a13c0df6d02de1d991038c47689d767c461405170fe6e808f70903ff62504a672e2d8211ecb6576b1d51160dee382b9aa789403d8826d96a0d45baba70c90f3899e374cded0e86a942d1ea65c3364078a9682efd4070539c93429a3dd1453cd0da1ac2fe8e4c04dd6b9de6383cfabbb18311826dc060a8b1e8de28ee7660ad4dba9e3d0688bb949d7ccf11877b93fc84bbda35cc48c58cd056cd9cc7da62ffc83661efd8ce56d10ede66268d850bedff33d0ed1b3eb2993f81a61dcefdcbc2fc6fe73c4cace39af8b3a0000130610b0a8c3915e49c1147f367b3ee76a0f3857068ebbd492c03bc4e3f86d016d0cdf1a4f3d7a0dc29b3c6468fd19663cf076824a2dca6a1cc57f396d2a6db3767eccebcfd43fa4f0d78d5c1d7ac50f83fe52c67262ba6659fdf0df29c93d3c8dcafc47a047d96828ee270f2ab6481719d12d16b45c69047f87320c6cca21e54ccd3f9216fc8fa0083a394e490788f0b36f4d895d9bfdaacf6e9edc82792e9c8c2f8c490ca3a7848fd1869444230a1bb259873ece69d2127321eaa2c591f3e0ee147ff9910283a2397dc13e73d7d3ea898ea0568636b2da29faac1f35d0a9364f3d3575ee259db9cddf5c92cbe29da9755d71653d5424a5cb80abdc4930c24050398365d0c545fd9b4c0380a2efc4fa4312b12f951a2c5869b85f001a87a0eb07283848b824bed82b5b71e26d999bb1028c74031505388305042c9768755bde3a013a50cfd0770890cbd86d58bb5470189836f05178b25f2f2b3b0d6f221f4be694b456524c4be294609af645b561fca606839bdc4ce7fc2bf3536473b454e010f454c0f0fa5a4ad0fcb4d82518ec7f320f3999b5e7cbecb2e647d25e71dc0f8a8ad711fa9dfd7ea93def2e5d22a924c190c60f2be4c4b64fe55848796593d8ff350321b7627daa94d0b89b87113d9afd8f07f997d85f627311e8656b928e201ded862aed091696d13f2465535f84765aa30a33178a45869e9e1d335caa56217921188996557af0bbd60bba6a2bbfa9a65b0e6f1fb495ae795485eb4d94084cb382eb0cdd3876e0e4b275647cf4541e913724cbbed7223bbd886c5fd8d0026401b16c773013e6fc6e3ea824a1da524baae621014f43a541c6ca6b63a768cb77862948efb3f2c70c1033aa61889e19895b2eebbae50e20eea2d0257eeea2b6cef98520d2d9564aba976857cc619d2a91e09786aefecb5477105026220292cc62edfeeb097de59cbcc43032555d23816ffddd514974b504576caa0d08f79a6f36ffbde87656f54cfd9476f472feb18cadba2c5bb78e2076fd31c6ed2565a8f67a682d112ee61788579cbc50217ce493318f5b76d3b6eab3d5f5700bb6de81ec0095e6ec06e6cf1ed5582532615656b6087af06fe6f37867fe22a688c14c5e0cadbe1654af719366cf1c4a8309b3217e81cb53d96133901290db80d1ab35263aa35bd6ad12f14c80f01b1a1b3832667987c18326a9cb64b9a27d1a0ae165741aa2753e5bf1c69531408dda5b0e437c530e9a4758edf9e04b30b47f43b4f9298920b1937793efa3d64c3a14b293187a53c95b7d9835d811e94fbec3ffc041cd6b54931ae8568f65d3f532e8cd8edd6712e4fb24ef4c722044bbd80f4da1876c6f77f4a233a395b097a8b7f79042be5987153d7359c4b34ef178e0f7eb783753a19da20efd4cb1e86b47f9f6af123e4218288991b6c706b1f43b3de48eae9348f41dcc566d7171a4595d03d49e68e987b6ada16be607fbbb856ecaa06dbbc6ea3fb53d8e22175961230cdeeb320fe289e8fa2cc61fec87c105d9e104affe9c41418c7f417ec67a4a26f3c00fe6250ab99c85466609c4ad46c31f8e384d77d28887e2a8ea0cccff3665757878c4650d251dc10d839d6bb65c33aa9513b5a8a25bb906817544362660c12fe339d3c0a94d481a67d65f266b01ef93c4a6649b632aee658ac7e4d849bf0e577e66e8a1aa9409164ac41c379a24a7aabf9e5c64e798ee991e3404a33f493c54ff7260c63fa0e5ca96e06d28a1b69f4a78ed767ef5752880aa5e46331afdf988d148b44d1551f5922538adec18165f8b982018b1a50aa5062764ab34bc936ec87b7049dbd214a8e1eb1dafd226860bc5f710ed85f348bea66b89d23d0d38a929d5cf136c7d5387e9d18945b047c05e54d3bc1097a8e90451274de506040028a28631261ce32f72d0e7f62525a13e201c63dbc6c4b6f6ca326c227cf083bc1c2b44c09993ce989102e318c100356724881c014a10c319c2dbd752230f0f2d2b5fe5281d78ca10dd845a6ae677c63901acb0c4e508e6e3e0a3e104e94072fc01faadefeea6f1eca2bfe8a161a03d03617b6189485e15b5367e44a6c5e2cccb7535850aacafd14a9778d067220e837a79f0c4333769efb8c1975e0e845ccc87f2d95f3b709ef9493e73fe32842e44f44db84cd118f60a70b688ad1d8f2d41ec0b927455aee618c7ff903b06a11d64f15f36c7b911c148419cad941eb13592ce2eb3cd87639bef7a5dfc29c54e857bfea19a11c1375ac01ee139f8ced5f798b318584b82ce5ee9c1118de2ee04fbb8084b668704efc965d74d4f37456796da0a8b33f10234a04c6da47b9e522a68ac091ae6cbb27c607dfe4dce8105301a61586403734e013caabc03ffa1f74ebad014f71c648516b9ca0bad5cc5d92160c1ed2cc1aca6e9efc273692709fad98687461b9022fb57b13f89df5b99f56e60e69278e9f425fe5573337633f1e2128c3f00661a493aa34efb8a5128ee149d487f44aa6d2aa7f3e0a737d3297dbd34ef6eac2bc78fc3c6e3b9d7beb94bd30added534bbc1f3572b39a1397015cc9551951f986bb30c0ca968f07510dd44fa9d06691464eb9388f51723e0c238df14762fc3208a79144065901080b085a60086983757782d2d60e4cacb5a11662a6baee1df83eb078643473699ed738e28e12b19f16c0b6d6c0e0c1ee1eb9285cd7279e1cd5c07244de9837f90b040ff5708f37a14532f0a5ef1ef9b405e82f57c6c577dacfbd37bf83e5ba15af0d2b3d96fd42caf8b78d5d8aa1f9e93cdc8542fafed29ef20980ad636b90d68cb5d55976eb6d42a3615050cc8f2659c08cb2645af5a3c81b2a94eb4e46b16f461f5d9624f121a96a605b3266b36d6fd90ebb83c49c637170f16b221fb0dac497dbc43e66fda7eb6096d9b76e7ac8c06c87975aad8337d15edead4567839878d081eba822ac21e4d72f1bc5dd609bd126703175065e2d5ad0921a81e0926f1a43c56a32025e03eaff1b67d311d2ffa24f8bf93ade9e4d5dc12dc453fbdc18cd634e5e23e1c3fcca199aa306175a5d4b593f023f93ab77b2ee5d987ff89229037abc4d471e1cca5c4b999e09b87a77b257072dd544060b2642ef44b1dd39ef18a53fd0fe2dce5e2ae317f8ba8de2df7b272cf0094282a54b065f3e823d4407c1268c13daaa91d8dd1a260a82d213b80e7b08442773df97766d9a3d02dd2d0d24979f0dc79475670c3c1e9de2ec8ae17d7335b154e4efc136a076c4d049207d791d25d484a5356e50ae429e021bff735e3dced5cf17fd84fdf6f0c9c51f2faa42afb8219cc91e69da5a38d2d333bcf6dbef1483ddcaaeeb224ae17846692c6c26224f6e56124ecd72053dbcc275d149a6ed6d432776f1bca016c69b2ba9f58cc760f8c7cc35bc7ba0a98d3cf9d6af662c54649b17890b25f650d4cb63d0add954ac571351e9740219093d06c0ff5a04571f9e4a4e9e7118fc64f33ad210118b8fbd5f519dddad8980add5b22ac029e694c9bb9277a90bdc565993905cfef14c7e52601f8e2bf411cc1bcd35ff730f32268a5ed8fb0238bebead9c7ae92b1a0cc3028afdc4b6ab70eca95e301c21d6e1130cb6e6d48d1c4026b963ce21c8a690907aae63484227aac9ee2dc45f824319ba55a268cf8387c4506a2ee0017dbcc6000403184cba7530385f5751865435797acf522c7c827ce68504ef241129f51c3ceb4caab8ceec5855929613ef09d68c3524ddc332f275c04e63706fcc735095e172a1abaa252edd1d46e07e099662c5f95ef853755f7d9dca7f46c2947d7f1846be400ccdc3aae00d256c9aa8d46c8effd4ddcc19a016dee2ab13bef7636e64482c89d04c9c926c0807ccc64ca50fb3cb0ba68a303c2b0b5aae6239adf6e8e749e317ef844ba5d5e5e10ca9a7a74c3c95ad649fb329a3b70019a44d3e91ac02acd2d7a5e717cc94fa583ba6235392cc63da305041dac1d1c3cbee101d5600ef8652edb51492eb37334eb22e5c04a811c7bd6ab7b5daf772b1291cb001a38a143036697d03615c54ee7664b1c21535bb4108582a9c2c41eb9dc29c6a3eb3615a1109cd29c0e1f9791293a2c2109c0b629f72ac918f989012f8cc67766d1f875fa95b0962786850d66e8101827bcbe6aec3b04870b397aa1cd41e10a59d3940a565a170952c93b957e803522a0651744b075b421dd76caedd3aeeadb303c53082b14f3323ee687d88e42067e634c8ad0551b57fa1474e494272cea2e8703231d714c3d372cfeca7cba4d7eb6c005d6d154bae8e3f688f719c36caac607a5580a0d8fcc0b679373bbcb04d10753c9895f3224b2d16346820b8f9ed830db634ef2289b32bde3def64428fa97e18e0374ca5a941f5655e107f3190d6df1f1d4d41166427dcf8d3b9fcb38e8e6f1c2310d5b09e9f1f548f4c101b028af14decec2208cdcc062cd147ad2e84fbf2b88c05a47466d7f0a1a6dd3220328661d49ab73c9bed3de5e4e3b74369f11690b6f8b02931a54bb3d8e5f02cb1309d7112f03891f6b2c6d8952b28c7d27c2b6fa709c2a2bb74c7ddfd27a97a4e5cd7277343fb6db1265405fadcb3b4f46fd1028cccea5165b79f1266265428bbfc54803459855e9e78036119c6661b6699534cbc8ed3082b361d2758c24d8a724afbaa8fe97f75a3c38bbb4c03137f7eb1a3555544e6d48075b6c8da6680062e67c40c17d8aafcee2fac1b69a2d6c438c0b6b3cfb2c5f8aa3e204d6c0a58eabee0f1d32c0fc92e8688c12179b0f3f665229d8086c66989e6c3c8c7902277610cdd22cbadadcf1372936635067c4bd11a634e2124a17fa895d30e2c47f7932970ea731c100e9ce53ac7548d05449214756ee4a4bdd932d9045947e59bcfdb2a04931dc6a25a82c469781eb8c73a42551b37a55f433835e3d30f0af164c16d0465950895ae6a6b2cc3c541e19eef11129ce20fa9480f5f5dfd23c2f585937cc6adc0c7577fac4439fac0b0f18ace773a974d0dd70bf04034224ec07414b17072ff74aa08d9e5cf886ddca6a243fc8b9572759d15a0d15dca7d0f059992a8a1e0aa6d5f56592a856985cfa8eaa742d418fa4ecfba30d085b04e939f4d62b7fc19370773af3401f49d1d7e01a31d58b2249f96cc5dd3797cde6a3517009a0932802d2fdf0e0aec470a62d3848f40c75e241149eda8083643c235bdb08c796e9d04caf7f65be76980923258feec5a375bd5a91a688bfc575b329e7cbcb9db25b3c3a55c4e03c20b2a593d3c3640b945bc9eb892f239e9b320336308877348035a6d579628f33c2f5a3eb19f0527d2bc6e8b995197b111a40eef939bb5e3987c2131551353d443ff4bfb3b3b09b7d94ce6d6c7c4618e402fc585ef367499d77afb386b24ce10d7348236e6f917659f4d8952ff2ae44102ac887afd25aaa3d9ed66c9f249ad0"}, 0x1015, 0x2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000500)={r5, 0x1, "c4"}, &(0x7f0000000540)=0x9) r6 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x3, 0x200000) ioctl$DRM_IOCTL_FREE_BUFS(r6, 0x4010641a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[0x5, 0x5, 0x7fff, 0xc0e]}) [ 544.842883] IPVS: ftp: loaded support on port[0] = 21 07:00:59 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x400000000042, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffefb, &(0x7f00000004c0)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000580)=[@in={0x2, 0x0, @remote}], 0x10) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='nv\x00', 0x3) sendto$inet6(r2, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000002000000, 0x0, 0x801000cf00000000, 0x0, 0x0, 0x0, 0x0, 0xd9050000, 0x0, 0x0, 0x1200000000000000]}}, 0x1c) syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x0, 0x0) r4 = gettid() openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000340)=""/243, &(0x7f00000001c0)=0xf3) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r4, 0x401104000000016) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="cc9af7e45143c00c1354067e5f1bac092c904d1bd97e702b0f9c78becae8c68faa9058bef20308e5adba0d759c081a2559d6d3d6ae5f3af2a0c51a6c9fa6ec5b441ff2cf6079745e304bfcce06abc561b32f40e50dc95a994a71298cd1782b5da3b344f648cfd4d8746cea134dae60b8305a00563ab0e96f5cf538d523a125f9c360c53daf1b8dd68b4a5dab7f878a0530bcf6b966344a53a3aaea66a85f636551be5db760e638edc85fdb83f5bfce1fa3c348377be8292cd47cd29c08ae23a5dafc95126e995ca90c40e13540b66e610736e6c5d8559dd2771479967705c5f96ea5f45f150674d6eda3bbce0b82", 0xee, 0xfffffffffffffffa) keyctl$read(0xb, r5, &(0x7f0000000200)=""/11, 0xb) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000002c0)) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x1ff, 0x80400) ioctl$VIDIOC_OVERLAY(r6, 0x4004560e, &(0x7f0000000280)=0x1) 07:00:59 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0x8000, 0x4, 0x3, 0x0, 0x0, [{r0, 0x0, 0x1}, {r0, 0x0, 0x5}, {r2, 0x0, 0x2}]}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast2, @in6=@dev}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xfd07) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x3, 0x0) 07:00:59 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x400000, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x2a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x10) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0x6000, 0xd000, 0x2, 0x1, 0x3}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:59 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x2000000000000023, 0x0, &(0x7f00000000c0)={0x23c7}, 0xfffffffffffffe4d) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100)=0x21, 0x4) 07:00:59 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x5}}, 0x2) 07:00:59 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) [ 546.540746] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 546.598706] misc userio: Invalid payload size 07:00:59 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x410000, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x800) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000140)={{0x8000000, 0xfffffffffffffffc, 0xffff}, 0x0, 0x20000, 0x5}) semget$private(0x0, 0x0, 0x44) 07:00:59 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000200000/0x4000)=nil, 0x4000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x0, 0x8, 0x3, {}, 0x1, 0x5}) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000140)={0x2, 0x9, 0x3, 0x5, 0x7ec, 0x7}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x0, {0x300000000000000, 0x2, "d0fdd94ef065676d0c902e52ff0d01623116070457d8e25ff650305f9ef3fde7c406cb42554054d50f30bd7f164d62efe23a803a5b812dbc74fed24e30b958faba02fd977d97cfefced713304f685d6ca22af46316e5fafd828604b2028570400faf9f0d2e90e095d289dd28802a8a7c20ec97a542045cae800293544f80980c096e7f87294233d2d59c0cc3ac7aca82678b90761da206e0d3c6f36e86aa97a709bb67a04a1d76081b747c04f9187c806499637aa16883a501cea5f7779eb860fe147661ad8e1564498ca02334e187435cc7d772c27dd5cc3ffbb9317808209cdd8b73af0a2c4f6b380ee36ec3dc525471e590bccfbd826dd9cc910bbd3670d2", 0xd8, 0x69, 0x8000, 0x8000, 0x40, 0x0, 0x1f, 0x1}, r1}}, 0x128) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x90000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r2, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000140)={{0xffffffffffffffff, 0x3, 0xffff, 0x101}}) 07:00:59 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0xc1) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000240)={0x7fffffff, 0xba, "39acdbb2f64b81a3e7653e4e3e8cf33f800be0417a91cad1271152f47dea82a86397e0543332308f280f761f05af604e65e9bd7d5b1f3dc5a78c310ce48ed11f37042c9cfc7eb5812300b038b26bace0883f3f888a93b4e126130e2540fdb80b014c76563914a1a88a59c96e31ba395f616385138dc5e9e29e6c85ba6c033413e6a1a7c32f7a5341c25c37c9b480805a7cb13503bd8d3243a3c420035a8915dcf48b3e78e7769bf2e98d83ce9297aa0e935d1ba76f1841d0cd26"}) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r2, 0xffffffffffffffbd, &(0x7f00000000c0)) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) close(r2) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:00:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0x8, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:00:59 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) sendto$rose(r2, &(0x7f0000000240)="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", 0x1000, 0x0, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', r3, r4) 07:01:00 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0x3868e35e, &(0x7f0000000240)="2131e2fd6a3a44962c29b8d14b94e107d000ad10b5614b1f9ba9bb9cadf5221020f6df96923d61eb323d084f1870f35e9b3cac7d41c7c4bb96e24323f8c8f0e2d8f32a33e2023657572b5bcd2d86639fffaf20d96f11d78d87dfa6f850d715fcc03012cb61d10b9a5a68318f0c59dbe07ef9e3233b6bb08275d1ab90c6ed46adc42f88ea345a4440f56f6dac1f62f428af25d036708b71fa8da0f3c410") close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsuid(0x0) mq_notify(0xffffffffffffffff, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000001780)=0x2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vhci\x00', 0x200, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB]) r4 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000300)={0x8, 0x7, 0xfffffffffffffffc}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)=0x80000002) write$P9_ROPEN(r4, &(0x7f0000001600)={0x18, 0x71, 0x1, {{0x81, 0x4, 0x4}, 0x8f4f}}, 0x18) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r6, 0xb09, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xd, 0x9, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x6, 0x3, 0x9}) r1 = dup(r0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000000)="d66c9208d88c22364b80683e5dfe4a2ee2dc16ba0fed0d3e84700cbfaf196464acb3d6b79ee7ad10e2344ee04b458acfc7dc366031eaa2dd15d30d1806f833959a877892fbcee9093deb80e26573ff868c3ce03f24816e18e516664b1c347b20b134769340adaa0851ba1761ab9108cd8a5a802f951c55de16f43920e769af09") close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000140)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffff9c, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040)={0xffffffffffffffff}, 0x2, {0xa, 0x4e21, 0x3, @mcast2, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) recvfrom$llc(r2, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:00 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x3}}, 0x2) 07:01:00 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) r1 = accept(r0, &(0x7f0000000100)=@sco, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={r2, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x8, 0x679, 0x6, 0x9, 0x5, 0x73e, 0x2, 0xffff, 0xffffffff, 0xff, 0xfff, 0x100000001, 0x8001, 0x1, 0x5]}, &(0x7f0000000300)=0x100) 07:01:00 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x5}}, 0x2) 07:01:00 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x13, &(0x7f0000000000)='\'nodevmd5sum{{ppp0\x00', 0xffffffffffffffff}, 0x30) r2 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r3, 0xffffffffffffffbd, &(0x7f00000000c0)) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) ioctl$FICLONE(r2, 0x40049409, r1) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x4b, 0x1, &(0x7f0000000180)=[{&(0x7f0000000240)="62bcf9d212ea30b8e3b7f55f80f7b398df7c315206ff45a0f18481842e52581b3c9dae3738e699ea16e7ac0657f4cee948fe0a85f10ca53d7524b93389d496ecfc70cf6cba901b0714599a1ebd825499df7c7e4061ade4f6083a4b5cc14ca9d47bacc7ea3df2762fdfe8f1575a941bc65a9c963c191a909e3e8ada21158abbad6b6942fcd2f39804a10c725cf7839865995eb7de1839409eabdef72cc403d7a7b8a46d1941f4ccee7a9fca24d9797e4a15a4e38e975292c3357d02c96347c9585a1755371bd7f828ad98400619b3d7c7dc9742c67bbe8801eebbad612d38d7aee6b46c2c3b83edad910b20", 0xeb, 0xffffffffffffb3c8}], 0x21000, &(0x7f00000004c0)={[{@check_relaxed='check=relaxed'}], [{@euid_gt={'euid>', r4}}, {@euid_lt={'euid<', r5}}, {@fsmagic={'fsmagic'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) close(r3) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$int_out(r1, 0x5460, &(0x7f0000000540)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x6, 0x3, 0x9}) r1 = dup(r0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000000)="d66c9208d88c22364b80683e5dfe4a2ee2dc16ba0fed0d3e84700cbfaf196464acb3d6b79ee7ad10e2344ee04b458acfc7dc366031eaa2dd15d30d1806f833959a877892fbcee9093deb80e26573ff868c3ce03f24816e18e516664b1c347b20b134769340adaa0851ba1761ab9108cd8a5a802f951c55de16f43920e769af09") close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000140)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) semget(0x3, 0x3, 0x8) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000000)={0x0, @motion_det}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsuid(0x0) mq_notify(0xffffffffffffffff, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000001780)=0x2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vhci\x00', 0x200, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB]) r4 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000300)={0x8, 0x7, 0xfffffffffffffffc}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)=0x80000002) write$P9_ROPEN(r4, &(0x7f0000001600)={0x18, 0x71, 0x1, {{0x81, 0x4, 0x4}, 0x8f4f}}, 0x18) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r6, 0xb09, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xd, 0x9, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:01 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) socket$packet(0x11, 0x2, 0x300) 07:01:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) r1 = syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x3f}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r2, @in={{0x2, 0x4e21, @broadcast}}, 0x2}, &(0x7f0000000140)=0x90) 07:01:02 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x300000000000000}}, 0x2) 07:01:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400000, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000240)={0x0, @ctrl={0x0, 0x0, @value64}}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x600000) r1 = accept$nfc_llcp(r0, &(0x7f0000000040), &(0x7f0000000140)=0x60) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x9, 0x40) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000280)) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000240)={0x1, 0x0, {0xd, 0x27, 0x12, 0x1a, 0xb, 0x8000000000, 0x2, 0x48, 0x1}}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r2, 0x4, &(0x7f0000000440)="6e6267f2ebae335c8ed1f3c6691e5fc59bfa4bdf03d368a9aa4c66d34ae612d45e55939bfc976d5220cae9749852ee8a11d4c459e8800161feac004072cd71f1232e6613431083330e3db8016130e2b59ab5edf8d876f6d76af0f9c255b8036a0b79b895395fe5619ff9ca8293a4148de006e103df257910e31b8402e478a82c09a8de2f1ec5342c766fc185ef26f2dd9967e0fe59665c8faa2c651bb1adfd32930f859572f74db248371770b861cb6d67b6719abf9682769ddc51a2d12059b571109ba8ed6ae8a1d88ba2fab3fde8c29d20f5907861a6c1f0c3def8000000000000") recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x20080, 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000002c0)={0x2004}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000380)={0x0, @local, @dev}, &(0x7f00000003c0)=0xc) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)={r4, 0xe6c93bb6072ccaec, r3}) 07:01:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x40) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) 07:01:02 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) socket$inet6(0xa, 0x4, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:01:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:02 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x3, 0xeb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:03 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x200000) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) connect$l2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x1, 0x2, {0xa, 0x4e21, 0x1ff, @loopback, 0x21a478aa0000000}}}, 0x3a) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r3, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r2) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x40) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) 07:01:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x4, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, r2) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:03 executing program 2: r0 = geteuid() r1 = getgid() fstat(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000400)=[0xee00, 0x0, 0xee00, 0x0, r2, 0xffffffffffffffff, r1, 0xee00, 0xee01]) lchown(&(0x7f0000000180)='./file0\x00', r0, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x400) getsockname$unix(r5, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e) ioctl(r4, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x8) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) bind$alg(r5, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000240)) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x410000, 0x10) 07:01:04 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x4000000000000, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x2000, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000100)=0xfff) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:01:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) time(&(0x7f0000000000)) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x14) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x100, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xe2ae}, 0x0, 0x400, 0x100000000c94d}) 07:01:04 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x4000000}}, 0x2) 07:01:04 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) dup3(r0, r0, 0x80000) 07:01:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'btrfs.', '/dev/dri/card#\x00'}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(0xffffffffffffffff, 0xffffffffffffffbd, &(0x7f00000000c0)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0xffffffff00000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, [0x3, 0x2, 0x3, 0x7b1a, 0x5, 0xfff, 0x97d, 0xa1, 0x80, 0x6, 0xd5, 0xf1, 0x363, 0xd67, 0x7]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x1ff, 0x4, 0x62, 0xf2ab, r1}, 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r1, r2, 0x2d, &(0x7f0000000040)={0x28, 0x6, 0x8001}) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r3, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000240)={{0x0, 0x2, 0x6, 0x3, 0x6}, 0x9, 0x200, 'id1\x00', 'timer1\x00', 0x0, 0x3f, 0x0, 0x20, 0x8000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:05 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x1000}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffff9c, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0)={0xffffffffffffffff}, 0x1, 0xffffffffffffffff, 0x0, 0x1, @ib={0x1b, 0x1, 0x10001, {"893e026e260483f9d5f4948c540e7b11"}, 0x5, 0x2, 0x4}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:01:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f0000000040)) close(r0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={r2, 0x4, 0x3, 0x5}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xc90, 0x0, 0x8007, 0x3, 0x1f, 0x1ff, 0x42fd, 0x9, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r3, 0x4) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200, 0x1) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000040)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xd6, 0x10000) 07:01:05 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000340)={&(0x7f000029e000/0x1000)=nil, 0x1000}) ioctl(r2, 0x0, &(0x7f0000000240)) close(r2) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) linkat(r2, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x1000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x3, 0x100, 0x8, 0x2, 0x800}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0xba, "92a5e24fea9df87854d7b5e87bfcbff83949625e57ecf40f44225c67d5d1e0d8adaa588e6f7fd372c2e4727b686d795d28b7b38cfb40c98a2aad7502a3cd62b4948bdebe9f0203b9fdfeba298a53756c754c99760ac431ca8bd669d1366155c44f9d45c9e35901a7fead75915feb5aed1675b9f9ae20308f986f813cd1231338319abc21cb8ef7d44efc3d366694ef17ae8a6884cc1376d3cfb44bad47133cc4981e9f29c17df9a254212e4acb00ebebf39f1b5457c68608dd6b"}, &(0x7f0000000380)=0xc2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000400)={r3, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000440)=0x10) 07:01:05 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x3f00}}, 0x2) 07:01:05 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) mbind(&(0x7f00002e7000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000240)=0x3d84, 0x81, 0x7) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0x3, 0x1, 0x1, 0x95, 0x5}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x3, 0x3, 0x40, 0x3}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x5, 0xc22, 0x0, 0x7137, 0x0, 0x8001, 0x3, 0x5, 0x30ca4fab, 0x7fffffff, 0x6, 0x20}) 07:01:05 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1, 0xfffffffffffffffc}, 0x0, 0x8}) 07:01:05 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x480048) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x48c0, 0x0) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) 07:01:05 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl(r0, 0xffffffffdfffffbd, &(0x7f00000000c0)) gettid() r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x4, 0x8000) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000180), &(0x7f0000000240)=0x4) close(r1) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x80000001, {0x80, 0x9, 0x8, 0x5, 0x100, 0x6}, 0xfffffffffffffffd, 0x5ca2}, 0xe) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0xfffffffffffffffc, 0xc94d}) 07:01:05 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:06 executing program 1: openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/member\x00', 0x2, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) flistxattr(r0, &(0x7f0000000100)=""/164, 0xa4) 07:01:06 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x2f, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:01:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f000004d000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x19, 0xf, 0x9, &(0x7f0000000000)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0x0, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:07 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000240)="e58a3d43ca5f01eece25bc964d9b47b957a01ffb589cbfac084c1eccfce0bdba8cb6ae1d06f8042aaa34b838b08d808b8459f5bf402411a0b5d2", 0x3a, 0xfffffffffffffffd) keyctl$assume_authority(0x10, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000280)='syz1\x00') ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) 07:01:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00005450, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) recvfrom$llc(r1, &(0x7f0000000240)=""/149, 0x95, 0x100, &(0x7f0000000080)={0x1a, 0x207, 0x2, 0x80, 0x0, 0x2d}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040), 0x4) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:07 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x600000000000000}}, 0x2) 07:01:07 executing program 1: openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x5027f, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000080)={0x80, 0x0, 0x7, [{0x2, 0x5, 0x4, 0x5, '@.--'}, {0x2, 0x401, 0xc, 0x0, '/dev/userio\x00'}, {0x4, 0x1f, 0x9, 0x0, '/dev/vcs\x00'}]}, 0x80) sendmsg$kcm(r0, &(0x7f0000002300)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)="f935d052aabd3ca3a4304a58e0c0421694ef6b2132d9a3e4c7b0e86dd574cd2ef3023fd2945d6274563f5a84ea109bde993d981e8a61180f07b255b3df09d595ef42a096d6cfe39a194f73f426e21187cf06c09502e6cef7b82c8b6860219e763143f750cbc97649a0cc30cf4e478dfd317b5b1e8ed1b8041370a81fdbf0add0c072dadbbed40751350cb138347dd73d6985c08935d89afa849230e650df7be378880dff40", 0xa5}], 0x1, &(0x7f00000002c0)=[{0x1010, 0x0, 0x598921df, "8b897e1f3544e6633ca6adc8ef5f39ceb5aac7c4007b7ff10a19bac7d1a37ebd0e344f68561b8d2df32ae5e4923b3da98dba4d0a091c6c176e4824c4cb358a8e6c203bf5bf8e694c316515e15a18f318f4e81d6159d750027223c7553e767668d9499e394c750686558a75f6f2c962a1fa77707a36bfedc8763eda50cc5316948fd65ba412993cb5d42309c286c24d88fcf15c4a2451f13094c2ce0350a8d8b22fe2d7573b050a92fa7420824f3b678f90062932f3ba07827a502a8611cd35523aef7bcd9aa12563da9b9b79428eba9dd7ea0d4dee87f49f1088e43d232a8ba1c74a63c1fdd53b2e00ecf228dbdba12ec6e25b53cb47e8d5eec702846a37207ba67f6e4a226b86c4dbaec893e5b8da248738c61dd27a77de49fe9dfa3981c6ac460cbe3bb6e8eefaba9a54bdd205601d02c1d023f0af9a4236eeb7095037120c28efe449654be2be886bab920a8678e20333da386c6c2db648bcc745d739eebeebfba7fcdfe5e0627c2563994da7258c107f2ff4a88be9b5620f65d29fd8522b7a6c52dde6126e16bee90f80379793f966da57b83ca758259dbdf7aade33f914409072b03bf9f2e29a3abc04d4a25296efd28608a194e6cbd411080fee716d403274cdda1a618f7b50a8432dc6e46193b4ae46ba271f8c36ffb834d91161191cb5e7f2bfa2a266fe74a67826deb9015a846163b235f1fc1d3f88bcf9e870dd87fcbd9a87df34a7097464f9457bba02e9f2f0203a7bf2b9cd51d9df43ef0446acdc8c4b37c5f155678b1abf10d414409ab49841cbecee1d6cd1f803da7e5b3b39b7fc456253d70079be19673f175077575b340490edcaf8acad7982e76cd646036b81530f7d53d06a5df684b6a51007a469b3bfa7775ed7eb7c37ed343dcc6534c05fe7861036b8dcdf48f4f80edd82e0e5c8765bfa532adc5ee2addab6c225001aa1cf1747a5f38a8ab29f51c3d24bedfc5ef1cc878bfc6505618ffb7a4a0a2cdf8e0cd37da81a3c564907fbd8501267b7a3ef039a082906ba2af91080dc78f06a0f52585463d56059097bbb9b5eea150e1231161193d3fbc043a9c8ceb76c303c5cb99fb84083f691600b0c344fff6d8e26f08e41e7b7215a9feb0b12b10d3dd96dbdbadca1569469ed5222d2aaa21e96e9d93abeba9165ef6f57e23a60b507e417593ea0281c1e59c420deb51f8a011b135010a93badee41c09dd17637cb1ed7ca7f26fc738ed45b750d689f47facd3c319e268af4311a69faf1bd376bbd4db027ee759066599185d1f5bf3a9ee967f59082d835ab78eecb9651443020e9abd0c912dca7dc11b2470a74b7612ea42834f4d93c84745c3c4651f7778ab29037e9a45ad1b168ee798b68fbdda3a0d61aac0f83b55e665d7c4bbc1ca7d42b7c8dd30980d516081ee7efc9ab30a714d6decac1c88f00ac88721e50b35aee95722aa680c26c1003756d357d477d6b214d5c03c2645b339e0b58089a6ff97ea29031e25b000befd16207ca9eccb1ef7445c1eb2028e4da68d7554d9ec66383ebc6580688a97bdd25b8060c6895369b3cbb3a6948c98f309c465ca616be084f93a786bfb69a3045514521523b06198b7921bd0ef705fb19b641e0ad3bb9fc6de5f3d75a87696418df5bbd34280ac6d2770671e5f2f2db64aed32b8989ac731b75d7a1643af3d6af3525360832d66895a77845dfd45affa79f89bf2bcaf1e18ea7320faa8704578f54deb933ca089d889256f9eaa84cd13088536bb0789d38a908d4977a949593eb16423dc440b42a85570c61564a657a2940e47dca9da462f2cd14f0809ad80f34f3361324bea2772c3a836f88974c49f80c697bcfc579c2c8754e2dea0f96e1034edb62a10f96484a910947d4d15f9a1319d81d32c3ae4c8e6764afd13e797c48afc9305ec85962c26d01d46a389fba0fb0207949b53064ed086cf89622e782cfb493d7bcb123f2584e0035adaf45dc17fc739fc03d4619cb98b6fb2accb2e19c6f4aaacdff5d8ca60f038ac133c1271fa9454b2c8c0a4526877fea883f30930381cc2cf0a9686293a677f3b4b54b9d125c2367f7a6034ca060c64f0f5ffb56723573e4343933912988756e4149ad8e4bc16e47b32488400845df0621d81edc38891ad83da538d7d69370ca27fd6dcb3f63040ed31685e44b6f02dc2b68270c573bf22c883e54059097f548e55ad75d8390307d651c352d29bd726c13e269feb2e785f4e4caa21c629f90fb3d6dc4f44861cb261ebeb76a74c61edd5155a776a33101c8e7ddf4556165462f7099cd7929d122e880122348f83598a7552da5afbe851d56f691329c863b6470bbfb7e1b21da0c9b722caaa194e880e291adba34ad7a033e3d8cef368d105aa21b52b08c4a73c597499463e1776d680a136aaf9f4cd7af51b3c2c2a682e1c2e83352ce613049de7243aeb2b7f53a2c36aa4fe590ee587e76a2fdbf8fc6c21ed446155a140db416211fee36a0761d60cff6aaaec56ea67ea36fbeea5bb70eb6c5f814b4838a0bb4a462e919544dad35d4051ad41c0164990d41aa7f1a8cc3b4e2b08567ceace0fa1ef67a20e3adc3a6a0d0e9b166b1624963476db9bdbf7fb75c1560b499860552366c81024c2537360b8fd201af0a8b9e8f67d3e83cc180287428b7cfd0b787aecb658b40e7227656c7c949a9016d60e446a6238a4f837ba4203fa2779dbc2700ec1b7053fb11d4684e7f51dc816afc3daeab0875f5329e3055b4f148cd4e85973601ecd97e9ef1bf2ce095cff93c14a42360a2f7254f7941d242b225be4f6d50f907e427b0aeefda580a1bd49e15c4219a2366a00b05f670d9e6ef2bfc8c62f83eb4e9178b287dbe49a1f8f7f783575fe3207d7adcb07aa72103b8d2cd6fb3f2ab2f7a0411e237f93f0529a8b7045638a54eca4cacfac4a1e98a51b7e67925cb90b344f71f7a5312c441acdcda0420c52f58290b496c2232e8ea7d78fc2820a9fd87d0aec2039f86d835343ced23a1de90dca559d8df96015d09fc9e41130f9972a6ecb833abc45d53dd4fc4260baab4370ab991d07e18be3b21a0a62d929ddd4a62dc50b30df5e8b803a9a02985421be4b7be8db59aa2cfa5bc444524e335235b6c6373e9bc517c81aa5b68ebff4f4d7e14f6413be3e4212fc5ad0ef8ca5efc243683ebef5ae72097ffe762e3436cc3478a3a81adeb135f95548837f679225f94c7ce0735f386d90287a023d87790a036cba31fa49b831fd99b5185416b48efa878835ef1491884ba8cb2571ea41f05a66df22187f3a41f2d91d48ad801e2c97b53008142e727fb4b396fe1a63ff79b6e8e73d4bde2982859d99cc1e98f1a41e51d8eca8166ccf228929843e6a3a6c319bc722b66d0b9647eede9b7c7f9d845407af5f9a786156b0778dd19a0a5ac1cda1c250645f760a60dd8441e700706c9abb12a9d3e9425b98f25d207588fdc0125b81c9a0f33c451fd18b842272ed7788865b90ab3ecd1ae5f78bef34fb081c58a2f559f356ae4c6a439792c1f73ad1ab20a54dd64b13aaceb796eaf7b58afa5a347c0d36e6aff08603a76851e0b4359dfb7de3592825462dee6300aa1f2b6d10b9c3cc33ad323db8df3cf6e715e0fc6a222a522bd965aafff6f6b4bc1560f6c504b6fa8ae6b8bebc66db171a68cf5190c8b94a3d076cdfd29486672a09c237dece2f30b87385801e23a646c6e0937364f57a5fefd3ba0e2c952d0944541eefe6263976b7bfc0eedf5e16465b3999651f393c1830e9dcaf869a895a1bb1e317d930ac6a2f46b28fef55830c492c5713dd01f134581980a25e8bab41f2291cc3521d4bc730961c60da30c9dcf307939da88f566de9daeb99c873155a566c80c67552ebf92ea49ee2fb75b1700075f49f46b76e8894bfac737a3f3fda038c927e5246c9b255c7d7075cd8b209b421935f907809874e06452b80c09daa00a602728109d4593d03551fa1f232b55edd616123d6e1026808b4fa586e85bbb6dc1ac8eda9864e105a2b88a74ad7d6316205234a3d3365f03968c23ebaecf95b413503da3460c428fe3d56251b27f5cebc2fcb744bbea29ff0d115a88825e3de3ffaa6d02f3774a99805a7a7d1bd712ff8e309776e5c189b59380c87aa738830ad29f3cbfe5b54877b3bcf78a3d326da39de7add0938c098a1b677337643ad7038a60dfcc43f4d1271ac064fe857b9dae3cd2b252b09f3edad553efa03b508373d73d5296fb21ccaf5713388a70e81d9f3e0d4de14b28661900b4f5a79575b7a5b37c2410907d2d80aca0d510e8116ea73e92d2964e09dab98136ff9ba093782b1e1a5ab1241aa8a7a4b650d1c54c02cee1d9b08ecaa8f880a1e3b172dd177b056f9ba041920e46906451f4deff157b2e1bdb5f982e76c8923f4ea304e35cf9bcc5c5f67c64a7a5c9029eec5d6233eea0f86d2ff4827c9fc4e345b44882bd204fa1930754817f24fd22e99e4e58f1d09bf3c64c8fa81534e1f42f5ae9e96699680efa80e2e68e70f4407f47362b18df0fffebabc8548985be44b1e640f0afd20ac61bd48fc49f1441e31c49ae9cd1a8e03bc1b0377241f10dc7fc89b6cf19c0de9d3a3415ea1b1a3ae8c349d004a1031d092830e6587f2f6979507de01f12a33bd1bba058a8ee1cd241fea94ed859087c17f14c4324d6fec58bd18990c40734ff7474b4a753c2133c808fda0c3870c3f264f8a3501802b85660413d81266ab2cbdb492fde4d5d93416ed09b0c8add1eda4f630717291c5a40589cf5e8dca04d44560000cb3453d24602b51c2f247f9f13f1bfcd7614d888091cbaabf638023d4fc8207ecd39154cd516dd64d774d8aaf765b3d17665a7ffb04cc86f87aa145e914881a1e5f4891bd7997fa407674c7cb9bb439e541945920680646af606c0cdf3603c8ff2d496186894a60298bf4c9b95067e5f8f79ed9e22533ea5cc0cd9b5a88aa8c4a3aebcdb7167427aa48de2194e0f34b01ad773d0aebbb13df10988abd6bd46e8169ba0f6e32671daba128db541237e8c34e5b178373ab5360e88af5d92ddf6bd8f37f6fd1886efd00e0b62b570d126c66446919ce8906f2f155cbce39a2fb68f9f71e5b10f6a99cbae6a430af1d8292b7a06b47693f5647830824183d15673749894579d06e12eacddfa4a478cd728974ed50f0d547c0250bcc29dabbd2d4c71f191bc802dbf6c8b70423bd11f2978af48763296edb9c75042eeefde1a9306f56485ab38630241a66f9c2642796da71ad05cbc1c5b263c8388646008427eb2bf02fcbe0f94a56dc1cd29f461c6618f31116e735afbad49ef8555e09c3d290ed2e00e9eeac10bf28dfebddc75a86ed7386cb9e39dd0a0c22b630a264b2849901697a94768112d03e7690ae898abc1690e3c9f205f3a940cb1ca6ae5977c5cf70e50d4f9f35c548363d3df319098548d2d2fd12804c5140fa5a028cc4152ab063bb17f61cc85acd94034b760daecc35f9de71ea14e2a5fe779ebc00e7fdbac7981d4682386b8929fb250898abe9ac3a2b7996e931c28d86abe71e42e49bc008cd0ea11e84b8de4570e892d868f0fb6d19d89f34913e16efceeb2dbf506ac695857fca6097304be54d4db200cca2d7e9a1d1f80dfeb9000f729830fea6b987a6d734e242e021e10426ba7070474fa024b29d3db84c72c4f5063facf674429e7df5c6b27bb4870d91220635d00d701f1fa8437870e4e37897b7938121c6ebd290fbd2cf6d4ba374f44ca92af87e0076be8e530dc3b4de87598f9ed29d7dcf8e7515be2d2b789f3e196a57117067b9dfabc86883e731b469af9506f"}, {0x1010, 0x107, 0x8, "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"}], 0x2020}, 0x4000005) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2400, 0x0) 07:01:07 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', '', [{0x20, 'eth1em0/wlan0user'}, {0x20, '/dev/userio\x00'}], 0xa, "b66107879b3a6e5333651b0d3b46b2"}, 0x32) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 07:01:08 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x7ffc, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)={0x1, 0xa, [@remote, @random="d370786bf82f", @broadcast, @local, @dev={[], 0x2b}, @remote, @remote, @remote, @random="17cb736f03a9", @broadcast]}) [ 555.332648] encrypted_key: insufficient parameters specified [ 555.399168] misc userio: Invalid payload size 07:01:08 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x3f00}}, 0x2) [ 555.422949] misc userio: Invalid payload size 07:01:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff80087601, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:08 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x101040) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x7ca, &(0x7f0000000140)=0x2) setsockopt$inet_dccp_int(r0, 0x21, 0x0, &(0x7f0000000040)=0x8001, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x5) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x400000000202012, r2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x40087703, 0x0) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff80087601, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 555.687178] encrypted_key: insufficient parameters specified 07:01:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') sendto$inet(r1, &(0x7f0000000180)="69b4b2f825f2d4bc30230c0b8270421112bb8f8961edfdc568392a11577d598b9195b0d01cb358c83e7f9f42a4fbffc6764f67fc462cf16c31e1df4930a99b7cf116ee6babca93abeaa84d8d9a4d1eb7b6baf9b33044a8959116570f677beceadcaebe4a6a12c0ef0a8f321bdf47aff80ad0540443310f759f3dd2c665de37958a9567ba8da4c824901c26d0", 0x8c, 0xc000, &(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10) r2 = request_key(&(0x7f0000000280)='trusted\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='user\x00', 0xfffffffffffffffb) r3 = request_key(&(0x7f0000000340)='rxrpc\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='net/mcfilter\x00', 0xfffffffffffffffe) keyctl$negate(0xd, r2, 0x100000001, r3) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x28000, 0x0) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x0, 0x0, 0xffff, 0x2, 0xfffffffffffffffb}, 0x0, 0x0, 0xc94d}) 07:01:08 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff004, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:01:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$FUSE_POLL(r1, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0xf33}}, 0x18) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000040)={@initdev, @initdev, 0x0}, &(0x7f0000000080)=0xc) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, r3, 0x2}, 0xc) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r4 = accept$inet(0xffffffffffffff9c, &(0x7f0000001440), &(0x7f0000001480)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000014c0)={0x0, 0x9, 0x9e5b}, &(0x7f0000001500)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000001540)={0xfffffffffffffff9, 0x3, 0x8, 0x9, 0x3000000000000000, 0xfffffffffffffffa, 0x80000000, 0x7fff, r5}, 0x20) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/28, 0x1c}, {&(0x7f0000000240)=""/146, 0x92}], 0x2) 07:01:09 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/userio\x00', 0x200080, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x44, &(0x7f0000000080)=""/45, &(0x7f0000000100)=0x2d) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in6={0xa, 0x4e20, 0x182, @empty, 0x7}], 0x38) ioctl$RTC_WIE_OFF(r1, 0x7010) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:01:10 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x88400000}}, 0x2) 07:01:10 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x80, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000100)=""/76) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="00000000b307d5823793900a86fced91b0d45c21f7d88021030052c0a55feffaf356cb26bbb54c4a9669abce9ea74a0b893997896629ef8613d33c464626755d4dd810782df1c588fd16b5f7d87b93fcd97f761ebb0696ac8fc682954f63b4f868afc07449b4096c1729ad5fa35c4abbf09bde47c1d682bfce246930ffb77c6b30a2fc905e3e3cb9", @ANYRES16=r2, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}}, &(0x7f0000000480)=0x84) connect(r1, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x1, 0x1, {0xa, 0x4e22, 0xbb, @loopback, 0x2}}}, 0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000004c0)={r3, 0x18, "b5b2646db0f21afa16fee96738c1ce6270208084749c4271"}, &(0x7f0000000500)=0x20) 07:01:10 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x101040) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x7ca, &(0x7f0000000140)=0x2) setsockopt$inet_dccp_int(r0, 0x21, 0x0, &(0x7f0000000040)=0x8001, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x5) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x400000000202012, r2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x40087703, 0x0) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0x1, @empty, 0x100000000}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e24, 0x4, @empty, 0x8}, @in={0x2, 0x4e20, @rand_addr=0x46e1}], 0x68) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000140)=@can={0x1d, r3}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)="a4de8d6bbb023b2e64ea4140268220352828173c32b5c33620e2345d181145e0dbfbeb04dcbd2985a5c06efd4461d0171ddd1e8a9b660983affe7170a39ed11c1d60c12975cd26908264b6889d65981873e39e58a227ceda67f383399eeac2304e1416b0918fd019483e43ec6dbc5a4b275f7465e82da4c28b62f2307daa03d264b09301d91f1b1fe42b2c840782be348e746c70f78831f710333e133744b5c107f6b1a3825cf4b7b86a3a272249e85d89fed3a3a1ac129f86f1d36e0c468ce27eb14cf0a5706c4465366b0d8d2b546932f2fd08a0754cd3fd", 0xd9}, {&(0x7f0000000340)="a5d9f002c847fc40945142d3b92446d453a4d81285e197eb22c17ffd0af85569ae3955d7977f99139e4a5cf59166f48edf4cc97179b162b9e1c41eef7977575ad90f6c4875ad3e9eb5acee0e40993f0aa66ee3cb7ee190e66d49115ae0e72174f3117dccdb8624be32df38f10dc03478", 0x70}], 0x2, &(0x7f0000000400)=[{0x18, 0x1ff, 0x0, "1f6a61b094f0"}], 0x18}, 0x8084) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:10 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x3f00}}, 0x2) 07:01:10 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x101040) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x7ca, &(0x7f0000000140)=0x2) setsockopt$inet_dccp_int(r0, 0x21, 0x0, &(0x7f0000000040)=0x8001, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x5) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x400000000202012, r2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x40087703, 0x0) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0xfffffffffffffffa) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x40) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffffa, [], &(0x7f0000000140)=0x3f}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x0, r2}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) exit_group(0x7) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000240)=""/131) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x402000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x84) ioctl$VT_ACTIVATE(r3, 0x5606, 0xfffffffffffffffb) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffc9, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x7, 0x6, 0x7}) 07:01:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000300)=@deltaction={0x18, 0x31, 0x501, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) r5 = gettid() tgkill(r4, r5, 0x41) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000002c0)=r5) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:01:15 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x4088}}, 0x2) 07:01:15 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x3f00}}, 0x2) 07:01:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') sendto$inet(r1, &(0x7f0000000180)="69b4b2f825f2d4bc30230c0b8270421112bb8f8961edfdc568392a11577d598b9195b0d01cb358c83e7f9f42a4fbffc6764f67fc462cf16c31e1df4930a99b7cf116ee6babca93abeaa84d8d9a4d1eb7b6baf9b33044a8959116570f677beceadcaebe4a6a12c0ef0a8f321bdf47aff80ad0540443310f759f3dd2c665de37958a9567ba8da4c824901c26d0", 0x8c, 0xc000, &(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10) r2 = request_key(&(0x7f0000000280)='trusted\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='user\x00', 0xfffffffffffffffb) r3 = request_key(&(0x7f0000000340)='rxrpc\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='net/mcfilter\x00', 0xfffffffffffffffe) keyctl$negate(0xd, r2, 0x100000001, r3) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x28000, 0x0) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x0, 0x0, 0xffff, 0x2, 0xfffffffffffffffb}, 0x0, 0x0, 0xc94d}) 07:01:16 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xc9d, 0x610100) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @remote}, &(0x7f0000000140)=0x8) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x14300, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000040)=0x7, 0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:16 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x800) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) 07:01:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) getsockname$ax25(r0, &(0x7f0000000000)={{0x3, @netrom}, [@default, @default, @null, @default, @remote, @default, @remote, @bcast]}, &(0x7f0000000080)=0x2f7) 07:01:16 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000180)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xb821}}, {@rq={'rq', 0x3d, 0x1}}, {@rq={'rq', 0x3d, 0x7}}], [{@fsuuid={'fsuuid', 0x3d, {[0x32, 0x63, 0x34, 0x33, 0x65, 0x79, 0x0, 0x39], 0x2d, [0x32, 0x31, 0x33, 0x35], 0x2d, [0x61, 0x72, 0x36, 0x37], 0x2d, [0x64, 0x36, 0x0, 0x77], 0x2d, [0x36, 0x0, 0x32, 0x77, 0x33, 0x76, 0x36, 0x33]}}}]}}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:01:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x100000, 0x6000}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 564.132631] Unknown ioctl 1074835047 07:01:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00') ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000001c0)={{0x4, 0xfffffffffffffffd, 0xffff}}) [ 564.376701] Unknown ioctl 1074835047 07:01:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x208402, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000240)=""/144) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f0000000000)="e8343697c07327f7c5c400ee728cc6b97ccc91a4f1ff2c16e58cb6f03b43a81041f128a8b0566a1036282b5f58e588cb03834de5a5fa05994c906a3017766053b5b825255f5a8e69f8102c164825bbc009b1c195ff182123a20c8db151977aee2ef5e2ab42bdb07a87f2c1efa36289d3394cf5") recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:17 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x2000000}}, 0x2) 07:01:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x7, 0x6, 0x7}) 07:01:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff0000541b, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f00003db000/0x2000)=nil, 0x2000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:20 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400c0, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000300)={0x3, {0x100000000, 0x8001, 0x80000000, 0x1000}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4$ax25(0xffffffffffffff9c, &(0x7f0000000040)={{0x3, @rose}, [@remote, @remote, @rose, @bcast, @rose, @remote, @remote, @bcast]}, &(0x7f0000000140)=0x48, 0x800) accept(r1, &(0x7f0000000240)=@can, &(0x7f0000000180)=0x80) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r2, 0xffffffffffffffbd, &(0x7f0000000000)="21c7cc78d86bc197b5c2a4b7dc29381c33dbc058d1e5874613477253d4b9db3f0d19833f") close(r2) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:20 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200000, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/33) 07:01:20 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff008, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:01:20 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x300}}, 0x2) 07:01:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff4020940d, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x14000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x953, 0x10}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r2, @in={{0x2, 0x4e21, @multicast2}}, 0x1ff80000000, 0xfffffffffffffff8, 0x8, 0x1}, &(0x7f0000000300)=0x98) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1ff, 0x200000) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) fadvise64(r3, 0x0, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00004b49, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00005460, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff80086601, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0x4c, 0x8) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'bcsf0\x00'}}, 0x1e) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r2, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x5e, @broadcast, 0x4e21, 0x2, 'lblcr\x00', 0x0, 0x7, 0x14}, {@remote, 0x4e21, 0x2007, 0x8, 0x80, 0x9}}, 0x44) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x28000) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000240)) 07:01:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff80087601, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:21 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x400}], 0x0, 0x0, &(0x7f00000000c0)={0x23c7}, 0xffffffffffffffc2) [ 573.132586] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 573.144137] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 573.157552] CPU: 1 PID: 8309 Comm: syz-fuzzer Not tainted 4.20.0+ #172 [ 573.164251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.173605] Call Trace: [ 573.176205] dump_stack+0x1d3/0x2c6 [ 573.179859] ? dump_stack_print_info.cold.1+0x20/0x20 [ 573.185062] ? mark_held_locks+0x130/0x130 [ 573.189307] ? mark_held_locks+0x130/0x130 [ 573.193585] dump_header+0x27b/0xf72 [ 573.197319] ? pagefault_out_of_memory+0x197/0x197 [ 573.202274] ? __lock_acquire+0x62f/0x4c20 [ 573.206523] ? mem_cgroup_charge_statistics+0x780/0x780 [ 573.211902] ? print_usage_bug+0xc0/0xc0 [ 573.215973] ? print_usage_bug+0xc0/0xc0 [ 573.220061] ? graph_lock+0x270/0x270 [ 573.223887] ? print_usage_bug+0xc0/0xc0 [ 573.227955] ? print_usage_bug+0xc0/0xc0 [ 573.232052] ? graph_lock+0x270/0x270 [ 573.235873] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 573.241443] ? find_held_lock+0x36/0x1c0 [ 573.245519] ? mark_held_locks+0xc7/0x130 [ 573.249680] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 573.254793] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 573.259905] ? lockdep_hardirqs_on+0x421/0x5c0 [ 573.264501] ? trace_hardirqs_on+0xbd/0x310 [ 573.268854] ? kasan_check_read+0x11/0x20 [ 573.273015] ? ___ratelimit+0x36f/0x655 [ 573.277001] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 573.282461] ? trace_hardirqs_on+0x310/0x310 [ 573.286886] ? lock_downgrade+0x900/0x900 [ 573.291065] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 573.296185] ? ___ratelimit+0xaa/0x655 [ 573.300085] ? idr_get_free+0xf70/0xf70 [ 573.304067] ? kasan_check_read+0x11/0x20 [ 573.308229] ? do_raw_spin_unlock+0xa7/0x330 [ 573.312657] oom_kill_process.cold.27+0x10/0x903 [ 573.317422] ? graph_lock+0x270/0x270 [ 573.321236] ? _raw_spin_unlock+0x2c/0x50 [ 573.325392] ? oom_badness+0xe6/0xaa0 [ 573.329204] ? kasan_check_read+0x11/0x20 [ 573.333365] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 573.338659] ? oom_evaluate_task+0x540/0x540 [ 573.343083] ? find_held_lock+0x36/0x1c0 [ 573.347168] ? out_of_memory+0x974/0x1430 [ 573.351322] ? lock_downgrade+0x900/0x900 [ 573.355488] ? check_preemption_disabled+0x48/0x280 [ 573.360546] ? kasan_check_read+0x11/0x20 [ 573.364718] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 573.370013] ? rcu_read_unlock_special+0x370/0x370 [ 573.374954] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 573.380518] ? oom_evaluate_task+0x302/0x540 [ 573.384944] out_of_memory+0xa84/0x1430 [ 573.388939] ? unreserve_highatomic_pageblock+0x3b0/0x5d0 [ 573.394494] ? oom_killer_disable+0x3a0/0x3a0 [ 573.398997] ? __alloc_pages_slowpath+0xf5c/0x2df0 [ 573.403940] ? __ww_mutex_check_waiters+0x160/0x160 [ 573.408970] ? find_next_bit+0x104/0x130 [ 573.413047] __alloc_pages_slowpath+0x2343/0x2df0 [ 573.417936] ? warn_alloc+0x120/0x120 [ 573.421745] ? mark_held_locks+0x130/0x130 [ 573.425991] ? find_get_entry+0xaae/0x1120 [ 573.430249] ? filemap_map_pages+0x1a30/0x1a30 [ 573.434878] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 573.440430] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 573.445975] ? should_fail+0x22d/0xd01 [ 573.449887] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 573.454998] ? graph_lock+0x270/0x270 [ 573.458829] ? __lock_is_held+0xb5/0x140 [ 573.462924] ? ___might_sleep+0x1ed/0x300 [ 573.467086] ? lock_release+0xa00/0xa00 [ 573.471067] ? arch_local_save_flags+0x40/0x40 [ 573.475669] ? xa_load+0x2ba/0x460 [ 573.479218] ? lock_downgrade+0x900/0x900 [ 573.483379] ? check_preemption_disabled+0x48/0x280 [ 573.488426] ? __might_sleep+0x95/0x190 [ 573.492410] __alloc_pages_nodemask+0xad8/0xea0 [ 573.497094] ? __alloc_pages_slowpath+0x2df0/0x2df0 [ 573.502119] ? xa_load+0x2e1/0x460 [ 573.505667] ? xa_clear_mark+0x40/0x40 [ 573.509561] ? up_read_non_owner+0x100/0x100 [ 573.513994] ? graph_lock+0x270/0x270 [ 573.517808] ? print_usage_bug+0xc0/0xc0 [ 573.521891] ? graph_lock+0x270/0x270 [ 573.525695] ? graph_lock+0x270/0x270 [ 573.529516] ? __do_page_cache_readahead+0x663/0x810 [ 573.534640] ? find_held_lock+0x36/0x1c0 [ 573.538791] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 573.544339] alloc_pages_current+0x10c/0x210 [ 573.548758] ? lock_downgrade+0x900/0x900 [ 573.552923] __page_cache_alloc+0x38c/0x5b0 [ 573.557259] ? kasan_check_read+0x11/0x20 [ 573.561464] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 573.566766] ? filemap_range_has_page+0x4e0/0x4e0 [ 573.571620] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 573.577184] ? check_preemption_disabled+0x48/0x280 [ 573.582233] filemap_fault+0x1595/0x25f0 [ 573.586318] ? __lock_page_or_retry+0xa00/0xa00 [ 573.591010] ? mark_held_locks+0x130/0x130 [ 573.595252] ? find_held_lock+0x36/0x1c0 [ 573.599342] ? filemap_map_pages+0xd78/0x1a30 [ 573.603856] ? lock_downgrade+0x900/0x900 [ 573.608015] ? check_preemption_disabled+0x48/0x280 [ 573.613047] ? kasan_check_read+0x11/0x20 [ 573.617221] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 573.622511] ? rcu_read_unlock_special+0x370/0x370 [ 573.627459] ? filemap_map_pages+0xd9f/0x1a30 [ 573.631989] ? find_get_entries_tag+0x1400/0x1400 [ 573.636851] ? destroy_hrtimer_on_stack+0x1c/0x20 [ 573.641724] ? __lock_is_held+0xb5/0x140 [ 573.645790] ? lock_acquire+0x1ed/0x520 [ 573.649775] ? ext4_filemap_fault+0x7a/0xad [ 573.654121] ? lock_release+0xa00/0xa00 [ 573.658102] ? arch_local_save_flags+0x40/0x40 [ 573.662708] ? down_read+0x8d/0x120 [ 573.666355] ? ext4_filemap_fault+0x7a/0xad [ 573.670687] ? __down_interruptible+0x700/0x700 [ 573.675373] ? find_held_lock+0x36/0x1c0 [ 573.679446] ext4_filemap_fault+0x82/0xad [ 573.683622] __do_fault+0x100/0x6b0 [ 573.687259] ? lock_downgrade+0x900/0x900 [ 573.691411] ? follow_pfn+0x2e0/0x2e0 [ 573.695225] ? kasan_check_read+0x11/0x20 [ 573.699407] ? pmd_val+0x88/0x100 [ 573.702879] ? add_mm_counter_fast+0xd0/0xd0 [ 573.707309] ? pmd_val+0x88/0x100 [ 573.710764] ? add_mm_counter_fast+0xd0/0xd0 [ 573.715185] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 573.720735] __handle_mm_fault+0x3956/0x5670 [ 573.725192] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 573.730049] ? graph_lock+0x270/0x270 [ 573.733864] ? graph_lock+0x270/0x270 [ 573.737674] ? print_usage_bug+0xc0/0xc0 [ 573.741746] ? graph_lock+0x270/0x270 [ 573.745550] ? graph_lock+0x270/0x270 [ 573.749393] ? handle_mm_fault+0x42a/0xc70 [ 573.753637] ? lock_downgrade+0x900/0x900 [ 573.757810] ? check_preemption_disabled+0x48/0x280 [ 573.762854] ? kasan_check_read+0x11/0x20 [ 573.767062] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 573.772358] ? rcu_read_unlock_special+0x370/0x370 [ 573.777300] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 573.782865] ? check_preemption_disabled+0x48/0x280 [ 573.787928] handle_mm_fault+0x54f/0xc70 [ 573.792000] ? __handle_mm_fault+0x5670/0x5670 [ 573.796607] ? find_vma+0x34/0x190 [ 573.800212] __do_page_fault+0x5f6/0xd70 [ 573.804312] ? kernel_write+0x120/0x120 [ 573.808318] do_page_fault+0xf2/0x7e0 [ 573.812146] ? vmalloc_sync_all+0x30/0x30 [ 573.816314] ? error_entry+0x70/0xd0 [ 573.820044] ? trace_hardirqs_off_caller+0xbb/0x310 [ 573.825066] ? trace_hardirqs_on_caller+0xc0/0x310 [ 573.830008] ? syscall_return_slowpath+0x5e0/0x5e0 [ 573.834962] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 573.839827] ? trace_hardirqs_on_caller+0x310/0x310 [ 573.844867] ? trace_hardirqs_off+0x310/0x310 [ 573.849392] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 573.854940] ? prepare_exit_to_usermode+0x291/0x3b0 [ 573.859972] ? page_fault+0x8/0x30 [ 573.863537] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 573.868406] ? page_fault+0x8/0x30 [ 573.871958] page_fault+0x1e/0x30 [ 573.875410] RIP: 0033:0x4290d7 [ 573.878618] Code: Bad RIP value. [ 573.881985] RSP: 002b:000000c42001fea8 EFLAGS: 00010202 [ 573.887362] RAX: ffffffffffffff92 RBX: 0000000021153a23 RCX: 000000000045ddf3 [ 573.894637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000015cdde0 [ 573.901909] RBP: 000000c42001fee8 R08: 0000000000000000 R09: 0000000000000000 [ 573.909196] R10: 000000c42001fed8 R11: 0000000000000202 R12: 0000000000000001 [ 573.916482] R13: 000000c4314a8240 R14: 0000000000000001 R15: 0000000000000000 [ 573.935394] Mem-Info: [ 573.937924] active_anon:128787 inactive_anon:209 isolated_anon:0 [ 573.937924] active_file:14 inactive_file:16 isolated_file:0 [ 573.937924] unevictable:0 dirty:0 writeback:0 unstable:0 [ 573.937924] slab_reclaimable:12382 slab_unreclaimable:110476 [ 573.937924] mapped:49154 shmem:245 pagetables:887 bounce:0 [ 573.937924] free:24943 free_pcp:66 free_cma:0 [ 573.976401] Node 0 active_anon:515128kB inactive_anon:836kB active_file:52kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 352256kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 574.044887] Node 1 active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 574.112900] Node 0 DMA free:10368kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.182953] lowmem_reserve[]: 0 2537 2539 2539 [ 574.192526] Node 0 DMA32 free:36084kB min:36092kB low:45112kB high:54132kB active_anon:515128kB inactive_anon:836kB active_file:52kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2601648kB mlocked:0kB kernel_stack:7008kB pagetables:3548kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.252586] lowmem_reserve[]: 0 0 2 2 [ 574.256474] Node 0 Normal free:0kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2460kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.309878] lowmem_reserve[]: 0 0 0 0 [ 574.313717] Node 1 Normal free:53520kB min:53760kB low:67200kB high:80640kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.360691] lowmem_reserve[]: 0 0 0 0 [ 574.364542] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10368kB [ 574.384754] Node 0 DMA32: 1842*4kB (UME) 1370*8kB (UME) 361*16kB (UME) 115*32kB (UME) 65*64kB (UME) 17*128kB (UME) 4*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36168kB [ 574.417495] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 574.451797] Node 1 Normal: 8*4kB (ME) 8*8kB (UME) 7*16kB (ME) 6*32kB (UME) 4*64kB (ME) 3*128kB (ME) 3*256kB (UME) 1*512kB (M) 2*1024kB (M) 2*2048kB (UE) 11*4096kB (UM) = 53520kB [ 574.498424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 574.523944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 574.544994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 574.572325] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 574.600766] 275 total pagecache pages [ 574.604600] 0 pages in swap cache [ 574.622630] Swap cache stats: add 0, delete 0, find 0/0 [ 574.635332] Free swap = 0kB [ 574.645815] Total swap = 0kB [ 574.656188] 1965979 pages RAM [ 574.664823] 0 pages HighMem/MovableOnly [ 574.676253] 343429 pages reserved [ 574.690575] 0 pages cma reserved [ 574.693958] Out of memory: Kill process 10814 (syz-executor0) score 1005 or sacrifice child [ 574.723693] Killed process 10814 (syz-executor0) total-vm:70400kB, anon-rss:2184kB, file-rss:32768kB, shmem-rss:0kB [ 575.167334] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 575.193045] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 575.197899] CPU: 1 PID: 8309 Comm: syz-fuzzer Not tainted 4.20.0+ #172 [ 575.204566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.213918] Call Trace: [ 575.216524] dump_stack+0x1d3/0x2c6 [ 575.220167] ? dump_stack_print_info.cold.1+0x20/0x20 [ 575.225463] ? mark_held_locks+0x130/0x130 [ 575.229711] ? mark_held_locks+0x130/0x130 [ 575.233985] dump_header+0x27b/0xf72 [ 575.237741] ? pagefault_out_of_memory+0x197/0x197 [ 575.242732] ? __lock_acquire+0x62f/0x4c20 [ 575.246977] ? mem_cgroup_charge_statistics+0x780/0x780 [ 575.252372] ? print_usage_bug+0xc0/0xc0 [ 575.256446] ? print_usage_bug+0xc0/0xc0 [ 575.260516] ? graph_lock+0x270/0x270 [ 575.264343] ? print_usage_bug+0xc0/0xc0 [ 575.268416] ? print_usage_bug+0xc0/0xc0 [ 575.272485] ? graph_lock+0x270/0x270 [ 575.276301] ? find_held_lock+0x36/0x1c0 [ 575.280388] ? mark_held_locks+0xc7/0x130 [ 575.284552] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 575.289666] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 575.294777] ? lockdep_hardirqs_on+0x421/0x5c0 [ 575.299394] ? trace_hardirqs_on+0xbd/0x310 [ 575.303751] ? kasan_check_read+0x11/0x20 [ 575.307939] ? ___ratelimit+0x36f/0x655 [ 575.311921] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 575.317388] ? trace_hardirqs_on+0x310/0x310 [ 575.321818] ? lock_downgrade+0x900/0x900 [ 575.325994] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 575.331128] ? ___ratelimit+0xaa/0x655 [ 575.335034] ? idr_get_free+0xf70/0xf70 [ 575.339021] ? kasan_check_read+0x11/0x20 [ 575.343181] ? do_raw_spin_unlock+0xa7/0x330 [ 575.347610] oom_kill_process.cold.27+0x10/0x903 [ 575.352411] ? graph_lock+0x270/0x270 [ 575.356220] ? _raw_spin_unlock+0x2c/0x50 [ 575.360384] ? oom_badness+0xe6/0xaa0 [ 575.364210] ? kasan_check_read+0x11/0x20 [ 575.368406] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 575.373702] ? oom_evaluate_task+0x540/0x540 [ 575.378120] ? find_held_lock+0x36/0x1c0 [ 575.382202] ? out_of_memory+0x974/0x1430 [ 575.386367] ? lock_downgrade+0x900/0x900 [ 575.390524] ? check_preemption_disabled+0x48/0x280 [ 575.395554] ? kasan_check_read+0x11/0x20 [ 575.399726] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 575.405027] ? rcu_read_unlock_special+0x370/0x370 [ 575.409970] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 575.415528] ? oom_evaluate_task+0x302/0x540 [ 575.419956] out_of_memory+0xa84/0x1430 [ 575.423951] ? unreserve_highatomic_pageblock+0x3b0/0x5d0 [ 575.429529] ? oom_killer_disable+0x3a0/0x3a0 [ 575.434036] ? __alloc_pages_slowpath+0xf5c/0x2df0 [ 575.438978] ? __ww_mutex_check_waiters+0x160/0x160 [ 575.444036] ? find_next_bit+0x104/0x130 [ 575.448115] __alloc_pages_slowpath+0x2343/0x2df0 [ 575.452991] ? warn_alloc+0x120/0x120 [ 575.456800] ? mark_held_locks+0x130/0x130 [ 575.461044] ? find_get_entry+0xaae/0x1120 [ 575.465299] ? filemap_map_pages+0x1a30/0x1a30 [ 575.469918] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 575.475465] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 575.481024] ? should_fail+0x22d/0xd01 [ 575.484937] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 575.490045] ? graph_lock+0x270/0x270 [ 575.493906] ? __lock_is_held+0xb5/0x140 [ 575.497986] ? ___might_sleep+0x1ed/0x300 [ 575.502181] ? lock_release+0xa00/0xa00 [ 575.506181] ? arch_local_save_flags+0x40/0x40 [ 575.510766] ? xa_load+0x2ba/0x460 [ 575.514330] ? lock_downgrade+0x900/0x900 [ 575.518492] ? check_preemption_disabled+0x48/0x280 [ 575.523523] ? __might_sleep+0x95/0x190 [ 575.527509] __alloc_pages_nodemask+0xad8/0xea0 [ 575.532214] ? __alloc_pages_slowpath+0x2df0/0x2df0 [ 575.537240] ? xa_load+0x2e1/0x460 [ 575.540790] ? xa_clear_mark+0x40/0x40 [ 575.544692] ? up_read_non_owner+0x100/0x100 [ 575.549106] ? graph_lock+0x270/0x270 [ 575.552915] ? print_usage_bug+0xc0/0xc0 [ 575.556987] ? graph_lock+0x270/0x270 [ 575.560806] ? graph_lock+0x270/0x270 [ 575.564632] ? __do_page_cache_readahead+0x663/0x810 [ 575.569744] ? find_held_lock+0x36/0x1c0 [ 575.573819] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 575.579392] alloc_pages_current+0x10c/0x210 [ 575.583805] ? lock_downgrade+0x900/0x900 [ 575.587978] __page_cache_alloc+0x38c/0x5b0 [ 575.592321] ? kasan_check_read+0x11/0x20 [ 575.596481] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 575.601766] ? filemap_range_has_page+0x4e0/0x4e0 [ 575.606626] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 575.612168] ? check_preemption_disabled+0x48/0x280 [ 575.617172] filemap_fault+0x1595/0x25f0 [ 575.621222] ? __lock_page_or_retry+0xa00/0xa00 [ 575.625883] ? mark_held_locks+0x130/0x130 [ 575.630098] ? find_held_lock+0x36/0x1c0 [ 575.634150] ? filemap_map_pages+0xd78/0x1a30 [ 575.638633] ? lock_downgrade+0x900/0x900 [ 575.642764] ? check_preemption_disabled+0x48/0x280 [ 575.647769] ? kasan_check_read+0x11/0x20 [ 575.651907] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 575.657169] ? rcu_read_unlock_special+0x370/0x370 [ 575.662089] ? filemap_map_pages+0xd9f/0x1a30 [ 575.666577] ? find_get_entries_tag+0x1400/0x1400 [ 575.671406] ? destroy_hrtimer_on_stack+0x1c/0x20 [ 575.676251] ? __lock_is_held+0xb5/0x140 [ 575.680297] ? lock_acquire+0x1ed/0x520 [ 575.684259] ? ext4_filemap_fault+0x7a/0xad [ 575.688566] ? lock_release+0xa00/0xa00 [ 575.692522] ? arch_local_save_flags+0x40/0x40 [ 575.697100] ? down_read+0x8d/0x120 [ 575.700727] ? ext4_filemap_fault+0x7a/0xad [ 575.705034] ? __down_interruptible+0x700/0x700 [ 575.709686] ? find_held_lock+0x36/0x1c0 [ 575.713744] ext4_filemap_fault+0x82/0xad [ 575.717894] __do_fault+0x100/0x6b0 [ 575.721507] ? lock_downgrade+0x900/0x900 [ 575.725638] ? follow_pfn+0x2e0/0x2e0 [ 575.729425] ? kasan_check_read+0x11/0x20 [ 575.733553] ? pmd_val+0x88/0x100 [ 575.736988] ? add_mm_counter_fast+0xd0/0xd0 [ 575.741395] ? pmd_val+0x88/0x100 [ 575.744833] ? add_mm_counter_fast+0xd0/0xd0 [ 575.749239] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 575.754765] __handle_mm_fault+0x3956/0x5670 [ 575.759165] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 575.763995] ? graph_lock+0x270/0x270 [ 575.767796] ? graph_lock+0x270/0x270 [ 575.771612] ? print_usage_bug+0xc0/0xc0 [ 575.775764] ? graph_lock+0x270/0x270 [ 575.779547] ? graph_lock+0x270/0x270 [ 575.783345] ? handle_mm_fault+0x42a/0xc70 [ 575.787568] ? lock_downgrade+0x900/0x900 [ 575.791704] ? check_preemption_disabled+0x48/0x280 [ 575.796732] ? kasan_check_read+0x11/0x20 [ 575.800873] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 575.806146] ? rcu_read_unlock_special+0x370/0x370 [ 575.811066] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 575.816591] ? check_preemption_disabled+0x48/0x280 [ 575.821595] handle_mm_fault+0x54f/0xc70 [ 575.825657] ? __handle_mm_fault+0x5670/0x5670 [ 575.830228] ? find_vma+0x34/0x190 [ 575.833787] __do_page_fault+0x5f6/0xd70 [ 575.837835] ? kernel_write+0x120/0x120 [ 575.841805] do_page_fault+0xf2/0x7e0 [ 575.845616] ? vmalloc_sync_all+0x30/0x30 [ 575.849754] ? error_entry+0x70/0xd0 [ 575.853451] ? trace_hardirqs_off_caller+0xbb/0x310 [ 575.858465] ? trace_hardirqs_on_caller+0xc0/0x310 [ 575.863380] ? syscall_return_slowpath+0x5e0/0x5e0 [ 575.868311] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 575.873140] ? trace_hardirqs_on_caller+0x310/0x310 [ 575.878139] ? trace_hardirqs_off+0x310/0x310 [ 575.882620] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 575.888146] ? prepare_exit_to_usermode+0x291/0x3b0 [ 575.893146] ? page_fault+0x8/0x30 [ 575.896670] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 575.901497] ? page_fault+0x8/0x30 [ 575.905024] page_fault+0x1e/0x30 [ 575.908480] RIP: 0033:0x40f9c0 [ 575.911686] Code: Bad RIP value. [ 575.915034] RSP: 002b:000000c42001fef8 EFLAGS: 00010216 [ 575.920394] RAX: ffffffffffffff92 RBX: 0000000021153a23 RCX: 000000000045ddf3 [ 575.927643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000015cdde0 [ 575.934895] RBP: 000000c42001ff20 R08: 0000000000000000 R09: 0000000000000000 [ 575.942148] R10: 000000c42001fed8 R11: 0000000000000202 R12: 0000000000000001 [ 575.949403] R13: 000000c4314a8240 R14: 0000000000000001 R15: 0000000000000000 [ 575.958088] Mem-Info: [ 575.960520] active_anon:128246 inactive_anon:209 isolated_anon:0 [ 575.960520] active_file:10 inactive_file:3 isolated_file:0 [ 575.960520] unevictable:0 dirty:5 writeback:0 unstable:0 [ 575.960520] slab_reclaimable:12371 slab_unreclaimable:110463 [ 575.960520] mapped:49154 shmem:245 pagetables:862 bounce:0 [ 575.960520] free:25055 free_pcp:1 free_cma:0 [ 575.993571] Node 0 active_anon:512964kB inactive_anon:836kB active_file:52kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 350208kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 576.021347] Node 1 active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 576.047380] Node 0 DMA free:10368kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 576.073634] lowmem_reserve[]: 0 2537 2539 2539 [ 576.078401] Node 0 DMA32 free:35896kB min:36092kB low:45112kB high:54132kB active_anon:512964kB inactive_anon:836kB active_file:52kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2601648kB mlocked:0kB kernel_stack:6944kB pagetables:3448kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 576.118295] lowmem_reserve[]: 0 0 2 2 [ 576.122159] Node 0 Normal free:0kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2460kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 576.175410] lowmem_reserve[]: 0 0 0 0 [ 576.190638] Node 1 Normal free:53520kB min:53760kB low:67200kB high:80640kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 576.244834] lowmem_reserve[]: 0 0 0 0 [ 576.248755] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10368kB [ 576.272612] Node 0 DMA32: 1843*4kB (UME) 1366*8kB (UME) 367*16kB (UME) 117*32kB (UME) 63*64kB (UME) 17*128kB (UME) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 36428kB [ 576.299025] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 576.320572] Node 1 Normal: 8*4kB (ME) 8*8kB (UME) 7*16kB (ME) 6*32kB (UME) 4*64kB (ME) 3*128kB (ME) 3*256kB (UME) 1*512kB (M) 2*1024kB (M) 2*2048kB (UE) 11*4096kB (UM) = 53520kB [ 576.354545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 576.371163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 576.389016] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 576.406475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 576.415057] 272 total pagecache pages [ 576.431645] 0 pages in swap cache [ 576.435112] Swap cache stats: add 0, delete 0, find 0/0 [ 576.449705] Free swap = 0kB [ 576.452777] Total swap = 0kB [ 576.455794] 1965979 pages RAM [ 576.469834] 0 pages HighMem/MovableOnly [ 576.473830] 343429 pages reserved [ 576.484177] 0 pages cma reserved [ 576.493976] Out of memory: Kill process 19145 (syz-executor0) score 1005 or sacrifice child [ 576.514638] Killed process 19148 (syz-executor0) total-vm:70796kB, anon-rss:2216kB, file-rss:32704kB, shmem-rss:0kB [ 576.547174] oom_reaper: reaped process 19148 (syz-executor0), now anon-rss:0kB, file-rss:32704kB, shmem-rss:0kB [ 576.575441] init invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 576.612961] init cpuset=/ mems_allowed=0-1 [ 576.617325] CPU: 0 PID: 1 Comm: init Not tainted 4.20.0+ #172 [ 576.623213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.632566] Call Trace: [ 576.635167] dump_stack+0x1d3/0x2c6 [ 576.638828] ? dump_stack_print_info.cold.1+0x20/0x20 [ 576.644058] ? mark_held_locks+0x130/0x130 [ 576.648312] ? mark_held_locks+0x130/0x130 [ 576.652560] dump_header+0x27b/0xf72 [ 576.656297] ? pagefault_out_of_memory+0x197/0x197 [ 576.661240] ? __lock_acquire+0x62f/0x4c20 [ 576.665550] ? mem_cgroup_charge_statistics+0x780/0x780 [ 576.670949] ? print_usage_bug+0xc0/0xc0 [ 576.675030] ? graph_lock+0x270/0x270 [ 576.678862] ? print_usage_bug+0xc0/0xc0 [ 576.682932] ? print_usage_bug+0xc0/0xc0 [ 576.687001] ? graph_lock+0x270/0x270 [ 576.690816] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 576.696407] ? find_held_lock+0x36/0x1c0 [ 576.700490] ? mark_held_locks+0xc7/0x130 [ 576.704649] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 576.709762] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 576.714898] ? lockdep_hardirqs_on+0x421/0x5c0 [ 576.719486] ? trace_hardirqs_on+0xbd/0x310 [ 576.723836] ? kasan_check_read+0x11/0x20 [ 576.728031] ? ___ratelimit+0x36f/0x655 [ 576.732062] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 576.737539] ? trace_hardirqs_on+0x310/0x310 [ 576.741954] ? lock_downgrade+0x900/0x900 [ 576.746134] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 576.751277] ? ___ratelimit+0xaa/0x655 [ 576.755190] ? idr_get_free+0xf70/0xf70 [ 576.759173] ? kasan_check_read+0x11/0x20 [ 576.763331] ? do_raw_spin_unlock+0xa7/0x330 [ 576.767771] oom_kill_process.cold.27+0x10/0x903 [ 576.772545] ? graph_lock+0x270/0x270 [ 576.776358] ? _raw_spin_unlock+0x2c/0x50 [ 576.780517] ? oom_badness+0xe6/0xaa0 [ 576.784327] ? kasan_check_read+0x11/0x20 [ 576.788485] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 576.793780] ? oom_evaluate_task+0x540/0x540 [ 576.798199] ? find_held_lock+0x36/0x1c0 [ 576.802280] ? out_of_memory+0x974/0x1430 [ 576.806475] ? lock_downgrade+0x900/0x900 [ 576.810645] ? check_preemption_disabled+0x48/0x280 [ 576.815701] ? kasan_check_read+0x11/0x20 [ 576.819872] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 576.825160] ? rcu_read_unlock_special+0x370/0x370 [ 576.830103] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 576.835653] ? oom_evaluate_task+0x302/0x540 [ 576.840076] out_of_memory+0xa84/0x1430 [ 576.844080] ? oom_killer_disable+0x3a0/0x3a0 [ 576.848598] ? __alloc_pages_slowpath+0xf5c/0x2df0 [ 576.853553] ? __ww_mutex_check_waiters+0x160/0x160 [ 576.858589] __alloc_pages_slowpath+0x2343/0x2df0 [ 576.863466] ? warn_alloc+0x120/0x120 [ 576.867282] ? mark_held_locks+0x130/0x130 [ 576.871535] ? find_get_entry+0xaae/0x1120 [ 576.875227] syz-executor0: vmalloc: allocation failure, allocated 2809745408 of 3081035776 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 576.875777] ? filemap_map_pages+0x1a30/0x1a30 [ 576.894077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 576.899623] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 576.905169] ? should_fail+0x22d/0xd01 [ 576.909069] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 576.914188] ? graph_lock+0x270/0x270 [ 576.918073] ? __lock_is_held+0xb5/0x140 [ 576.922161] ? ___might_sleep+0x1ed/0x300 [ 576.923203] syz-executor0 cpuset=syz0 mems_allowed=0-1 [ 576.926315] ? lock_release+0xa00/0xa00 [ 576.926331] ? arch_local_save_flags+0x40/0x40 [ 576.926346] ? xa_load+0x2ba/0x460 [ 576.926361] ? lock_downgrade+0x900/0x900 [ 576.926377] ? check_preemption_disabled+0x48/0x280 [ 576.926399] ? __might_sleep+0x95/0x190 [ 576.926418] __alloc_pages_nodemask+0xad8/0xea0 [ 576.926439] ? __alloc_pages_slowpath+0x2df0/0x2df0 [ 576.926455] ? xa_load+0x2e1/0x460 [ 576.946507] syz-executor0: vmalloc: allocation failure, allocated 2354651136 of 3081035776 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 576.947949] ? xa_clear_mark+0x40/0x40 [ 576.952949] syz-executor0 cpuset=syz0 mems_allowed=0-1 [ 576.956916] ? up_read_non_owner+0x100/0x100 [ 576.956931] ? graph_lock+0x270/0x270 [ 576.956947] ? print_usage_bug+0xc0/0xc0 [ 576.956979] ? graph_lock+0x270/0x270 [ 576.956994] ? graph_lock+0x270/0x270 [ 577.013367] ? __do_page_cache_readahead+0x663/0x810 [ 577.018492] ? find_held_lock+0x36/0x1c0 [ 577.022579] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 577.028154] alloc_pages_current+0x10c/0x210 [ 577.032561] ? lock_downgrade+0x900/0x900 [ 577.036746] __page_cache_alloc+0x38c/0x5b0 [ 577.041090] ? kasan_check_read+0x11/0x20 [ 577.045241] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 577.050535] ? filemap_range_has_page+0x4e0/0x4e0 [ 577.055384] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 577.060927] ? check_preemption_disabled+0x48/0x280 [ 577.065954] filemap_fault+0x1595/0x25f0 [ 577.070029] ? __lock_page_or_retry+0xa00/0xa00 [ 577.074702] ? mark_held_locks+0x130/0x130 [ 577.078940] ? find_held_lock+0x13f/0x1c0 [ 577.083105] ? filemap_map_pages+0xd78/0x1a30 [ 577.087609] ? lock_downgrade+0x900/0x900 [ 577.091764] ? check_preemption_disabled+0x48/0x280 [ 577.096796] ? kasan_check_read+0x11/0x20 [ 577.100954] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 577.106242] ? rcu_read_unlock_special+0x370/0x370 [ 577.111187] ? filemap_map_pages+0xd9f/0x1a30 [ 577.115698] ? find_get_entries_tag+0x1400/0x1400 [ 577.120689] ? __lock_is_held+0xb5/0x140 [ 577.124760] ? lock_acquire+0x1ed/0x520 [ 577.128741] ? ext4_filemap_fault+0x7a/0xad [ 577.133071] ? lock_release+0xa00/0xa00 [ 577.137045] ? arch_local_save_flags+0x40/0x40 [ 577.141628] ? print_usage_bug+0xc0/0xc0 [ 577.145711] ? down_read+0x8d/0x120 [ 577.149346] ? ext4_filemap_fault+0x7a/0xad [ 577.153675] ? __down_interruptible+0x700/0x700 [ 577.158351] ? find_held_lock+0x36/0x1c0 [ 577.162423] ext4_filemap_fault+0x82/0xad [ 577.166574] __do_fault+0x100/0x6b0 [ 577.170209] ? lock_downgrade+0x900/0x900 [ 577.174358] ? follow_pfn+0x2e0/0x2e0 [ 577.178166] ? kasan_check_read+0x11/0x20 [ 577.182321] ? do_raw_spin_unlock+0xa7/0x330 [ 577.186757] ? do_raw_spin_trylock+0x270/0x270 [ 577.191347] ? add_mm_counter_fast+0xd0/0xd0 [ 577.195778] __handle_mm_fault+0x3956/0x5670 [ 577.200197] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 577.205040] ? graph_lock+0x270/0x270 [ 577.208839] ? graph_lock+0x270/0x270 [ 577.212657] ? print_usage_bug+0xc0/0xc0 [ 577.216724] ? kasan_check_write+0x14/0x20 [ 577.220964] ? graph_lock+0x270/0x270 [ 577.224777] ? graph_lock+0x270/0x270 [ 577.228598] ? handle_mm_fault+0x42a/0xc70 [ 577.232851] ? lock_downgrade+0x900/0x900 [ 577.237036] ? check_preemption_disabled+0x48/0x280 [ 577.242080] ? kasan_check_read+0x11/0x20 [ 577.246240] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 577.251527] ? rcu_read_unlock_special+0x370/0x370 [ 577.256475] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 577.262021] ? check_preemption_disabled+0x48/0x280 [ 577.267050] handle_mm_fault+0x54f/0xc70 [ 577.271124] ? __handle_mm_fault+0x5670/0x5670 [ 577.275759] ? find_vma+0x34/0x190 [ 577.279316] __do_page_fault+0x5f6/0xd70 [ 577.283412] do_page_fault+0xf2/0x7e0 [ 577.287239] ? vmalloc_sync_all+0x30/0x30 [ 577.291406] ? error_entry+0x70/0xd0 [ 577.295127] ? trace_hardirqs_off_caller+0xbb/0x310 [ 577.300147] ? trace_hardirqs_on_caller+0xc0/0x310 [ 577.305087] ? syscall_return_slowpath+0x5e0/0x5e0 [ 577.310029] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 577.314892] ? trace_hardirqs_on_caller+0x310/0x310 [ 577.319925] ? trace_hardirqs_off+0x310/0x310 [ 577.324437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 577.329986] ? prepare_exit_to_usermode+0x291/0x3b0 [ 577.335008] ? page_fault+0x8/0x30 [ 577.338557] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 577.343413] ? page_fault+0x8/0x30 [ 577.346967] page_fault+0x1e/0x30 [ 577.350426] RIP: 0033:0x4059bb [ 577.353653] Code: Bad RIP value. [ 577.357034] RSP: 002b:00007ffc0e346680 EFLAGS: 00010206 [ 577.362405] RAX: 0000000000000000 RBX: 00007ffc0e3467a0 RCX: 00007fcb7950fdd3 [ 577.369689] RDX: 0000000000000000 RSI: 00007ffc0e3465b0 RDI: 000000000000000b [ 577.376958] RBP: 0000000000000000 R08: 00007ffc0e346630 R09: 0000000000000001 [ 577.384232] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 577.391509] R13: 00007ffc0e346990 R14: 0000000000000000 R15: 0000000000000000 [ 577.400412] CPU: 1 PID: 19148 Comm: syz-executor0 Not tainted 4.20.0+ #172 [ 577.407450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.416799] Call Trace: [ 577.419398] dump_stack+0x1d3/0x2c6 [ 577.419400] Mem-Info: [ 577.419435] active_anon:127714 inactive_anon:209 isolated_anon:0 [ 577.419435] active_file:14 inactive_file:10 isolated_file:0 [ 577.419435] unevictable:0 dirty:0 writeback:0 unstable:0 [ 577.419435] slab_reclaimable:12321 slab_unreclaimable:110336 [ 577.419435] mapped:49154 shmem:245 pagetables:862 bounce:0 [ 577.419435] free:13674 free_pcp:131 free_cma:0 [ 577.423050] ? dump_stack_print_info.cold.1+0x20/0x20 [ 577.425488] Node 0 active_anon:510836kB inactive_anon:836kB active_file:52kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 350208kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 577.458424] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 577.458449] warn_alloc.cold.118+0xb7/0x1bd [ 577.458464] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 577.463660] Node 1 active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 577.491150] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 577.491177] __vmalloc_node_range+0x522/0x750 [ 577.495906] Node 0 DMA free:10256kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.500233] ? drm_property_create_blob.part.2+0xaa/0x470 [ 577.500250] __vmalloc_node_flags_caller+0x75/0x90 [ 577.505074] lowmem_reserve[]: 0 2537 2539 2539 [ 577.530834] ? drm_property_create_blob.part.2+0xaa/0x470 [ 577.530862] kvmalloc_node+0xd7/0xf0 [ 577.530881] drm_property_create_blob.part.2+0xaa/0x470 [ 577.536421] Node 0 DMA32 free:17632kB min:36092kB low:45112kB high:54132kB active_anon:510836kB inactive_anon:836kB active_file:52kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2601648kB mlocked:0kB kernel_stack:6944kB pagetables:3448kB bounce:0kB free_pcp:276kB local_pcp:28kB free_cma:0kB [ 577.540890] ? find_held_lock+0x36/0x1c0 [ 577.567002] lowmem_reserve[]: 0 0 2 2 [ 577.572514] ? drm_property_free_blob+0x3b0/0x3b0 [ 577.577454] Node 0 Normal free:0kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2460kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.582009] ? drm_unbind_agp+0x20/0x20 [ 577.587537] lowmem_reserve[]: 0 0 0 0 [ 577.591231] ? lock_downgrade+0x900/0x900 [ 577.596593] Node 1 Normal free:26808kB min:53760kB low:67200kB high:80640kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 577.625289] drm_mode_createblob_ioctl+0x1b2/0x570 [ 577.625310] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 577.625336] drm_ioctl_kernel+0x278/0x330 [ 577.629400] lowmem_reserve[]: 0 0 0 0 [ 577.633177] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 577.638018] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10256kB [ 577.663771] ? drm_setversion+0x8b0/0x8b0 [ 577.663794] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 577.663811] ? _copy_from_user+0xdf/0x150 [ 577.667788] Node 0 DMA32: 1286*4kB (UME) 871*8kB (UME) 209*16kB (UME) 40*32kB (UME) 14*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17632kB [ 577.671563] drm_ioctl+0x58f/0xb90 [ 577.675683] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 577.703179] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 577.703204] ? drm_version+0x3d0/0x3d0 [ 577.703224] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 577.708157] Node 1 Normal: 7*4kB (ME) 6*8kB (ME) 7*16kB (UME) 6*32kB (ME) 5*64kB (UME) 4*128kB (UME) 2*256kB (ME) 1*512kB (M) 2*1024kB (M) 1*2048kB (E) 5*4096kB (M) = 26812kB [ 577.712980] ? retint_kernel+0x2d/0x2d [ 577.717148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.720914] ? drm_version+0x3d0/0x3d0 [ 577.725737] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 577.737524] ? drm_version+0x3d0/0x3d0 [ 577.737543] do_vfs_ioctl+0x1de/0x1790 [ 577.741674] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.747203] ? ioctl_preallocate+0x300/0x300 [ 577.747227] ? selinux_file_mprotect+0x620/0x620 [ 577.751357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 577.765567] ? logic_pio_trans_hwaddr+0xd/0x370 [ 577.765589] ? __sanitizer_cov_trace_const_cmp4+0xb/0x20 [ 577.765604] ? put_timespec64+0x10f/0x1b0 [ 577.769161] 272 total pagecache pages [ 577.779788] ? nsecs_to_jiffies+0x30/0x30 [ 577.779807] ? do_syscall_64+0x9a/0x820 [ 577.779828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 577.784659] 0 pages in swap cache [ 577.788549] ? security_file_ioctl+0x94/0xc0 [ 577.788567] ksys_ioctl+0xa9/0xd0 [ 577.788585] __x64_sys_ioctl+0x73/0xb0 [ 577.793332] Swap cache stats: add 0, delete 0, find 0/0 [ 577.809021] do_syscall_64+0x1b9/0x820 [ 577.809039] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 577.809057] ? syscall_return_slowpath+0x5e0/0x5e0 [ 577.812931] Free swap = 0kB [ 577.821765] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 577.821782] ? trace_hardirqs_on_caller+0x310/0x310 [ 577.821798] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 577.825660] Total swap = 0kB [ 577.834226] ? prepare_exit_to_usermode+0x291/0x3b0 [ 577.834248] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 577.834271] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 577.838166] 1965979 pages RAM [ 577.842021] RIP: 0033:0x4579b9 [ 577.850885] 0 pages HighMem/MovableOnly [ 577.855272] Code: Bad RIP value. [ 577.860018] 343429 pages reserved [ 577.868552] RSP: 002b:00007ff3521a3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 577.868567] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004579b9 [ 577.868576] RDX: 0000000020000000 RSI: ffffffffffffffbd RDI: 0000000000000004 [ 577.868587] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 577.873242] 0 pages cma reserved [ 577.878677] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff3521a46d4 [ 577.878686] R13: 00000000004beee9 R14: 00000000004d02a0 R15: 00000000ffffffff [ 577.908736] Mem-Info: [ 577.917305] CPU: 0 PID: 19158 Comm: syz-executor0 Not tainted 4.20.0+ #172 [ 577.968484] active_anon:127703 inactive_anon:209 isolated_anon:0 [ 577.968484] active_file:12 inactive_file:13 isolated_file:0 [ 577.968484] unevictable:0 dirty:0 writeback:0 unstable:0 [ 577.968484] slab_reclaimable:12320 slab_unreclaimable:110333 [ 577.968484] mapped:49154 shmem:245 pagetables:861 bounce:0 [ 577.968484] free:13675 free_pcp:131 free_cma:0 [ 577.971292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.971301] Call Trace: [ 577.974424] Node 0 active_anon:510796kB inactive_anon:836kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 348160kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 577.977597] dump_stack+0x1d3/0x2c6 [ 577.977618] ? dump_stack_print_info.cold.1+0x20/0x20 [ 577.977636] ? trace_hardirqs_on+0x310/0x310 [ 577.977659] warn_alloc.cold.118+0xb7/0x1bd [ 577.977675] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 577.977709] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 577.995067] Node 1 active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 577.996227] __vmalloc_node_range+0x522/0x750 [ 578.048736] Node 0 DMA free:10256kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 578.078275] ? drm_property_create_blob.part.2+0xaa/0x470 [ 578.078292] __vmalloc_node_flags_caller+0x75/0x90 [ 578.078310] ? drm_property_create_blob.part.2+0xaa/0x470 [ 578.078327] kvmalloc_node+0xd7/0xf0 [ 578.078347] drm_property_create_blob.part.2+0xaa/0x470 [ 578.078361] ? find_held_lock+0x36/0x1c0 [ 578.078381] ? drm_property_free_blob+0x3b0/0x3b0 [ 578.078404] ? drm_unbind_agp+0x20/0x20 [ 578.096489] Out of memory: Kill process 8296 (syz-fuzzer) score 76 or sacrifice child [ 578.117827] ? lock_downgrade+0x900/0x900 [ 578.117867] drm_mode_createblob_ioctl+0x1b2/0x570 [ 578.117889] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 578.117904] ? arch_local_save_flags+0x40/0x40 [ 578.117931] drm_ioctl_kernel+0x278/0x330 [ 578.117947] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 578.117964] ? drm_setversion+0x8b0/0x8b0 [ 578.133519] Killed process 8345 (syz-executor3) total-vm:70272kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 578.135497] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 578.209477] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 578.212661] ? _copy_from_user+0xdf/0x150 [ 578.255008] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 578.257141] drm_ioctl+0x58f/0xb90 [ 578.257160] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 578.257185] ? drm_version+0x3d0/0x3d0 [ 578.257210] ? retint_kernel+0x2d/0x2d [ 578.257234] ? do_vfs_ioctl+0xd1/0x1790 [ 578.257256] ? write_comp_data+0x22/0x70 [ 578.297121] lowmem_reserve[]: 0 2537 2539 2539 [ 578.306690] ? drm_version+0x3d0/0x3d0 [ 578.306705] do_vfs_ioctl+0x1de/0x1790 [ 578.306730] ? ioctl_preallocate+0x300/0x300 [ 578.356540] ? selinux_file_mprotect+0x620/0x620 [ 578.361307] ? retint_kernel+0x2d/0x2d [ 578.365217] ? selinux_file_mprotect+0x620/0x620 [ 578.369992] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 578.375548] ? security_file_ioctl+0x94/0xc0 [ 578.379969] ksys_ioctl+0xa9/0xd0 [ 578.383435] __x64_sys_ioctl+0x73/0xb0 [ 578.387353] do_syscall_64+0x1b9/0x820 [ 578.391248] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 578.396620] ? syscall_return_slowpath+0x5e0/0x5e0 [ 578.401558] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 578.406405] ? trace_hardirqs_on_caller+0x310/0x310 [ 578.410126] Node 0 DMA32 free:17632kB min:36092kB low:45112kB high:54132kB active_anon:510796kB inactive_anon:836kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2601648kB mlocked:0kB kernel_stack:6912kB pagetables:3444kB bounce:0kB free_pcp:436kB local_pcp:408kB free_cma:0kB [ 578.411430] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 578.445242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 578.450791] ? prepare_exit_to_usermode+0x291/0x3b0 [ 578.455827] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 578.460707] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 578.465898] RIP: 0033:0x4579b9 [ 578.469106] Code: Bad RIP value. [ 578.472473] RSP: 002b:00007ff352182c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.480200] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004579b9 [ 578.487483] RDX: 0000000020000000 RSI: ffffffffffffffbd RDI: 0000000000000005 [ 578.494748] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 578.502019] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff3521836d4 [ 578.509291] R13: 00000000004beee9 R14: 00000000004d02a0 R15: 00000000ffffffff [ 578.525590] CPU: 1 PID: 8309 Comm: syz-fuzzer Not tainted 4.20.0+ #172 [ 578.532276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.541642] Call Trace: [ 578.544241] dump_stack+0x1d3/0x2c6 [ 578.547888] ? dump_stack_print_info.cold.1+0x20/0x20 [ 578.553081] ? mark_held_locks+0x130/0x130 [ 578.557328] ? mark_held_locks+0x130/0x130 [ 578.561577] dump_header+0x27b/0xf72 [ 578.565397] ? pagefault_out_of_memory+0x197/0x197 [ 578.570338] ? __lock_acquire+0x62f/0x4c20 [ 578.574591] ? mem_cgroup_charge_statistics+0x780/0x780 [ 578.579987] ? print_usage_bug+0xc0/0xc0 [ 578.584060] ? graph_lock+0x270/0x270 [ 578.587904] ? print_usage_bug+0xc0/0xc0 [ 578.591984] ? print_usage_bug+0xc0/0xc0 [ 578.596054] ? graph_lock+0x270/0x270 [ 578.599906] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 578.605460] ? find_held_lock+0x36/0x1c0 [ 578.609548] ? mark_held_locks+0xc7/0x130 [ 578.613710] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 578.618832] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 578.623951] ? lockdep_hardirqs_on+0x421/0x5c0 [ 578.628539] ? trace_hardirqs_on+0xbd/0x310 [ 578.632878] ? kasan_check_read+0x11/0x20 [ 578.637036] ? ___ratelimit+0x36f/0x655 [ 578.641032] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 578.646491] ? trace_hardirqs_on+0x310/0x310 [ 578.650925] ? lock_downgrade+0x900/0x900 [ 578.655101] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 578.660238] ? ___ratelimit+0xaa/0x655 [ 578.664141] ? idr_get_free+0xf70/0xf70 [ 578.668134] ? kasan_check_read+0x11/0x20 [ 578.672289] ? do_raw_spin_unlock+0xa7/0x330 [ 578.676747] oom_kill_process.cold.27+0x10/0x903 [ 578.681508] ? graph_lock+0x270/0x270 [ 578.685314] ? _raw_spin_unlock+0x2c/0x50 [ 578.689469] ? oom_badness+0xe6/0xaa0 [ 578.693275] ? kasan_check_read+0x11/0x20 [ 578.697445] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 578.702738] ? oom_evaluate_task+0x540/0x540 [ 578.707166] ? find_held_lock+0x36/0x1c0 [ 578.711269] ? out_of_memory+0x974/0x1430 [ 578.715423] ? lock_downgrade+0x900/0x900 [ 578.719577] ? check_preemption_disabled+0x48/0x280 [ 578.724625] ? kasan_check_read+0x11/0x20 [ 578.728779] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 578.734078] ? rcu_read_unlock_special+0x370/0x370 [ 578.739018] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 578.744582] ? oom_evaluate_task+0x302/0x540 [ 578.749003] out_of_memory+0xa84/0x1430 [ 578.752997] ? oom_killer_disable+0x3a0/0x3a0 [ 578.757498] ? __alloc_pages_slowpath+0xf5c/0x2df0 [ 578.762452] ? __ww_mutex_check_waiters+0x160/0x160 [ 578.767500] __alloc_pages_slowpath+0x2343/0x2df0 [ 578.772378] ? warn_alloc+0x120/0x120 [ 578.776188] ? mark_held_locks+0x130/0x130 [ 578.780446] ? find_get_entry+0xaae/0x1120 [ 578.784691] ? filemap_map_pages+0x1a30/0x1a30 [ 578.789297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 578.794841] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 578.800392] ? should_fail+0x22d/0xd01 [ 578.804311] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 578.809419] ? graph_lock+0x270/0x270 [ 578.813258] ? __lock_is_held+0xb5/0x140 [ 578.817341] ? ___might_sleep+0x1ed/0x300 [ 578.821509] ? lock_release+0xa00/0xa00 [ 578.825489] ? arch_local_save_flags+0x40/0x40 [ 578.830085] ? xa_load+0x2ba/0x460 [ 578.833641] ? lock_downgrade+0x900/0x900 [ 578.837799] ? check_preemption_disabled+0x48/0x280 [ 578.842827] ? __might_sleep+0x95/0x190 [ 578.846815] __alloc_pages_nodemask+0xad8/0xea0 [ 578.851499] ? __alloc_pages_slowpath+0x2df0/0x2df0 [ 578.856560] ? xa_load+0x2e1/0x460 [ 578.860104] ? xa_clear_mark+0x40/0x40 [ 578.864016] ? up_read_non_owner+0x100/0x100 [ 578.868429] ? graph_lock+0x270/0x270 [ 578.872235] ? print_usage_bug+0xc0/0xc0 [ 578.876328] ? graph_lock+0x270/0x270 [ 578.880158] ? graph_lock+0x270/0x270 [ 578.883961] ? __do_page_cache_readahead+0x663/0x810 [ 578.889072] ? find_held_lock+0x36/0x1c0 [ 578.893151] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 578.898699] alloc_pages_current+0x10c/0x210 [ 578.903126] ? lock_downgrade+0x900/0x900 [ 578.907281] __page_cache_alloc+0x38c/0x5b0 [ 578.911604] ? kasan_check_read+0x11/0x20 [ 578.915786] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 578.921078] ? filemap_range_has_page+0x4e0/0x4e0 [ 578.925932] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 578.931474] ? check_preemption_disabled+0x48/0x280 [ 578.936500] filemap_fault+0x1595/0x25f0 [ 578.940579] ? __lock_page_or_retry+0xa00/0xa00 [ 578.945253] ? mark_held_locks+0x130/0x130 [ 578.949487] ? find_held_lock+0x36/0x1c0 [ 578.953558] ? filemap_map_pages+0xd78/0x1a30 [ 578.958060] ? lock_downgrade+0x900/0x900 [ 578.962213] ? check_preemption_disabled+0x48/0x280 [ 578.967257] ? kasan_check_read+0x11/0x20 [ 578.971413] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 578.976696] ? rcu_read_unlock_special+0x370/0x370 [ 578.981639] ? filemap_map_pages+0xd9f/0x1a30 [ 578.986153] ? find_get_entries_tag+0x1400/0x1400 [ 578.991142] ? destroy_hrtimer_on_stack+0x1c/0x20 [ 578.996003] ? __lock_is_held+0xb5/0x140 [ 579.000086] ? lock_acquire+0x1ed/0x520 [ 579.004071] ? ext4_filemap_fault+0x7a/0xad [ 579.008403] ? lock_release+0xa00/0xa00 [ 579.012385] ? arch_local_save_flags+0x40/0x40 [ 579.016994] ? down_read+0x8d/0x120 [ 579.020627] ? ext4_filemap_fault+0x7a/0xad [ 579.024951] ? __down_interruptible+0x700/0x700 [ 579.029625] ? find_held_lock+0x36/0x1c0 [ 579.033694] ext4_filemap_fault+0x82/0xad [ 579.037857] __do_fault+0x100/0x6b0 [ 579.041509] ? lock_downgrade+0x900/0x900 [ 579.045662] ? follow_pfn+0x2e0/0x2e0 [ 579.049490] ? kasan_check_read+0x11/0x20 [ 579.053641] ? pmd_val+0x88/0x100 [ 579.057098] ? add_mm_counter_fast+0xd0/0xd0 [ 579.061549] ? pmd_val+0x88/0x100 [ 579.065009] ? add_mm_counter_fast+0xd0/0xd0 [ 579.069446] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 579.074995] __handle_mm_fault+0x3956/0x5670 [ 579.079414] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 579.084255] ? graph_lock+0x270/0x270 [ 579.088056] ? graph_lock+0x270/0x270 [ 579.091865] ? print_usage_bug+0xc0/0xc0 [ 579.095940] ? graph_lock+0x270/0x270 [ 579.099748] ? graph_lock+0x270/0x270 [ 579.103569] ? handle_mm_fault+0x42a/0xc70 [ 579.107823] ? lock_downgrade+0x900/0x900 [ 579.112022] ? check_preemption_disabled+0x48/0x280 [ 579.117071] ? kasan_check_read+0x11/0x20 [ 579.121686] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 579.126975] ? rcu_read_unlock_special+0x370/0x370 [ 579.131926] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 579.137475] ? check_preemption_disabled+0x48/0x280 [ 579.142515] handle_mm_fault+0x54f/0xc70 [ 579.146583] ? __handle_mm_fault+0x5670/0x5670 [ 579.151175] ? find_vma+0x34/0x190 [ 579.154733] __do_page_fault+0x5f6/0xd70 [ 579.158814] ? kernel_write+0x120/0x120 [ 579.162810] do_page_fault+0xf2/0x7e0 [ 579.166626] ? vmalloc_sync_all+0x30/0x30 [ 579.170780] ? error_entry+0x70/0xd0 [ 579.174493] ? trace_hardirqs_off_caller+0xbb/0x310 [ 579.179508] ? trace_hardirqs_on_caller+0xc0/0x310 [ 579.184453] ? syscall_return_slowpath+0x5e0/0x5e0 [ 579.189399] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 579.194244] ? trace_hardirqs_on_caller+0x310/0x310 [ 579.199257] ? trace_hardirqs_off+0x310/0x310 [ 579.203763] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 579.209318] ? prepare_exit_to_usermode+0x291/0x3b0 [ 579.214340] ? page_fault+0x8/0x30 [ 579.217892] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 579.222738] ? page_fault+0x8/0x30 [ 579.226323] page_fault+0x1e/0x30 [ 579.229807] RIP: 0033:0x40f9c0 [ 579.233030] Code: Bad RIP value. [ 579.236391] RSP: 002b:000000c42001fef8 EFLAGS: 00010216 [ 579.241753] RAX: ffffffffffffff92 RBX: 0000000021153a23 RCX: 000000000045ddf3 [ 579.249033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000015cdde0 [ 579.256314] RBP: 000000c42001ff20 R08: 0000000000000000 R09: 0000000000000000 [ 579.263581] R10: 000000c42001fed8 R11: 0000000000000202 R12: 0000000000000001 [ 579.270855] R13: 000000c4314a8240 R14: 0000000000000001 R15: 0000000000000000 [ 579.298695] lowmem_reserve[]: 0 0 2 2 [ 579.301459] Mem-Info: [ 579.302538] Node 0 Normal free:0kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2460kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 579.304984] active_anon:127678 inactive_anon:209 isolated_anon:0 [ 579.304984] active_file:12 inactive_file:13 isolated_file:0 [ 579.304984] unevictable:0 dirty:0 writeback:0 unstable:0 [ 579.304984] slab_reclaimable:12320 slab_unreclaimable:110333 [ 579.304984] mapped:40979 shmem:245 pagetables:861 bounce:0 [ 579.304984] free:16050 free_pcp:483 free_cma:0 [ 579.364881] Node 0 active_anon:510696kB inactive_anon:836kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163916kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 348160kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 579.393038] lowmem_reserve[]: 0 0 0 0 [ 579.394992] Node 1 active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 579.402956] Node 1 Normal free:26812kB min:53760kB low:67200kB high:80640kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 579.424799] Node 0 DMA free:10256kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 579.479401] lowmem_reserve[]: 0 2537 2539 2539 [ 579.484070] Node 0 DMA32 free:108344kB min:36092kB low:45112kB high:54132kB active_anon:510696kB inactive_anon:836kB active_file:48kB inactive_file:1048kB unevictable:0kB writepending:0kB present:3129332kB managed:2601648kB mlocked:0kB kernel_stack:6912kB pagetables:3444kB bounce:0kB free_pcp:2040kB local_pcp:644kB free_cma:0kB [ 579.513495] lowmem_reserve[]: 0 0 0 0 [ 579.517731] lowmem_reserve[]: 0 0 2 2 [ 579.521657] Node 0 Normal free:0kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2460kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 579.547754] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10256kB [ 579.559697] lowmem_reserve[]: 0 0 0 0 [ 579.563534] Node 1 [ 579.563575] Normal free:26812kB min:53760kB low:67200kB high:80640kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 579.563582] lowmem_reserve[]: 0 0 0 0 [ 579.598885] Node 0 DMA32: 1686*4kB (UME) 1615*8kB (UME) 2010*16kB (UME) 1111*32kB (UME) 835*64kB (UM) 144*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 159248kB [ 579.615302] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 579.630752] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10256kB [ 579.642705] Node 1 Normal: 7*4kB (ME) 6*8kB (ME) 7*16kB (UME) 6*32kB (ME) 5*64kB (UME) 4*128kB (UME) 2*256kB (ME) 1*512kB (M) 2*1024kB (M) 1*2048kB (E) 5*4096kB (M) = 26812kB [ 579.656382] Node 0 DMA32: 1849*4kB (UME) 1909*8kB (UME) 2155*16kB (UME) 1251*32kB (UME) 970*64kB (UM) 335*128kB (U) 33*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 210588kB [ 579.676352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 579.680733] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 579.700830] Node 1 Normal: 7*4kB (ME) 6*8kB (ME) 7*16kB (UME) 6*32kB (ME) 5*64kB (UME) 4*128kB (UME) 2*256kB (ME) 1*512kB (M) 2*1024kB (M) 1*2048kB (E) 5*4096kB (M) = 26812kB [ 579.720947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 579.730475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 579.739572] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 579.741723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 579.757026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 579.789944] 960 total pagecache pages [ 579.793766] 0 pages in swap cache [ 579.796425] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 579.808524] Swap cache stats: add 0, delete 0, find 0/0 [ 579.812495] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 579.813938] Free swap = 0kB [ 579.830165] Total swap = 0kB [ 579.832466] 1034 total pagecache pages [ 579.833209] 1965979 pages RAM [ 579.844292] 0 pages in swap cache [ 579.851226] 0 pages HighMem/MovableOnly [ 579.855833] 343429 pages reserved [ 579.859511] 0 pages cma reserved [ 579.859730] Swap cache stats: add 0, delete 0, find 0/0 [ 579.863625] Out of memory: Kill process 8296 (syz-fuzzer) score 76 or sacrifice child [ 579.876925] Killed process 8398 (syz-executor5) total-vm:70272kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 579.886356] Free swap = 0kB [ 579.890038] Total swap = 0kB [ 579.893199] 1965979 pages RAM [ 579.903028] 0 pages HighMem/MovableOnly [ 579.923493] 343429 pages reserved [ 579.943812] 0 pages cma reserved [ 580.647075] device bridge_slave_1 left promiscuous mode [ 580.653719] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.743796] device bridge_slave_0 left promiscuous mode [ 580.756496] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.936510] team0 (unregistering): Port device team_slave_1 removed [ 580.969063] team0 (unregistering): Port device team_slave_0 removed [ 580.988747] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 581.051864] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 581.215499] bond0 (unregistering): Released all slaves 07:01:36 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3, 0x73d}, 0x29b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup2(r0, r0) write$P9_RXATTRWALK(r2, &(0x7f00000001c0)={0xf}, 0xf) sendto$inet6(r0, &(0x7f0000000100)="7203ec35264475a241e9e8a17aeb9922c6", 0x101d0, 0x0, 0x0, 0x1f) read$FUSE(r2, &(0x7f0000000700), 0x1000) read$FUSE(r2, &(0x7f0000001700), 0x1000) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=""/241, &(0x7f0000000040)=""/96, &(0x7f0000000940)=""/250}) 07:01:36 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0xffffff7f}}, 0x2) 07:01:36 executing program 3 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:01:36 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x24100, 0xf0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x1, 0x7fffffff, 0x3, 0xffff, 0xf, 0x8000, 0x1, 0x7, 0x3, 0x4}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:01:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7ff, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, r2}}, 0x30) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x3fffff, 0x0) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x4, 0x3}}, 0x10) 07:01:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x80400) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) close(r0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, {0x2, 0x1, 0xfa07, 0x9, 0x0, 0x4}}, 0x8) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80040, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x90, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3b6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc81}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffffff81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_NET={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) 07:01:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:37 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) open(&(0x7f0000000180)='./file0\x00', 0xa4000, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x7, @mcast2, 0x1800000000000000}}, 0x8, 0x800}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={r4, 0x9}, &(0x7f0000000140)=0x8) 07:01:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/rfcomm\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x1, 0x200003) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000219000/0x1000)=nil, 0x1000}) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x10000, 0x10000) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000040)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:37 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x8ff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000100)={0xf, @raw_data="1020cb9307c5f3a53cd5dde7364482a2c330e122279cbfe18c966c4e7f6062f46f3b2f46fdfef6ff2e0440a27f44d38731b9946616da548024c430274d935954c3e97ce2714f2b01c833e652aaf40ecd66d8cebf86fc583416bec63873ec68dbad3dd1b4da4904c4f69785746df92f2baae0d1d992ff9fbe2cff751a9eaaf54e5bbc141584361f9de531b5c9dfc07619543963b38e3de05415101cdda9da7f46bde8256e70527c1c42de0687f57bd5e3d006b2bdfb9126c858b1dc5852718b6276b4198451429d6e"}) ppoll(&(0x7f0000000000)=[{r0}], 0x2000012c, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:01:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x8000, 0x80001) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0xf356, &(0x7f0000000080)=0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x200000, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000180)) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) [ 586.887240] device bridge_slave_1 left promiscuous mode [ 586.892796] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.957523] device bridge_slave_0 left promiscuous mode [ 586.962997] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.574204] team0 (unregistering): Port device team_slave_1 removed [ 590.586249] team0 (unregistering): Port device team_slave_0 removed [ 590.599182] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 590.671523] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 590.747720] bond0 (unregistering): Released all slaves [ 591.037594] IPVS: ftp: loaded support on port[0] = 21 [ 591.262834] IPVS: ftp: loaded support on port[0] = 21 [ 592.566227] chnl_net:caif_netlink_parms(): no params data found [ 592.672901] chnl_net:caif_netlink_parms(): no params data found [ 593.054831] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.061435] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.070208] device bridge_slave_0 entered promiscuous mode [ 593.123517] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.130533] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.141417] device bridge_slave_1 entered promiscuous mode [ 593.202601] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.209103] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.216028] device bridge_slave_0 entered promiscuous mode [ 593.265810] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.272332] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.280078] device bridge_slave_1 entered promiscuous mode [ 593.351526] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 593.426777] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 593.446927] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 593.515520] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 593.603365] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 593.611095] team0: Port device team_slave_0 added [ 593.668523] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 593.676043] team0: Port device team_slave_1 added [ 593.686641] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 593.694097] team0: Port device team_slave_0 added [ 593.740529] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 593.747690] team0: Port device team_slave_1 added [ 593.753412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 593.792194] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 593.809150] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 593.843230] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 594.034228] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 594.043797] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 594.078060] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 594.108424] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 594.648582] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 594.680166] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 596.616806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.779257] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 596.932464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.942501] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 596.949355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 596.964300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 597.120130] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 597.143377] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 597.149540] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.294221] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 597.300501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 597.315672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 597.382901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 597.390581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 597.402089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 597.416782] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.423190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.431039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 597.528933] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 597.535070] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.603736] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 597.610950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 597.622161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 597.630310] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.636703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.756542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 597.763625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 597.780939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 597.800845] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.807293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.820294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 597.831366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 597.840835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 597.989618] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 597.996778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 598.004649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 598.013418] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.019829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.032856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 598.040312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 598.205070] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 598.212990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 598.229816] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 598.236848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 598.244805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 598.264266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 598.407388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 598.414246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 598.451798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 598.458750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 598.474678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 598.633818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 598.640730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 598.648963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 598.657143] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 598.674198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 598.685227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 598.700992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 598.860784] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 598.869822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 598.883016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 598.906836] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 598.913894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 598.927979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 599.071348] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 599.078284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 599.086116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 599.261379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 599.268208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 599.275807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 600.003989] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 600.424360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.503154] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 600.840116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.026316] FAULT_INJECTION: forcing a failure. [ 601.026316] name failslab, interval 1, probability 0, space 0, times 0 [ 601.038228] CPU: 1 PID: 20016 Comm: syz-executor3 Not tainted 4.20.0+ #172 [ 601.045247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.054602] Call Trace: [ 601.057223] dump_stack+0x1d3/0x2c6 [ 601.060836] ? dump_stack_print_info.cold.1+0x20/0x20 [ 601.066021] ? mark_held_locks+0xc7/0x130 [ 601.070173] should_fail.cold.4+0xa/0x17 [ 601.074234] ? retint_kernel+0x2d/0x2d [ 601.078126] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 601.083225] ? trace_hardirqs_off+0x310/0x310 [ 601.087738] ? find_held_lock+0x36/0x1c0 [ 601.091817] ? ___might_sleep+0x1ed/0x300 [ 601.095965] ? arch_local_save_flags+0x40/0x40 [ 601.100565] ? drm_unbind_agp+0x20/0x20 [ 601.104540] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 601.110085] __should_failslab+0x124/0x180 [ 601.114336] should_failslab+0x9/0x14 [ 601.118150] __kmalloc+0x2e0/0x770 [ 601.122210] ? avc_ss_reset+0x190/0x190 [ 601.126188] ? drm_ioctl+0x4ab/0xb90 [ 601.129933] drm_ioctl+0x4ab/0xb90 [ 601.133474] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 601.138372] ? drm_version+0x3d0/0x3d0 [ 601.142285] ? ___might_sleep+0x1ed/0x300 [ 601.146434] ? arch_local_save_flags+0x40/0x40 [ 601.151023] ? drm_version+0x3d0/0x3d0 [ 601.154936] do_vfs_ioctl+0x1de/0x1790 [ 601.158847] ? ioctl_preallocate+0x300/0x300 [ 601.163297] ? selinux_file_mprotect+0x620/0x620 [ 601.168057] ? __sb_end_write+0xd9/0x110 [ 601.172139] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 601.177673] ? fput+0x130/0x1a0 [ 601.180956] ? do_syscall_64+0x9a/0x820 [ 601.184935] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 601.190471] ? security_file_ioctl+0x94/0xc0 [ 601.194889] ksys_ioctl+0xa9/0xd0 [ 601.198346] __x64_sys_ioctl+0x73/0xb0 [ 601.202237] do_syscall_64+0x1b9/0x820 [ 601.206160] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 601.211544] ? syscall_return_slowpath+0x5e0/0x5e0 [ 601.216476] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 601.221322] ? trace_hardirqs_on_caller+0x310/0x310 [ 601.226349] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 601.231410] ? prepare_exit_to_usermode+0x291/0x3b0 [ 601.236432] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 601.241285] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 601.246470] RIP: 0033:0x4579b9 [ 601.249666] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 601.268566] RSP: 002b:00007f6412d2bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.276300] RAX: ffffffffffffffda RBX: 00007f6412d2bc90 RCX: 00000000004579b9 [ 601.283583] RDX: 00000000200000c0 RSI: ffffffffffffffbd RDI: 0000000000000004 [ 601.290858] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 601.298160] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6412d2c6d4 [ 601.305439] R13: 00000000004beee9 R14: 00000000004d02a0 R15: 0000000000000005 07:01:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x4927) 07:01:54 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0xffffffff88400000}}, 0x2) 07:01:54 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000440)='security.evm\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="04145aa319acdd066e4a1e8b2c2b3f1b7015841b14ba66ecc4d8dd04b7"], 0x16, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) r2 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) r4 = getuid() setresuid(r2, r3, r4) close(r1) syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x1, 0x2) dup(r0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/enforce\x00', 0x10502, 0x0) syz_open_dev$usb(&(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0x5, 0x100) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$sock_int(r5, 0x1, 0xb, &(0x7f0000000000)=0x7, 0x4) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r7 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0xfffffffffffffffb, 0x8000) ioctl$IOC_PR_RELEASE(r7, 0x401070ca, 0x0) r8 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfffffffffffffd63, 0x80) write$P9_RVERSION(r8, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(0xffffffffffffffff, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x0, 0x0, 0xfffe, 0x1, 0xfffffffffffffffe}, 0xfffffffffffffffe, 0x0, 0x1}) 07:01:54 executing program 3 (fault-call:4 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:01:54 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000100)='/dev/userio\x00'}, 0x30) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) kcmp(r1, r2, 0x0, r0, r0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000200)) [ 601.535045] FAULT_INJECTION: forcing a failure. [ 601.535045] name failslab, interval 1, probability 0, space 0, times 0 [ 601.560410] CPU: 1 PID: 20026 Comm: syz-executor3 Not tainted 4.20.0+ #172 [ 601.567466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.576825] Call Trace: [ 601.579420] dump_stack+0x1d3/0x2c6 [ 601.583060] ? dump_stack_print_info.cold.1+0x20/0x20 [ 601.588318] ? __perf_event_period+0x5c0/0x5c0 [ 601.588342] should_fail.cold.4+0xa/0x17 [ 601.596975] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 601.596990] ? lockdep_hardirqs_on+0x421/0x5c0 [ 601.597006] ? retint_kernel+0x2d/0x2d [ 601.597039] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 601.597072] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 601.597087] ? lockdep_hardirqs_on+0x421/0x5c0 [ 601.597101] ? retint_kernel+0x2d/0x2d [ 601.597114] ? trace_hardirqs_on_caller+0xc0/0x310 [ 601.597129] ? find_held_lock+0x36/0x1c0 [ 601.637621] ? ___might_sleep+0x1ed/0x300 [ 601.641768] ? arch_local_save_flags+0x40/0x40 [ 601.646360] __should_failslab+0x124/0x180 [ 601.650600] should_failslab+0x9/0x14 [ 601.654400] kmem_cache_alloc_node_trace+0x270/0x740 [ 601.659525] __get_vm_area_node+0x130/0x3a0 [ 601.663846] __vmalloc_node_range+0xc4/0x750 [ 601.668267] ? drm_property_create_blob.part.2+0xaa/0x470 [ 601.673804] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 601.678571] ? lockdep_hardirqs_on+0x421/0x5c0 [ 601.683153] ? retint_kernel+0x2d/0x2d [ 601.687044] ? drm_property_create_blob.part.2+0xaa/0x470 [ 601.692600] __vmalloc_node_flags_caller+0x75/0x90 [ 601.697529] ? drm_property_create_blob.part.2+0xaa/0x470 [ 601.703068] kvmalloc_node+0xd7/0xf0 [ 601.706813] drm_property_create_blob.part.2+0xaa/0x470 [ 601.712191] ? find_held_lock+0x36/0x1c0 [ 601.716268] ? drm_property_free_blob+0x3b0/0x3b0 [ 601.721120] ? drm_unbind_agp+0x20/0x20 [ 601.725094] ? lock_downgrade+0x900/0x900 [ 601.729248] drm_mode_createblob_ioctl+0x1b2/0x570 [ 601.734178] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 601.739027] drm_ioctl_kernel+0x278/0x330 [ 601.743187] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 601.748027] ? drm_setversion+0x8b0/0x8b0 [ 601.752193] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 601.757726] ? _copy_from_user+0xdf/0x150 [ 601.761897] drm_ioctl+0x58f/0xb90 [ 601.765432] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 601.770285] ? drm_version+0x3d0/0x3d0 [ 601.774178] ? ___might_sleep+0x1ed/0x300 [ 601.778323] ? arch_local_save_flags+0x40/0x40 [ 601.782902] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 601.787667] ? drm_version+0x3d0/0x3d0 [ 601.791554] do_vfs_ioctl+0x1de/0x1790 [ 601.795445] ? ioctl_preallocate+0x300/0x300 [ 601.799872] ? selinux_file_mprotect+0x620/0x620 [ 601.804644] ? __sb_end_write+0xd9/0x110 [ 601.808705] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 601.814236] ? fput+0x130/0x1a0 [ 601.817526] ? do_syscall_64+0x9a/0x820 [ 601.821547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 601.827086] ? security_file_ioctl+0x94/0xc0 [ 601.831515] ksys_ioctl+0xa9/0xd0 [ 601.834970] __x64_sys_ioctl+0x73/0xb0 [ 601.838887] do_syscall_64+0x1b9/0x820 [ 601.842796] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 601.848162] ? syscall_return_slowpath+0x5e0/0x5e0 [ 601.853090] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 601.857933] ? trace_hardirqs_on_caller+0x310/0x310 [ 601.862961] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 601.868024] ? prepare_exit_to_usermode+0x291/0x3b0 [ 601.873065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 601.877915] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 601.883100] RIP: 0033:0x4579b9 [ 601.886290] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 601.905185] RSP: 002b:00007f6412d2bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.912907] RAX: ffffffffffffffda RBX: 00007f6412d2bc90 RCX: 00000000004579b9 [ 601.920182] RDX: 00000000200000c0 RSI: ffffffffffffffbd RDI: 0000000000000004 [ 601.927446] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 601.934713] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6412d2c6d4 [ 601.942010] R13: 00000000004beee9 R14: 00000000004d02a0 R15: 0000000000000005 07:01:54 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000004c0)={{0xcc, 0x8, 0x7, 0x331, 0x31d, 0x10001, 0x158, 0x80000000}, "e1c7a435cd6afae982079fb61e132f431b10679ec58e773c5a609d3d15ae215d9e1c05380e915f1851da40b58faad717e1b7d33021b7d290d512bfc092039a8214a510c7960dea4bb2d2b5ccb6776ee8f5c8bca7a4373430a67b5e94c10cce142db1250ce70781adfdd2958347f4dc0cf9c554cd5fc7f215710b78c72db86d5a73af6e7ba3d9c459464720d707df7bcd9dbbefe6076ed989224e870cd44176fdfc8e10054f9281d30e73ee2410b92c053aeeeae5e8a65c4a98fefb0085a420b42c5a907fee58cedbd6e4b1b526c17730211359cb62995f430fa2b4fd05ee", [[], [], [], [], [], [], []]}, 0x7fe) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x81, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="25f783795c24d78f462f21f3a0664747d419a7a8ed794f6be506ab5fa9c70651a910cf13fe3c687fca9a6c84f90b3937a83eae52d61ab1c87897e64f3dda5663ef171e10affe5dde804f201ec2740c488921e97c310eef624d2d1ba4a5ca9219700881b77e39651b", 0x68, 0x800}, {&(0x7f00000001c0)="04bb53bead143c4565671056a18ed14dacc4d48543d856286fc6f3a54af43d8b3013cd55e34bfe32b87a1487a3b67fb79a0eb3b2b24fc5659c8632d87a7fd890a9c5a1fc5b4a459c0fc671729204675bc4953cdb66e1b6e5de8a31631f922c63e68a85016ad0578a5937d17ed3e088ddc485b22a1cb31e6d227fb0544a807899d5c6451c46f6b341e2dd6b79bc7274982b5c5c83547d3e63f8aea6429e4bf7df4e38d9ac7fdac9d7295aba9794a1f64680ca6538caa908d89404d37c85c1e8a4064d17ecf3fc4d1f46bca9fad2fd8b09926d39b9", 0xd4, 0x40}], 0x4040, &(0x7f00000003c0)=ANY=[@ANYBLOB="756d61736b3d307830303030303030b03030303030303038de2c6572726f72733d72656d6f756e742d726f2c6e0700756f74612c6e6f71756f74612c636f6e746578743d720100742c6f626a5f726f6c653d2f6465762f6472692f6361726423002c3ee08899b8ee6643b41f151ff67d00b640bdaef66b3d18c45ee69731cbc4a620fac7c16853fbc2b3eebf715ef3d213ab7d763c0de1763777cfd4090688990c9bc27914bc461a6115b9c215b59d0bafb5abd2af0a56431bc8c4616d05b88fa226e64bac3a2007998254e011a65daf093ad98867"]) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = pkey_alloc(0x0, 0x2) llistxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/56, 0x38) pkey_free(r2) 07:01:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) clone(0x1a02100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100), 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, 0x0, &(0x7f00000001c0)) [ 602.217819] jfs: Unrecognized mount option "umask=0x0000000°00000008Þ" or missing value [ 602.253255] syz-executor3: vmalloc: allocation failure: 4194392 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 602.265440] syz-executor3 cpuset=syz3 mems_allowed=0-1 [ 602.271815] CPU: 0 PID: 20026 Comm: syz-executor3 Not tainted 4.20.0+ #172 [ 602.278856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.288224] Call Trace: [ 602.290838] dump_stack+0x1d3/0x2c6 [ 602.294504] ? dump_stack_print_info.cold.1+0x20/0x20 [ 602.299734] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 602.305307] warn_alloc.cold.118+0xb7/0x1bd [ 602.309633] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 602.314481] ? __get_vm_area_node+0x130/0x3a0 [ 602.318991] ? rcu_read_lock_sched_held+0x108/0x120 [ 602.324055] ? __get_vm_area_node+0x2e5/0x3a0 [ 602.328575] __vmalloc_node_range+0x472/0x750 [ 602.333090] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 602.337852] ? lockdep_hardirqs_on+0x421/0x5c0 [ 602.342448] ? retint_kernel+0x2d/0x2d [ 602.346438] ? drm_property_create_blob.part.2+0xaa/0x470 [ 602.351974] __vmalloc_node_flags_caller+0x75/0x90 [ 602.356959] ? drm_property_create_blob.part.2+0xaa/0x470 [ 602.362509] kvmalloc_node+0xd7/0xf0 [ 602.366240] drm_property_create_blob.part.2+0xaa/0x470 [ 602.371621] ? find_held_lock+0x36/0x1c0 [ 602.375692] ? drm_property_free_blob+0x3b0/0x3b0 [ 602.380552] ? drm_unbind_agp+0x20/0x20 [ 602.384532] ? lock_downgrade+0x900/0x900 [ 602.388719] drm_mode_createblob_ioctl+0x1b2/0x570 [ 602.393655] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 602.398495] drm_ioctl_kernel+0x278/0x330 [ 602.402641] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 602.407491] ? drm_setversion+0x8b0/0x8b0 [ 602.411650] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 602.417232] ? _copy_from_user+0xdf/0x150 [ 602.421423] drm_ioctl+0x58f/0xb90 [ 602.424990] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 602.429846] ? drm_version+0x3d0/0x3d0 [ 602.433764] ? ___might_sleep+0x1ed/0x300 [ 602.437949] ? arch_local_save_flags+0x40/0x40 [ 602.442534] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 602.447308] ? drm_version+0x3d0/0x3d0 [ 602.451205] do_vfs_ioctl+0x1de/0x1790 [ 602.455108] ? ioctl_preallocate+0x300/0x300 [ 602.459526] ? selinux_file_mprotect+0x620/0x620 [ 602.464287] ? __sb_end_write+0xd9/0x110 [ 602.468354] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 602.473905] ? fput+0x130/0x1a0 [ 602.477231] ? do_syscall_64+0x9a/0x820 [ 602.481248] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 602.486787] ? security_file_ioctl+0x94/0xc0 [ 602.491216] ksys_ioctl+0xa9/0xd0 [ 602.494705] __x64_sys_ioctl+0x73/0xb0 [ 602.498624] do_syscall_64+0x1b9/0x820 [ 602.502524] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 602.507900] ? syscall_return_slowpath+0x5e0/0x5e0 [ 602.512830] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 602.517673] ? trace_hardirqs_on_caller+0x310/0x310 [ 602.522692] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 602.527706] ? prepare_exit_to_usermode+0x291/0x3b0 [ 602.532724] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 602.537569] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 602.542798] RIP: 0033:0x4579b9 [ 602.545989] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 07:01:55 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x40) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={r3, @broadcast, @remote}, 0xc) fcntl$setlease(r1, 0x400, 0x3) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 602.564909] RSP: 002b:00007f6412d2bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.572626] RAX: ffffffffffffffda RBX: 00007f6412d2bc90 RCX: 00000000004579b9 [ 602.579896] RDX: 00000000200000c0 RSI: ffffffffffffffbd RDI: 0000000000000004 [ 602.587159] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 602.594426] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6412d2c6d4 [ 602.601692] R13: 00000000004beee9 R14: 00000000004d02a0 R15: 0000000000000005 [ 602.651207] jfs: Unrecognized mount option "umask=0x0000000°00000008Þ" or missing value 07:01:55 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x10000000000002) write$evdev(r3, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r4 = memfd_create(&(0x7f0000000180)='/dev/input/event#\x00', 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="232107d48b59dc8a8d26efa8ef4974a9b80f29ce8c681a6d42f21ac6ff56a0bf852dd8e6cbf258e22952479d1834090a6ab0fc686f1e83076641be62a5"], 0x3d) socket$vsock_dgram(0x28, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:01:55 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e00c462913878fe3e0f1110c442019dccd3196f") execve(&(0x7f0000000740)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x200001e4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), 0x4) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 07:01:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0xf, 0x0, 0x29, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0xff, 0x8008, 0x4, 0x2, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="3fed0500db4b08000100ffffff7f0108ff2ccdd9d73efbd0dc9ec96cb2d3"], 0x14) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0x8, &(0x7f0000000300)="a6bcb76e1840fd7bc7b4cd24e61fc4b199c38680fee9924eba73b3079e107c887867700513ccfea2f5fc260157e17bb867edec0f5b60c5efa1f4df2320d065e62d803fe7fee1d92afbec1707af10da9a7f71afecb582c371ed758632c9d13dcb6d04d33e720707a5a5155b9f9c7357d44eae561960c51d1d8f6ced891fb5fc119cfe5ccaf783b7ca7808310cbb8d1bf2ff0c182fb3a1344b7cc08c2f33391fed391748a10868853bbe6057c61aaee259b7d7") close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x80000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xff, 0x4000) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0xfff, 0x1f, 0x2, 0x777a}) 07:01:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x7f, 0x2, 0xffffffffbf9de140, 0x100000000, 0x7}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0xfce6, 0x8000, 0xe2, 0x400000000000, 0x3ff}, &(0x7f0000000180)=0x14) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000300)=0x30) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 603.125641] warn_alloc_show_mem: 1 callbacks suppressed [ 603.125660] Mem-Info: [ 603.157241] active_anon:118864 inactive_anon:208 isolated_anon:0 [ 603.157241] active_file:1276 inactive_file:5312 isolated_file:0 [ 603.157241] unevictable:0 dirty:76 writeback:0 unstable:0 [ 603.157241] slab_reclaimable:11839 slab_unreclaimable:112116 [ 603.157241] mapped:53816 shmem:246 pagetables:1056 bounce:0 [ 603.157241] free:1277570 free_pcp:490 free_cma:0 [ 603.298605] Node 0 active_anon:477692kB inactive_anon:832kB active_file:5104kB inactive_file:21244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215364kB dirty:304kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 61440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 603.393536] Node 1 active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 603.444471] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 603.503036] lowmem_reserve[]: 0 2537 2539 2539 [ 603.510014] Node 0 DMA32 free:1318304kB min:36092kB low:45112kB high:54132kB active_anon:475640kB inactive_anon:832kB active_file:5104kB inactive_file:21244kB unevictable:0kB writepending:304kB present:3129332kB managed:2601648kB mlocked:0kB kernel_stack:7456kB pagetables:4076kB bounce:0kB free_pcp:2772kB local_pcp:1456kB free_cma:0kB [ 603.547707] lowmem_reserve[]: 0 0 2 2 [ 603.551628] Node 0 Normal free:0kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2460kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 07:01:56 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x6}}, 0x2) 07:01:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x2, &(0x7f0000000040)={0x5}, 0x8) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2080, 0x0) getpeername$ax25(r1, &(0x7f00000001c0)={{0x3, @default}, [@default, @netrom, @netrom, @bcast, @netrom, @default, @bcast, @null]}, &(0x7f0000000080)=0x48) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000001840)={&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f00000002c0)=""/194, 0xc2}, {&(0x7f00000003c0)=""/253, 0xfd}, {&(0x7f00000004c0)=""/115, 0x73}, {&(0x7f0000000540)=""/6, 0x6}, {&(0x7f0000000580)=""/55, 0x37}, {&(0x7f00000005c0)=""/127, 0x7f}, {&(0x7f0000000640)=""/11, 0xb}, {&(0x7f0000000680)=""/254, 0xfe}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x9}, 0x7588f5990dc2cfcc) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000140)={{0x1, 0x3, 0xffff}, 0x80, 0x6, 0xfffffffffffff001}) [ 603.600433] lowmem_reserve[]: 0 0 0 0 [ 603.604351] Node 1 Normal free:3774800kB min:53760kB low:67200kB high:80640kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 603.772160] lowmem_reserve[]: 0 0 0 0 [ 603.785034] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 603.829801] Node 0 DMA32: 4686*4kB (UME) 6132*8kB (UME) 4554*16kB (UME) 3485*32kB (UME) 774*64kB (UME) 1078*128kB (UME) 647*256kB (U) 306*512kB (UM) 236*1024kB (UM) 92*2048kB (U) 27*4096kB (U) = 1302680kB [ 603.876562] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 603.918481] Node 1 Normal: 94*4kB (UME) 295*8kB (UME) 310*16kB (UME) 98*32kB (UME) 50*64kB (UME) 39*128kB (UME) 23*256kB (UE) 30*512kB (UM) 25*1024kB (UM) 13*2048kB (UE) 899*4096kB (UM) = 3774800kB [ 603.972928] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.009786] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 604.032854] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.051450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 604.060484] 6844 total pagecache pages [ 604.064561] 0 pages in swap cache [ 604.068567] Swap cache stats: add 0, delete 0, find 0/0 [ 604.074042] Free swap = 0kB [ 604.077660] Total swap = 0kB 07:01:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:01:56 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, r3) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="792f6db5e5780c27c7eedda957469a2e", 0x10) 07:01:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) r1 = getuid() r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001800)='/dev/sequencer2\x00', 0x8000, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000001840)='tls\x00', 0x4) syz_mount_image$btrfs(&(0x7f0000000280)='btrfs\x00', &(0x7f00000002c0)='./file0\x00', 0x33, 0x7, &(0x7f0000001680)=[{&(0x7f0000000300)="ee425b59115cb586a39fb6b16c9865a86cba3eb817b0ab087b886d8cf47e0b6e3dde9a9ccdf37727332b182fb80c28f50d78ea4de4fefd52", 0x38, 0x20}, {&(0x7f0000000340)="3b0a0236aefc65df87ae99362ad230a375a61f42324c3e6eb2613147474c828684d0fcd5ef48529903735f6de3470d92f45fbb08856fc5d1e80dfaab7dc0cfce335f4108218cdb91e668e3c0594c069786839ee01a54949c5e8c670cf0a1d12d82b8730487a6ef3d86fc4770974085c3f63f8d0f5da90379e58a27c61391beaa0266d0eeff7adba1f3c8b89b2d069cf6c33e9d4ac1f57ba5e9abf00d42413b5140e12fa172ae559e8363aa9f16490b31a54821387d57395fdb81ef7ef7ad49ebcfc74a53890ed7d3f13742dfb96517e7deb91892604319b6b52c806d831e4cb74afcfff59a716b824e508c9d8b7ebc", 0xef, 0x7fff}, {&(0x7f0000000440)="e5b31840966333dfeaeaf05a463c6709feb7215b7254e96f13e9762ff8407d3ed4880fbe8b71b8c5650612d085a8327308d4912591648a7175fb3fc32d24f30ac85bb2f5e0845204a175c145a05898d8cfeb1cc61a355ecb046c6c5d89eb3648d62e31fcdb79173fe65f", 0x6a, 0x9}, {&(0x7f00000004c0)="3751f411369ce9e4c3e5fc157884efd8bf0af18aeff2f5f86d9678d88d2fa01b7a24984902a47194a7db43c83aa399219513d668bf7e30b56338d1074087ff0c0c4997d4d2b17adb69c37452a12c7874fa9073cbec6acc3b71b20300ad6e43c400ff2561e6bd304f4423450dd170c6f94198b1f4a8db75ef08dfedee85489bf497334d5e16fe369e8d886126cdc0e6cbfbe722c221c2426bd87d44dca300f05432398fb2bab313473210e73355eb2ced6d1fbedaaa432ccb6dfad2e57ee31df586f5a72433de73041e1ec37c8d24bbe095c91030ffa1680b12c9333b55571f23f714be1ed591caeeee59", 0xea, 0x81}, {&(0x7f00000005c0)="6d92249ad607a31b59efcabdf670655bce0b1d8ce505a19b4e16759ed51c7f984194bc21b9e099d54567128863382ded399781e654b4751ce79e5f18ae1526a25919d0d8d1d5affccfa3cc8a0105556d226f5705b3544353269bdde58c73193a39a60034324e6d4b1b42dfb274bc6b27b3", 0x71, 0x10000}, {&(0x7f0000000640)="2754ceec", 0x4, 0x4}, {&(0x7f0000000680)="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", 0x1000, 0x9}], 0x12880, &(0x7f0000001740)={[{@notreelog='notreelog'}, {@fragment_all='fragment=all'}, {@usebackuproot='usebackuproot'}, {@noenospc_debug='noenospc_debug'}], [{@dont_measure='dont_measure'}, {@smackfsdef={'smackfsdef', 0x3d, '^+'}}, {@measure='measure'}, {@fowner_lt={'fowner<', r1}}, {@pcr={'pcr', 0x3d, 0xa}}]}) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000018c0)={0x3, &(0x7f0000001880)=[0x3, 0xd21, 0x0]}) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x0, 0xf, 0x3, "ff10dd560ae9dd72050c623e69b7a848321ff5ff42f724ad6b2dc29181d9f501", 0x42475251}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @initdev, @broadcast}, &(0x7f0000000240)=0xc) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x80, 0x5, 0x9, 0xf1, 0xa1e, 0x4, 0x2, 0x2, 0x0, 0x1b5c, 0x7, 0x10000}, {0x5, 0x6, 0xffffffffffffff7f, 0x8, 0xfffffffffffffffb, 0x1, 0xfffffffffffffff9, 0x7fffffff, 0x7, 0xffffffffffffff7f, 0x7, 0x3, 0x5}, {0x879d, 0xaf9, 0x6, 0x0, 0x6, 0x6, 0x2, 0x1, 0x32, 0xbee, 0x100000001, 0x46, 0x81}], 0x40}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f00000001c0)={{0xfffffffffffffffc, 0x3, 0x401, 0x0, 0x4}, 0x0, 0x1, 0xc94d}) [ 604.080792] 1965979 pages RAM [ 604.084015] 0 pages HighMem/MovableOnly [ 604.088484] 343429 pages reserved [ 604.092057] 0 pages cma reserved 07:01:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) socketpair(0x3, 0x800, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14, 0x800) connect$packet(r1, &(0x7f0000000280)={0x11, 0x11, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x40000000000000, 0x408000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000040)=""/54) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:59 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x10800, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r2, 0xffffffffffffffb7}, 0x8) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:01:59 executing program 5: syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x0) fcntl$addseals(r3, 0x409, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) umount2(0x0, 0x0) 07:01:59 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f0000000000)="5fb2a26d74dc2b7265e590aee7ac41ca344ba2e7675013173b78ce898d32f088144631560bd3e76d505288dfda663ccdd4fe1e2e5c170eb2b5aac28505ec1cbb3c714a5c0c3ad60ba92aaaedf9465b1fcd3e4d4e27ae0848ae0a45b0a54d811dd48abaa159b97bd122c7230d41109f747e98a1fcff439b4f1c76194798004cde6d619480edc9005f9d5c8abcba9c3f") recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:01:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00004b49, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:01:59 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x40, @dev={0xfe, 0x80, [], 0x29}}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x20}, 0x9}, @in={0x2, 0x4e21, @remote}], 0x58) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000000)={0x2, 0x5, 0x6, 0x7ff, 0x9, 0x2}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:59 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0xffffff7f00000000}}, 0x2) 07:01:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00005421, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:01:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00005460, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:01:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x5, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xaa00000000000000, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:01:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00004b47, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:01:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0x7, &(0x7f0000000040)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:02:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff80086601, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:00 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/create\x00', 0x2, 0x0) 07:02:00 executing program 5: syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x0) fcntl$addseals(r3, 0x409, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) umount2(0x0, 0x0) [ 612.413376] oom_reaper: reaped process 20163 (syz-executor2), now anon-rss:0kB, file-rss:32704kB, shmem-rss:0kB [ 612.463438] rsyslogd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 612.486354] rsyslogd cpuset=/ mems_allowed=0-1 [ 612.490979] CPU: 0 PID: 8150 Comm: rsyslogd Not tainted 4.20.0+ #172 [ 612.497477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.506825] Call Trace: [ 612.509417] dump_stack+0x1d3/0x2c6 [ 612.513069] ? dump_stack_print_info.cold.1+0x20/0x20 [ 612.518264] ? mark_held_locks+0x130/0x130 [ 612.522498] ? mark_held_locks+0x130/0x130 [ 612.526756] dump_header+0x27b/0xf72 [ 612.530509] ? pagefault_out_of_memory+0x197/0x197 [ 612.535459] ? __lock_acquire+0x62f/0x4c20 [ 612.539711] ? mem_cgroup_charge_statistics+0x780/0x780 [ 612.545087] ? print_usage_bug+0xc0/0xc0 [ 612.549170] ? graph_lock+0x270/0x270 [ 612.552991] ? print_usage_bug+0xc0/0xc0 [ 612.557088] ? print_usage_bug+0xc0/0xc0 [ 612.561182] ? graph_lock+0x270/0x270 [ 612.565033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 612.570582] ? find_held_lock+0x36/0x1c0 [ 612.574657] ? mark_held_locks+0xc7/0x130 [ 612.578845] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 612.583989] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 612.589125] ? lockdep_hardirqs_on+0x421/0x5c0 [ 612.593727] ? trace_hardirqs_on+0xbd/0x310 [ 612.598066] ? kasan_check_read+0x11/0x20 [ 612.602222] ? ___ratelimit+0x36f/0x655 [ 612.606201] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 612.611652] ? trace_hardirqs_on+0x310/0x310 [ 612.616066] ? lock_downgrade+0x900/0x900 [ 612.620248] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 612.625357] ? ___ratelimit+0xaa/0x655 [ 612.629276] ? idr_get_free+0xf70/0xf70 [ 612.633252] ? find_held_lock+0x36/0x1c0 [ 612.637329] oom_kill_process.cold.27+0x10/0x903 [ 612.642089] ? graph_lock+0x270/0x270 [ 612.645910] ? check_preemption_disabled+0x48/0x280 [ 612.650944] ? kasan_check_read+0x11/0x20 [ 612.655100] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 612.660387] ? oom_evaluate_task+0x540/0x540 [ 612.664842] ? find_held_lock+0x36/0x1c0 [ 612.668963] ? out_of_memory+0x974/0x1430 [ 612.673117] ? lock_downgrade+0x900/0x900 [ 612.677268] ? check_preemption_disabled+0x48/0x280 [ 612.682288] ? kasan_check_read+0x11/0x20 [ 612.686436] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 612.691730] ? rcu_read_unlock_special+0x370/0x370 [ 612.696698] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 612.702236] ? oom_evaluate_task+0x302/0x540 [ 612.706677] out_of_memory+0xa84/0x1430 [ 612.710663] ? oom_killer_disable+0x3a0/0x3a0 [ 612.715173] ? __alloc_pages_slowpath+0xf5c/0x2df0 [ 612.720124] ? __ww_mutex_check_waiters+0x160/0x160 [ 612.725183] __alloc_pages_slowpath+0x2343/0x2df0 [ 612.730050] ? warn_alloc+0x120/0x120 [ 612.733849] ? mark_held_locks+0x130/0x130 [ 612.738117] ? find_get_entry+0xaae/0x1120 [ 612.742383] ? filemap_map_pages+0x1a30/0x1a30 [ 612.747019] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 612.752564] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 612.758112] ? should_fail+0x22d/0xd01 [ 612.762044] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 612.767152] ? graph_lock+0x270/0x270 [ 612.770983] ? __lock_is_held+0xb5/0x140 [ 612.775109] ? ___might_sleep+0x1ed/0x300 [ 612.779253] ? lock_release+0xa00/0xa00 [ 612.783243] ? arch_local_save_flags+0x40/0x40 [ 612.787827] ? xa_load+0x2ba/0x460 [ 612.791367] ? lock_downgrade+0x900/0x900 [ 612.795517] ? check_preemption_disabled+0x48/0x280 [ 612.800544] ? __might_sleep+0x95/0x190 [ 612.804525] __alloc_pages_nodemask+0xad8/0xea0 [ 612.809206] ? __alloc_pages_slowpath+0x2df0/0x2df0 [ 612.814228] ? xa_load+0x2e1/0x460 [ 612.817802] ? xa_clear_mark+0x40/0x40 [ 612.821699] ? graph_lock+0x270/0x270 [ 612.825503] ? print_usage_bug+0xc0/0xc0 [ 612.829566] ? graph_lock+0x270/0x270 [ 612.833381] ? graph_lock+0x270/0x270 [ 612.837216] ? __do_page_cache_readahead+0x663/0x810 [ 612.842344] ? find_held_lock+0x36/0x1c0 [ 612.846443] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 612.851992] alloc_pages_current+0x10c/0x210 [ 612.856412] ? lock_downgrade+0x900/0x900 [ 612.860568] __page_cache_alloc+0x38c/0x5b0 [ 612.864903] ? kasan_check_read+0x11/0x20 [ 612.869059] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 612.874354] ? filemap_range_has_page+0x4e0/0x4e0 [ 612.879220] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 612.884768] ? check_preemption_disabled+0x48/0x280 [ 612.889789] filemap_fault+0x1595/0x25f0 [ 612.893862] ? __lock_page_or_retry+0xa00/0xa00 [ 612.898565] ? mark_held_locks+0x130/0x130 [ 612.902811] ? find_held_lock+0x36/0x1c0 [ 612.906895] ? filemap_map_pages+0xd78/0x1a30 [ 612.911392] ? lock_downgrade+0x900/0x900 [ 612.915543] ? check_preemption_disabled+0x48/0x280 [ 612.920565] ? kasan_check_read+0x11/0x20 [ 612.924720] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 612.930012] ? rcu_read_unlock_special+0x370/0x370 [ 612.934957] ? filemap_map_pages+0xd9f/0x1a30 [ 612.939474] ? find_get_entries_tag+0x1400/0x1400 [ 612.944331] ? __lock_is_held+0xb5/0x140 [ 612.948402] ? lock_acquire+0x1ed/0x520 [ 612.952386] ? ext4_filemap_fault+0x7a/0xad [ 612.956719] ? lock_release+0xa00/0xa00 [ 612.960697] ? arch_local_save_flags+0x40/0x40 [ 612.965278] ? trace_hardirqs_on+0x310/0x310 [ 612.969698] ? find_held_lock+0x36/0x1c0 [ 612.973774] ? down_read+0x8d/0x120 [ 612.977402] ? ext4_filemap_fault+0x7a/0xad [ 612.981726] ? __down_interruptible+0x700/0x700 [ 612.986398] ? trace_hardirqs_on+0xbd/0x310 [ 612.991227] ext4_filemap_fault+0x82/0xad [ 612.995398] __do_fault+0x100/0x6b0 [ 612.999052] ? do_syslog+0x1572/0x1790 [ 613.002955] ? follow_pfn+0x2e0/0x2e0 [ 613.006761] ? do_syslog+0x30e/0x1790 [ 613.010559] ? pmd_val+0x88/0x100 [ 613.014027] ? add_mm_counter_fast+0xd0/0xd0 [ 613.018432] ? pmd_val+0x88/0x100 [ 613.021922] ? add_mm_counter_fast+0xd0/0xd0 [ 613.026331] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 613.031361] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 613.036939] __handle_mm_fault+0x3956/0x5670 [ 613.041372] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 613.046234] ? graph_lock+0x270/0x270 [ 613.050036] ? print_usage_bug+0xc0/0xc0 [ 613.054099] ? graph_lock+0x270/0x270 [ 613.057921] ? graph_lock+0x270/0x270 [ 613.061735] ? handle_mm_fault+0x42a/0xc70 [ 613.065972] ? lock_downgrade+0x900/0x900 [ 613.070610] ? check_preemption_disabled+0x48/0x280 [ 613.075626] ? kasan_check_read+0x11/0x20 [ 613.079789] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 613.085097] ? rcu_read_unlock_special+0x370/0x370 [ 613.090045] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 613.095592] ? check_preemption_disabled+0x48/0x280 [ 613.100609] handle_mm_fault+0x54f/0xc70 [ 613.104664] ? __handle_mm_fault+0x5670/0x5670 [ 613.109244] ? find_vma+0x34/0x190 [ 613.112785] __do_page_fault+0x5f6/0xd70 [ 613.116841] ? kernel_write+0x120/0x120 [ 613.120944] do_page_fault+0xf2/0x7e0 [ 613.124747] ? vmalloc_sync_all+0x30/0x30 [ 613.128915] ? error_entry+0x70/0xd0 [ 613.132633] ? trace_hardirqs_off_caller+0xbb/0x310 [ 613.137641] ? trace_hardirqs_on_caller+0xc0/0x310 [ 613.142565] ? syscall_return_slowpath+0x5e0/0x5e0 [ 613.147489] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 613.152327] ? trace_hardirqs_on_caller+0x310/0x310 [ 613.157352] ? trace_hardirqs_off+0x310/0x310 [ 613.161846] ? prepare_exit_to_usermode+0x291/0x3b0 [ 613.166870] ? page_fault+0x8/0x30 [ 613.170471] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 613.175314] ? page_fault+0x8/0x30 [ 613.178869] page_fault+0x1e/0x30 [ 613.182369] RIP: 0033:0x7eff679fa1fd [ 613.186084] Code: Bad RIP value. [ 613.189439] RSP: 002b:00007eff64f99e30 EFLAGS: 00010293 [ 613.194793] RAX: 0000000000000076 RBX: 0000000001c5e4b0 RCX: 00007eff679fa1fd [ 613.202069] RDX: 0000000000000fff RSI: 00007eff667ce5a0 RDI: 0000000000000004 [ 613.209332] RBP: 0000000000000000 R08: 0000000001c49260 R09: 0000000000000000 [ 613.216609] R10: 6b205d3133313239 R11: 0000000000000293 R12: 000000000065e420 [ 613.223901] R13: 00007eff64f9a9c0 R14: 00007eff6803f040 R15: 0000000000000003 [ 613.247748] Mem-Info: [ 613.247926] syz-executor2: vmalloc: allocation failure, allocated 2345529344 of 2928738304 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 613.250207] active_anon:100615 inactive_anon:209 isolated_anon:0 [ 613.250207] active_file:16 inactive_file:15 isolated_file:0 [ 613.250207] unevictable:0 dirty:0 writeback:0 unstable:0 [ 613.250207] slab_reclaimable:11412 slab_unreclaimable:111525 [ 613.250207] mapped:49154 shmem:245 pagetables:860 bounce:0 [ 613.250207] free:14767 free_pcp:440 free_cma:0 [ 613.296345] syz-executor2 cpuset=syz2 mems_allowed=0-1 [ 613.302314] CPU: 1 PID: 20163 Comm: syz-executor2 Not tainted 4.20.0+ #172 [ 613.302897] Node 0 active_anon:402448kB inactive_anon:836kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 47104kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 613.309328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.309334] Call Trace: [ 613.309352] dump_stack+0x1d3/0x2c6 [ 613.309370] ? dump_stack_print_info.cold.1+0x20/0x20 [ 613.309392] ? trace_hardirqs_on+0x310/0x310 [ 613.309411] warn_alloc.cold.118+0xb7/0x1bd [ 613.336958] Node 1 active_anon:12kB inactive_anon:0kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 613.346153] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 613.348780] Node 0 DMA free:10260kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 613.352373] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 613.357566] lowmem_reserve[]: 0 2537 2539 2539 [ 613.361931] __vmalloc_node_range+0x522/0x750 [ 613.366217] Node 0 DMA32 free:46668kB min:36092kB low:45112kB high:54132kB active_anon:402448kB inactive_anon:836kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2601648kB mlocked:0kB kernel_stack:6912kB pagetables:3440kB bounce:0kB free_pcp:1588kB local_pcp:116kB free_cma:0kB [ 613.392161] ? drm_property_create_blob.part.2+0xaa/0x470 [ 613.392193] __vmalloc_node_flags_caller+0x75/0x90 [ 613.392209] ? drm_property_create_blob.part.2+0xaa/0x470 [ 613.392242] kvmalloc_node+0xd7/0xf0 [ 613.392260] drm_property_create_blob.part.2+0xaa/0x470 [ 613.397961] lowmem_reserve[]: 0 0 2 2 [ 613.423205] ? find_held_lock+0x36/0x1c0 [ 613.423224] ? drm_property_free_blob+0x3b0/0x3b0 [ 613.423266] ? drm_unbind_agp+0x20/0x20 [ 613.428851] Node 0 Normal free:0kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2460kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 613.433390] ? lock_downgrade+0x900/0x900 [ 613.437898] lowmem_reserve[]: 0 0 0 0 [ 613.466766] drm_mode_createblob_ioctl+0x1b2/0x570 [ 613.466817] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 613.466832] ? arch_local_save_flags+0x40/0x40 [ 613.466856] drm_ioctl_kernel+0x278/0x330 [ 613.472372] Node 1 Normal free:26840kB min:53760kB low:67200kB high:80640kB active_anon:12kB inactive_anon:0kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 613.477318] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 613.477348] ? drm_setversion+0x8b0/0x8b0 [ 613.477405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 613.477435] ? _copy_from_user+0xdf/0x150 [ 613.482947] lowmem_reserve[]: 0 0 0 0 [ 613.486671] drm_ioctl+0x58f/0xb90 [ 613.486686] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 613.486723] ? drm_version+0x3d0/0x3d0 [ 613.486760] ? ___might_sleep+0x1ed/0x300 [ 613.492155] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10260kB [ 613.495971] ? arch_local_save_flags+0x40/0x40 [ 613.500050] Node 0 DMA32: 1262*4kB (UME) 4036*8kB (UME) 457*16kB (UME) 65*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46728kB [ 613.504852] ? __might_fault+0x12b/0x1e0 [ 613.504866] ? lock_downgrade+0x900/0x900 [ 613.508867] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 613.534599] ? drm_version+0x3d0/0x3d0 [ 613.534614] do_vfs_ioctl+0x1de/0x1790 [ 613.534636] ? ioctl_preallocate+0x300/0x300 [ 613.534655] ? selinux_file_mprotect+0x620/0x620 [ 613.534671] ? logic_pio_trans_hwaddr+0xd/0x370 [ 613.539666] Node 1 Normal: 6*4kB (UME) 6*8kB (ME) 5*16kB (UME) 4*32kB (ME) 3*64kB (ME) 2*128kB (ME) 2*256kB (UE) 2*512kB (M) 2*1024kB (M) 1*2048kB (E) 5*4096kB (M) = 26840kB [ 613.542631] ? __sanitizer_cov_trace_const_cmp4+0xb/0x20 [ 613.550903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 613.552367] ? put_timespec64+0x10f/0x1b0 [ 613.556970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 613.561072] ? nsecs_to_jiffies+0x30/0x30 [ 613.588787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 613.593582] ? do_syscall_64+0x9a/0x820 [ 613.597745] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 613.603244] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 613.607417] 276 total pagecache pages [ 613.611206] ? security_file_ioctl+0x94/0xc0 [ 613.614728] 0 pages in swap cache [ 613.619553] ksys_ioctl+0xa9/0xd0 [ 613.619570] __x64_sys_ioctl+0x73/0xb0 [ 613.619587] do_syscall_64+0x1b9/0x820 [ 613.619604] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 613.619620] ? syscall_return_slowpath+0x5e0/0x5e0 [ 613.623488] Swap cache stats: add 0, delete 0, find 0/0 [ 613.627621] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 613.627636] ? trace_hardirqs_on_caller+0x310/0x310 [ 613.627655] ? prepare_exit_to_usermode+0x291/0x3b0 [ 613.627673] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 613.639818] Free swap = 0kB [ 613.644354] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 613.658051] Total swap = 0kB [ 613.662070] RIP: 0033:0x4579b9 [ 613.666200] 1965979 pages RAM [ 613.676853] Code: Bad RIP value. [ 613.676861] RSP: 002b:00007f4351f4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.676884] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004579b9 [ 613.676893] RDX: 0000000020000000 RSI: ffffffffffffffbd RDI: 0000000000000008 [ 613.676901] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 613.676909] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4351f4f6d4 [ 613.676917] R13: 00000000004beee9 R14: 00000000004d02a0 R15: 00000000ffffffff [ 613.897975] 0 pages HighMem/MovableOnly [ 613.901952] 343429 pages reserved [ 613.905398] 0 pages cma reserved [ 613.908963] Unreclaimable slab info: [ 613.913337] Name Used Total [ 613.919033] pid_2 125KB 148KB [ 613.924466] batadv_tt_change_cache 4KB 7KB [ 613.930307] batadv_tl_cache 6KB 12KB [ 613.935686] TIPC 12KB 14KB [ 613.941092] SCTPv6 18KB 20KB [ 613.946534] DCCPv6 17KB 21KB [ 613.951905] DCCP 16KB 20KB [ 613.957335] bridge_fdb_cache 12KB 15KB [ 613.962701] fib6_nodes 131KB 136KB [ 613.968134] ip6_dst_cache 207KB 247KB [ 613.973493] RAWv6 87KB 97KB [ 613.978912] UDPv6 3KB 7KB [ 613.984294] TCPv6 23KB 29KB [ 613.990204] nf_conntrack 2KB 7KB [ 613.995646] sd_ext_cdb 0KB 7KB [ 614.001059] scsi_sense_cache 1056KB 1060KB [ 614.006508] virtio_scsi_cmd 16KB 16KB [ 614.011891] sgpool-128 8KB 8KB [ 614.017324] sgpool-64 4KB 12KB [ 614.022688] sgpool-32 2KB 15KB [ 614.029023] sgpool-16 1KB 7KB [ 614.034414] sgpool-8 0KB 7KB [ 614.039853] mqueue_inode_cache 12KB 21KB [ 614.045332] bio_post_read_ctx 14KB 15KB [ 614.051067] bio-2 14KB 15KB [ 614.056472] jfs_mp 7KB 7KB [ 614.061971] nfs_commit_data 3KB 14KB [ 614.067400] nfs_write_data 32KB 32KB [ 614.072805] ext4_system_zone 1KB 7KB [ 614.078278] bio-1 1KB 7KB [ 614.083664] pid_namespace 2KB 11KB [ 614.089112] rpc_buffers 17KB 25KB [ 614.094480] rpc_tasks 2KB 7KB [ 614.099905] UNIX 65KB 65KB [ 614.105288] tcp_bind_bucket 1KB 8KB [ 614.110703] inet_peer_cache 0KB 4KB [ 614.116093] ip_fib_trie 19KB 23KB [ 614.121507] ip_fib_alias 91KB 94KB [ 614.126935] ip_dst_cache 5KB 40KB [ 614.132323] RAW 51KB 57KB [ 614.137728] UDP 19KB 32KB [ 614.143099] TCP 8KB 11KB [ 614.148533] hugetlbfs_inode_cache 2KB 7KB [ 614.154248] fscache_cookie_jar 1KB 7KB [ 614.160651] eventpoll_pwq 13KB 39KB [ 614.166040] eventpoll_epi 24KB 82KB [ 614.171476] inotify_inode_mark 21KB 59KB [ 614.176979] request_queue 164KB 164KB [ 614.182357] blkdev_ioc 13KB 23KB [ 614.187761] bio-0 367KB 367KB [ 614.193128] biovec-max 1765KB 1806KB [ 614.198561] biovec-64 240KB 244KB [ 614.203940] biovec-16 22KB 22KB [ 614.209349] bio_integrity_payload 1KB 7KB [ 614.215065] khugepaged_mm_slot 4KB 23KB [ 614.219294] Mem-Info: [ 614.220585] dmaengine-unmap-256 2KB 6KB [ 614.228544] dmaengine-unmap-128 1KB 3KB [ 614.229210] active_anon:100615 inactive_anon:209 isolated_anon:0 [ 614.229210] active_file:16 inactive_file:765 isolated_file:0 [ 614.229210] unevictable:0 dirty:0 writeback:0 unstable:0 [ 614.229210] slab_reclaimable:11212 slab_unreclaimable:111243 [ 614.229210] mapped:49679 shmem:245 pagetables:860 bounce:0 [ 614.229210] free:170662 free_pcp:759 free_cma:0 [ 614.234081] dmaengine-unmap-16 0KB 4KB [ 614.234107] dmaengine-unmap-2 0KB 3KB [ 614.234117] audit_buffer 0KB 3KB [ 614.234159] skbuff_ext_cache 17KB 19KB [ 614.234185] skbuff_fclone_cache 90KB 217KB [ 614.234196] skbuff_head_cache 2938KB 5257KB [ 614.234206] configfs_dir_cache 0KB 8KB [ 614.234217] file_lock_cache 0KB 7KB [ 614.234243] file_lock_ctx 0KB 3KB [ 614.234255] fsnotify_mark_connector 13KB 39KB [ 614.234266] net_namespace 69KB 69KB [ 614.234278] shmem_inode_cache 4986KB 5381KB [ 614.334572] task_delay_info 208KB 265KB [ 614.336213] Node 0 active_anon:402448kB inactive_anon:836kB active_file:40kB inactive_file:3936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:199416kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 47104kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 614.340002] taskstats 34KB 111KB [ 614.340015] proc_dir_entry 724KB 742KB [ 614.340026] pde_opener 2KB 11KB [ 614.340037] seq_file 127KB 330KB [ 614.340048] sigqueue 94KB 129KB [ 614.340060] kernfs_node_cache 13613KB 13639KB [ 614.401242] mnt_cache 106KB 116KB [ 614.406687] filp 4346KB 5133KB [ 614.412053] names_cache 68828KB 68879KB [ 614.417461] iint_cache 24KB 67KB [ 614.421175] Node 1 active_anon:12kB inactive_anon:0kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 614.422857] hashtab_node 118KB 119KB [ 614.455094] Node 0 DMA free:10260kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 614.466395] ebitmap_node 999KB 1169KB [ 614.486679] avtab_node 1012KB 1013KB [ 614.492066] avc_node 50KB 59KB [ 614.496436] lowmem_reserve[]: 0 2537 2539 2539 [ 614.497485] selinux_file_security 250KB 368KB [ 614.502188] Node 0 DMA32 free:779104kB min:36092kB low:45112kB high:54132kB active_anon:402448kB inactive_anon:836kB active_file:40kB inactive_file:3936kB unevictable:0kB writepending:0kB present:3129332kB managed:2601648kB mlocked:0kB kernel_stack:6912kB pagetables:3440kB bounce:0kB free_pcp:2684kB local_pcp:1256kB free_cma:0kB [ 614.507762] selinux_inode_security 2957KB 3524KB [ 614.507774] key_jar 5KB 15KB [ 614.507785] uts_namespace 3KB 11KB [ 614.507811] nsproxy 2KB 7KB [ 614.507821] vm_area_struct 12022KB 12119KB [ 614.507831] mm_struct 2738KB 2762KB [ 614.507842] fs_cache 219KB 292KB [ 614.507852] files_cache 818KB 836KB [ 614.507862] signal_cache 1513KB 1538KB [ 614.507882] sighand_cache 476KB 513KB [ 614.507899] task_struct 6583KB 6620KB [ 614.507911] cred_jar 1363KB 1676KB [ 614.537292] lowmem_reserve[]: 0 0 2 2 [ 614.606086] anon_vma_chain 4121KB 5484KB [ 614.611508] anon_vma 178KB 604KB [ 614.616997] pid 44KB 204KB [ 614.622361] Acpi-Operand 155KB 186KB [ 614.627765] Acpi-ParseExt 7KB 7KB [ 614.633131] Acpi-Parse 41KB 47KB [ 614.638587] Acpi-State 52KB 63KB [ 614.643958] Acpi-Namespace 21KB 23KB [ 614.649373] numa_policy 0KB 7KB [ 614.654741] debug_objects_cache 903KB 1094KB [ 614.660340] trace_event_file 265KB 266KB [ 614.665705] ftrace_event_field 378KB 385KB [ 614.671236] pool_workqueue 94KB 100KB [ 614.676662] task_group 5KB 7KB [ 614.679296] Node 0 Normal free:0kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2460kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 614.682028] page->ptl 2512KB 3039KB [ 614.713341] kmalloc-2M 2050KB 2050KB [ 614.718754] kmalloc-512k 2056KB 2056KB [ 614.724120] kmalloc-256k 516KB 516KB [ 614.729537] kmalloc-128k 520KB 520KB [ 614.734937] kmalloc-64k 2706KB 2772KB [ 614.740342] kmalloc-32k 54549KB 54549KB [ 614.745713] kmalloc-16k 4636KB 4801KB [ 614.751239] kmalloc-8k 2912KB 2953KB [ 614.756648] kmalloc-4k 17930KB 17960KB [ 614.762016] kmalloc-2k 12626KB 12705KB [ 614.767420] kmalloc-1k 7717KB 7898KB [ 614.772237] lowmem_reserve[]: 0 0 0 0 [ 614.772797] kmalloc-512 6258KB 6296KB [ 614.776654] Node 1 Normal free:240692kB min:53760kB low:67200kB high:80640kB active_anon:12kB inactive_anon:0kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:2764kB local_pcp:1504kB free_cma:0kB [ 614.776698] lowmem_reserve[]: 0 0 0 0 [ 614.782057] kmalloc-256 3937KB 3945KB [ 614.819462] kmalloc-128 981KB 1004KB [ 614.824826] kmalloc-96 1228KB 1748KB [ 614.835436] kmalloc-64 2655KB 3564KB [ 614.840949] kmalloc-32 2836KB 3531KB [ 614.847197] Node 0 DMA: 645*4kB (U) 4*8kB (U) 4*16kB (U) 1*32kB (U) 3*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 13140kB [ 614.852329] kmalloc-192 1596KB 1756KB [ 614.866056] kmem_cache 267KB 273KB [ 614.876404] Out of memory: Kill process 8296 (syz-fuzzer) score 60 or sacrifice child [ 614.877184] Node 0 DMA32: 2600*4kB (UME) 6045*8kB (UME) 5455*16kB (UME) 4045*32kB (UM) 1576*64kB (U) 1389*128kB (U) 317*256kB (U) 83*512kB (U) 75*1024kB (U) 12*2048kB (U) 0*4096kB = 779160kB [ 614.884459] Killed process 19255 (syz-executor3) total-vm:70272kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 614.922031] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 614.942175] Node 1 Normal: 1153*4kB (UME) 1282*8kB (UME) 1260*16kB (UME) 1152*32kB (UME) 1112*64kB (UME) 1098*128kB (UME) 91*256kB (UE) 4*512kB (UM) 2*1024kB (M) 1*2048kB (E) 5*4096kB (M) = 333524kB [ 614.966774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 614.975737] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 614.989745] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 614.999705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 615.013708] 1349 total pagecache pages [ 615.018778] 0 pages in swap cache [ 615.022236] Swap cache stats: add 0, delete 0, find 0/0 [ 615.032391] Free swap = 0kB [ 615.035406] Total swap = 0kB [ 615.039695] 1965979 pages RAM [ 615.043010] 0 pages HighMem/MovableOnly [ 615.051965] 343429 pages reserved [ 615.055464] 0 pages cma reserved [ 615.692831] device bridge_slave_1 left promiscuous mode [ 615.698817] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.777453] device bridge_slave_0 left promiscuous mode [ 615.782934] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.985355] team0 (unregistering): Port device team_slave_1 removed [ 616.009849] team0 (unregistering): Port device team_slave_0 removed [ 616.029381] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 616.109643] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 616.271794] bond0 (unregistering): Released all slaves 07:02:10 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:02:10 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x7000000}}, 0x2) 07:02:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x2) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x501480, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:02:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffc020660b, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:10 executing program 5: syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 07:02:10 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x3f, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0x6, &(0x7f0000000100)="d493fb6d428979940f3f663aeb69cd2180d4b181718a1ee7ff6388184741a8628d6a0dfba65b076e66dc5fd3d6898be9c1d741288c2f9131ab74fd68db87b78ce93eeb") recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff, 0x1}}) 07:02:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x6a19) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) close(r1) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080), 0xfffffe8a) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f00000001c0)={{0x2, 0x3, 0xfffe, 0x4000}, 0x0, 0x0, 0xc94d}) 07:02:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0xfffffffffffffffe, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:02:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(0xffffffffffffffff, 0xffffffffffffffbd, &(0x7f00000000c0)) close(0xffffffffffffffff) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:02:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) getsockname$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:02:11 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) readv(r0, &(0x7f0000003380)=[{&(0x7f0000000100)=""/107, 0x6b}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/26, 0x1a}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/130, 0x82}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/62, 0x3e}, {&(0x7f00000032c0)=""/27, 0x1b}, {&(0x7f0000003300)=""/67, 0x43}], 0x9) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) rmdir(&(0x7f0000000080)='./file0\x00') r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000034c0)='/dev/sequencer\x00', 0x400, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000003580)={'broute\x00', 0x0, 0x4, 0x16, [], 0x1, &(0x7f0000003500)=[{}], &(0x7f0000003540)=""/22}, &(0x7f0000003600)=0x78) r2 = syz_open_dev$vcsa(&(0x7f0000003440)='/dev/vcsa#\x00', 0x0, 0x30480) bind$netlink(r2, &(0x7f0000003480)={0x10, 0x0, 0x25dfdbfb}, 0xc) 07:02:11 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43, 0x9, 0x1, {0x7, 0x2, 0x10000, 0x2c08, 0x3, 0x7, 0x21, 0x8, 0xd6}}, 0x43) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 620.828014] IPVS: ftp: loaded support on port[0] = 21 [ 621.334257] chnl_net:caif_netlink_parms(): no params data found [ 621.540590] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.549294] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.557032] device bridge_slave_0 entered promiscuous mode [ 621.587651] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.594060] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.601653] device bridge_slave_1 entered promiscuous mode [ 621.690995] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 621.726788] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 621.817547] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 621.824646] team0: Port device team_slave_0 added [ 621.854318] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 621.862102] team0: Port device team_slave_1 added [ 621.891225] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 621.921472] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 622.032013] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 622.064811] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 622.358283] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 623.442494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.544493] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 623.650969] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 623.657308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 623.664576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 623.760634] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 623.766938] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.868436] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 623.875421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 623.883768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 623.891757] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.898160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.905684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 623.995873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 624.003015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 624.011519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 624.019442] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.025787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.119642] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 624.126544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 624.229789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 624.236638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 624.339455] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 624.346275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 624.355864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 624.364213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 624.459372] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 624.466199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 624.474750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 624.574739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 624.581809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 624.589862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 624.690313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 624.697439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 624.705632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.282086] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 625.531102] 8021q: adding VLAN 0 to HW filter on device batadv0 07:02:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xc0045878, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0x8, &(0x7f0000000300)="a6bcb76e1840fd7bc7b4cd24e61fc4b199c38680fee9924eba73b3079e107c887867700513ccfea2f5fc260157e17bb867edec0f5b60c5efa1f4df2320d065e62d803fe7fee1d92afbec1707af10da9a7f71afecb582c371ed758632c9d13dcb6d04d33e720707a5a5155b9f9c7357d44eae561960c51d1d8f6ced891fb5fc119cfe5ccaf783b7ca7808310cbb8d1bf2ff0c182fb3a1344b7cc08c2f33391fed391748a10868853bbe6057c61aaee259b7d7") close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x80000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xff, 0x4000) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0xfff, 0x1f, 0x2, 0x777a}) 07:02:18 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000100)=0x7) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x188}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100000001}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x2b}, @remote, @local}, 0xc) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:02:18 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x200000000000000}}, 0x2) 07:02:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000004c0)={{0xcc, 0x8, 0x7, 0x331, 0x31d, 0x10001, 0x158, 0x80000000}, "e1c7a435cd6afae982079fb61e132f431b10679ec58e773c5a609d3d15ae215d9e1c05380e915f1851da40b58faad717e1b7d33021b7d290d512bfc092039a8214a510c7960dea4bb2d2b5ccb6776ee8f5c8bca7a4373430a67b5e94c10cce142db1250ce70781adfdd2958347f4dc0cf9c554cd5fc7f215710b78c72db86d5a73af6e7ba3d9c459464720d707df7bcd9dbbefe6076ed989224e870cd44176fdfc8e10054f9281d30e73ee2410b92c053aeeeae5e8a65c4a98fefb0085a420b42c5a907fee58cedbd6e4b1b526c17730211359cb62995f430fa2b4fd05ee", [[], [], [], [], [], [], []]}, 0x7fe) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x81, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="25f783795c24d78f462f21f3a0664747d419a7a8ed794f6be506ab5fa9c70651a910cf13fe3c687fca9a6c84f90b3937a83eae52d61ab1c87897e64f3dda5663ef171e10affe5dde804f201ec2740c488921e97c310eef624d2d1ba4a5ca9219700881b77e39651b", 0x68, 0x800}, {&(0x7f00000001c0)="04bb53bead143c4565671056a18ed14dacc4d48543d856286fc6f3a54af43d8b3013cd55e34bfe32b87a1487a3b67fb79a0eb3b2b24fc5659c8632d87a7fd890a9c5a1fc5b4a459c0fc671729204675bc4953cdb66e1b6e5de8a31631f922c63e68a85016ad0578a5937d17ed3e088ddc485b22a1cb31e6d227fb0544a807899d5c6451c46f6b341e2dd6b79bc7274982b5c5c83547d3e63f8aea6429e4bf7df4e38d9ac7fdac9d7295aba9794a1f64680ca6538caa908d89404d37c85c1e8a4064d17ecf3fc4d1f46bca9fad2fd8b09926d39b9", 0xd4, 0x40}], 0x4040, &(0x7f00000003c0)=ANY=[@ANYBLOB="756d61736b3d307830303030303030b03030303030303038de2c6572726f72733d72656d6f756e742d726f2c6e0700756f74612c6e6f71756f74612c636f6e746578743d720100742c6f626a5f726f6c653d2f6465762f6472692f6361726423002c3ee08899b8ee6643b41f151ff67d00b640bdaef66b3d18c45ee69731cbc4a620fac7c16853fbc2b3eebf715ef3d213ab7d763c0de1763777cfd4090688990c9bc27914bc461a6115b9c215b59d0bafb5abd2af0a56431bc8c4616d05b88fa226e64bac3a2007998254e011a65daf093ad98867"]) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = pkey_alloc(0x0, 0x2) llistxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/56, 0x38) pkey_free(r2) 07:02:18 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x402081, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x10000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:02:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00005451, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x80400) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) close(r0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, {0x2, 0x1, 0xfa07, 0x9, 0x0, 0x4}}, 0x8) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 625.847103] jfs: Unrecognized mount option "umask=0x0000000°00000008Þ" or missing value 07:02:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mremap(&(0x7f00007c0000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000054000/0x2000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000500)={0x7, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x1c, &(0x7f00000006c0)=[@in6={0xa, 0x0, 0x0, @mcast1}]}, &(0x7f00000005c0)=0x10) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000300)="1afaef112a3249c08ced74d72302fc9511fff7e6762eb050359583410e87ddf635b3fbc3de3145729b30e321a95ec6a538bc3f4e94367ad3d47c7e8cdc3687db671fdeac0c01f2635e0ac9535e6fa692dcc6d825b944c4b5f93294cc01dc62137bc82a40800e462b3dbe60cdcb1434dd50c9bcb2a22906b0f05e6720facae4541dc196cf4b34ca4613cde42acf0add37") r5 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) dup3(r3, r5, 0x0) r6 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000100)={{0x2}}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020000006766c744240600000200670f011c240f20c066352000000a0f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 07:02:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff40086602, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x80400) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) close(r0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, {0x2, 0x1, 0xfa07, 0x9, 0x0, 0x4}}, 0x8) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:02:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f0000000000)="a86880357492ca529efd312684c62f63dc6c1d10870338f7d844075e596441ae171b952d6a05c04b44444fb94058a5939b1ad7d5221f6b771bcb26073d42eb609170a4456bb0fe8289bec2888793e4ecf87a5944d4bfad88604e4e02000027518dfec19ee5d567a86bbd78b752b3d0efcce4388ad956ea9d8b150f35fb217b266d45e82d2d3d4271332920ce3fa84df28a6ffc14") close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:02:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff40087602, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffc0189436, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x80400) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) close(r0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, {0x2, 0x1, 0xfa07, 0x9, 0x0, 0x4}}, 0x8) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:02:19 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x100000000000000}}, 0x2) 07:02:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mremap(&(0x7f00007c0000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000054000/0x2000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000500)={0x7, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x1c, &(0x7f00000006c0)=[@in6={0xa, 0x0, 0x0, @mcast1}]}, &(0x7f00000005c0)=0x10) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000300)="1afaef112a3249c08ced74d72302fc9511fff7e6762eb050359583410e87ddf635b3fbc3de3145729b30e321a95ec6a538bc3f4e94367ad3d47c7e8cdc3687db671fdeac0c01f2635e0ac9535e6fa692dcc6d825b944c4b5f93294cc01dc62137bc82a40800e462b3dbe60cdcb1434dd50c9bcb2a22906b0f05e6720facae4541dc196cf4b34ca4613cde42acf0add37") r5 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) dup3(r3, r5, 0x0) r6 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000100)={{0x2}}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020000006766c744240600000200670f011c240f20c066352000000a0f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 07:02:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff0000541b, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:19 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x20000000000, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:02:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x80400) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) close(r0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, {0x2, 0x1, 0xfa07, 0x9, 0x0, 0x4}}, 0x8) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) 07:02:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffc9, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x80400) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) close(r0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, {0x2, 0x1, 0xfa07, 0x9, 0x0, 0x4}}, 0x8) 07:02:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff40086602, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x111000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x6, 0x3, 0x9, 0x2, '\x00', 0x2}, 0x4, 0x200, 0x9c, r2, 0x2, 0x8cb, 'syz0\x00', &(0x7f0000000140)=['$@user\\lo)trusted\x00', '\xbbeth1}eth1\x00'], 0x1d, [], [0x3, 0xfff, 0x9, 0xc9c]}) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000380)) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:02:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x80400) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) close(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) 07:02:22 executing program 2: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x0, 0x84132, 0xffffffffffffffff, 0x0) mlock2(&(0x7f000053a000/0x2000)=nil, 0x2000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) r1 = getuid() syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x1f, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="eabfe36771c4f3905f1ab90bebb0169581c926351f0c74e0f17d50b80506ae88514b0ab79c25bdaca2a02ae7cbe4140be48aca2e8685f0f431729d9183e45f60c718e479505b1ac08a708177", 0x4c, 0x80000000}, {&(0x7f0000000140)="fbe4129f991215cc4f3d60d0d093302e53fe85e165faf81a892e2b431a68801007fdb53dee9c461ddc68047e93e4850a67fc9c7e29de1a2d24d95e545b6621c0386687d2152b82170a63fde3242b7dc2d8", 0x51, 0xfffffffffffffffb}], 0x100008, &(0x7f00000005c0)=ANY=[@ANYBLOB="6a2f66696c65302c757365725f7861747472ff593d6f7264657265642c6e6f757365725f78617474722c726573697a653d6175746f2c6a71666d745a7666736f6c640c6572726f72733d636f6e74696e75652c7375626a5f747970653d253a512f2d7d2c70707030707070312c6f626a5f757365723d2c666f776e65723c0000000000000000", @ANYRESDEC=r0, @ANYBLOB=',context=sysadm_u,euid=', @ANYRESDEC=r1, @ANYBLOB="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"]) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x40000, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000480), 0x4) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000380)='./file0\x00', 0x9, 0x5, &(0x7f0000000880)=[{&(0x7f00000003c0)="2f1da475e089763d1bd29bfb2b15fc45fea4960ec1c294a99b57cd6e9e021e215878057191f5fc0d29b50a3b6da41ebe6bf65e69d6edcd6f7bed7768e2001d7416736498a94a69b8c989055dc6fb555a004dc15ed5d8bfe74ef3c1c5ac116c837297d154d808d8de937fae82", 0x6c, 0x200}, {&(0x7f00000004c0)="d7e55ae59b0da69f58df63c2afdbbbf620ec7cc903b4415b0f", 0x19, 0x8}, {&(0x7f0000000500)="c160fa7c2f4f34f63106d905db2c0f8b972b95e782afff059929feefb61aa946ac18d5ac5fca964d3927", 0x2a, 0x4}, {&(0x7f0000000540)="f68b2a9870490a9fdbf6c6f725056c3dda4bc40128486d229ec64dc16cd17bbdb34a5da37ded5b76e9d36013510cb77d22b6057e572224abfc8b2c913c863cd82908140629c82e47ed4c5db38d779d2ad868472e3d851fa545ac42b7201b1779c4b2b2b9fc46f43b63b4da645313", 0x6e, 0x81}, {&(0x7f0000000840)="c1ec0d62acee06798c9d1bd0a852ef219460c609423be48e7982b38c4999b14e48febeba9a8dfca84bd3efc9132ae92a7c7de828095651", 0x37, 0x7}], 0x8000, &(0x7f0000000900)={[{@barrier='barrier'}, {@creator={'creator', 0x3d, "37215801"}}, {@part={'part'}}, {@umask={'umask', 0x3d, 0xb7}}], [{@fscontext={'fscontext', 0x3d, 'root'}}]}) rt_sigsuspend(&(0x7f0000000000), 0x8) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 07:02:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff4020940d, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:22 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r1 = semget(0x1, 0x0, 0x20) semop(r1, &(0x7f0000000200)=[{0x4, 0x2, 0x1800}, {0x7, 0xff, 0x1000}, {0x4, 0x401, 0x800}], 0x3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x400003e, 0x1, 0x25}) r3 = signalfd(r0, &(0x7f0000000140)={0x7fff}, 0x8) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x12a42, 0x0) fcntl$notify(r3, 0x402, 0x80000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000100)={0x57, 0x3, 0x7ff, {0x8, 0x1}, {0x0, 0x7}, @rumble={0x24f28000000000, 0x40}}) 07:02:22 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x500000000000000}}, 0x2) 07:02:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00000002, &(0x7f00000000c0)) close(0xffffffffffffffff) [ 629.550764] attempt to access beyond end of device [ 629.556045] loop2: rw=2048, want=3, limit=2 07:02:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x80400) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) close(r0) 07:02:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x80400) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) 07:02:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00005452, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x5, 0x0, 0x81, 0xa37, 0x8001}) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:02:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x80400) 07:02:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff80087601, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) [ 630.321579] attempt to access beyond end of device [ 630.334008] loop2: rw=2048, want=3, limit=2 07:02:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xd) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000400), 0x8) listen(r1, 0x100000001) r2 = accept4(r1, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, 0x0, 0x44) clock_gettime(0x0, &(0x7f0000000200)) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x2803, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040), 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000800), 0xc, 0x0}, 0x20000005) clone(0x0, &(0x7f000075cf53), 0x0, 0x0, &(0x7f0000923000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) getsockopt(r2, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f00000f8000/0x14000)=nil, 0x14000, 0x0, 0x10010, r4, 0x0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000200)={0x0, 0x3}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) syz_open_dev$usbmon(0x0, 0x3ff, 0x40002) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x0, 0x0, 0xbf, 0x1ff, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001800)="6d4bfa9c79bba217b73fafbc6e0ac1af426a7f2db625bf033e4336d2a7cc0af95b71927e716d99bb562d04c4ead275ead000494fb2757d722f10cdc3acb3a29d5d29373a37b2a7b64d78d8e3fc68ea39bf5dd93ba213121a4753f790cbb67e3a545b48245726c8ff7c6981737e1f453c9fa641704e115a8bbaf9b89441f006cadf13537756b4c79e6c5242a663fae7ec4c2402cfd969e02cd6ea7fba93fb609d59b9fb76c67db0fea180951696f3f5738a3689d949bfb60d9aa6428982ca4c", 0x0, 0x9, 0x11, 0x0, 0x0}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) 07:02:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff40049409, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x61, "adf54c6fa95dd34420a0ea4c8b27fe5a15b5ed6905ebe4c4a6a1bb1dd7103fb58c9d934695d13ac594b57b5397e2588a105cbf49ea1bc8d80e77d10042de8459efed53e6406dcdd95622e20180b06da6cd882f123e51ba295c2d43f75a0a7ea26c"}, &(0x7f0000000080)=0x69) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x1ff, 0x3}, 0x8) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r2, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r2) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:02:23 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x3000000}}, 0x2) 07:02:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) 07:02:23 executing program 1: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) 07:02:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffc0045878, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, &(0x7f0000000140)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x597) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)=0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:02:23 executing program 5: ioctl(0xffffffffffffffff, 0xffffffffffffffc1, &(0x7f00000000c0)) 07:02:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffff00005450, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:23 executing program 1: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x23c7}, 0x8) 07:02:23 executing program 5: ioctl(0xffffffffffffffff, 0xffffffffffffffc1, &(0x7f00000000c0)) 07:02:24 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xd) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000400), 0x8) listen(r1, 0x100000001) r2 = accept4(r1, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, 0x0, 0x44) clock_gettime(0x0, &(0x7f0000000200)) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x2803, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040), 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000800), 0xc, 0x0}, 0x20000005) clone(0x0, &(0x7f000075cf53), 0x0, 0x0, &(0x7f0000923000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) getsockopt(r2, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f00000f8000/0x14000)=nil, 0x14000, 0x0, 0x10010, r4, 0x0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000200)={0x0, 0x3}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) syz_open_dev$usbmon(0x0, 0x3ff, 0x40002) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x0, 0x0, 0xbf, 0x1ff, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001800)="6d4bfa9c79bba217b73fafbc6e0ac1af426a7f2db625bf033e4336d2a7cc0af95b71927e716d99bb562d04c4ead275ead000494fb2757d722f10cdc3acb3a29d5d29373a37b2a7b64d78d8e3fc68ea39bf5dd93ba213121a4753f790cbb67e3a545b48245726c8ff7c6981737e1f453c9fa641704e115a8bbaf9b89441f006cadf13537756b4c79e6c5242a663fae7ec4c2402cfd969e02cd6ea7fba93fb609d59b9fb76c67db0fea180951696f3f5738a3689d949bfb60d9aa6428982ca4c", 0x0, 0x9, 0x11, 0x0, 0x0}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) 07:02:24 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev, @in6=@initdev}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 07:02:24 executing program 5: ioctl(0xffffffffffffffff, 0xffffffffffffffc1, &(0x7f00000000c0)) 07:02:24 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x3f000000}}, 0x2) 07:02:24 executing program 0: nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x2081) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x758ff2b411471647, 0x0) pwrite64(r1, &(0x7f0000000340)="729253342ff1078d36a5e884419f512b278683b9431429819eadcb22755b9f560e01f0e0719ab5f82c872f3b9e7f0da93fe70c8cdf8c129dfa398ac48accffffaa52015de7aef4d2fc847322ff9163e4f93ad189ef064373e3ab8f774a443fa3e2eae9c647b5aa41adb1be8cdfc004eb56017f77cdc6fac69015c1ccf0dade81f9eae3b4f36982be36bf58faa43f8f507dd92a8cebf431910560f9efd688d9295e8340e77a503c2d5265b61e01c716037b35ebe470e6b6d6850356410c8172469be9338c32690a8fd23ca7118c647fa7be83e4a87b29e19644b893641f444cd20b1d7dd407b68c87", 0xe8, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000240)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x2b00) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000100)=0x3) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000280)={0x4, 0x1e0e}) 07:02:24 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) 07:02:24 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000000000002, 0x0) connect$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x1, 0x5, 0x1, 0xffffffff, "153f416f5df52375fc53ee25c5a943e09194e2ea07886798f6092f25f0e01319dede0bbaeeafbbb89cf2e823371b71a8b92b542ca2e07b542cfd3611b1546b", 0x7}, 0x60) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) fchdir(r1) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r2, 0xffffffffffffffbd, &(0x7f00000000c0)) close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xff, 0x301000) 07:02:24 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000100)=0xffffffffffffff9c) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:02:24 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xd) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000400), 0x8) listen(r1, 0x100000001) r2 = accept4(r1, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, 0x0, 0x44) clock_gettime(0x0, &(0x7f0000000200)) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x2803, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040), 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000800), 0xc, 0x0}, 0x20000005) clone(0x0, &(0x7f000075cf53), 0x0, 0x0, &(0x7f0000923000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) getsockopt(r2, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f00000f8000/0x14000)=nil, 0x14000, 0x0, 0x10010, r4, 0x0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000200)={0x0, 0x3}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) syz_open_dev$usbmon(0x0, 0x3ff, 0x40002) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x0, 0x0, 0xbf, 0x1ff, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001800)="6d4bfa9c79bba217b73fafbc6e0ac1af426a7f2db625bf033e4336d2a7cc0af95b71927e716d99bb562d04c4ead275ead000494fb2757d722f10cdc3acb3a29d5d29373a37b2a7b64d78d8e3fc68ea39bf5dd93ba213121a4753f790cbb67e3a545b48245726c8ff7c6981737e1f453c9fa641704e115a8bbaf9b89441f006cadf13537756b4c79e6c5242a663fae7ec4c2402cfd969e02cd6ea7fba93fb609d59b9fb76c67db0fea180951696f3f5738a3689d949bfb60d9aa6428982ca4c", 0x0, 0x9, 0x11, 0x0, 0x0}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) 07:02:25 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) 07:02:25 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) 07:02:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) 07:02:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xba5, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:25 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffc1, &(0x7f00000000c0)) 07:02:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(0xffffffffffffffff, 0xffffffffffffffbd, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:26 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x3) 07:02:26 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffc1, &(0x7f00000000c0)) 07:02:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_crypto(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000140005010000010000000000"], 0x10}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffff02fe, 0x9, 0x2, 0x2, 0x5b, 0x3, 0x3, 0x3, 0x6f, 0x40, 0x30e, 0xffffffffffffffff, 0x9, 0x38, 0x1, 0x400, 0x9, 0x5}, [{0x4, 0x1000, 0x0, 0x2, 0x8a, 0x80, 0x8, 0xffffffffffffff73}], "2ecbd9e061aa541a674a79e089a4226a39bbaa1d440d584f9c621dab4bc44a4dc871664d46a82649d34f8772bf60fd52207d4add0308321b7e75c7e9baecedb8f7b8f8fa0828b05571d30f040e7bc0e4cecd8eb3c14e99bab9036c459e36f8aa41725c370dc55eb7abbde509fb149654957193767fb12fa8a0cb1d712f13261203a0c31157e614fbd124e245c95e2a21195542876652f256dfc18cb3d0febc2997", [[], [], [], [], [], [], [], [], []]}, 0xa19) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000cc0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000e00)) setxattr$security_smack_transmute(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000f40)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000f80)='TRUE', 0x4, 0x3) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x5, 0x4) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) inotify_rm_watch(r3, r4) write$FUSE_DIRENT(r2, &(0x7f0000000d00)={0x90, 0xffffffffffffffda, 0x5, [{0x3, 0x1000, 0xc, 0x3ff, '/dev/rfkill\x00'}, {0x4, 0x9, 0x1d, 0x100000000, '/selinux/avc/cache_threshold\x00'}, {0x3, 0x2, 0x5, 0x400, 'IPVS\x00'}]}, 0x90) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4040000) close(0xffffffffffffffff) 07:02:26 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x11, 0x3, 0x7}, 0x7}}, 0x18) 07:02:26 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xd) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000400), 0x8) listen(r1, 0x100000001) r2 = accept4(r1, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, 0x0, 0x44) clock_gettime(0x0, &(0x7f0000000200)) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x2803, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040), 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000800), 0xc, 0x0}, 0x20000005) clone(0x0, &(0x7f000075cf53), 0x0, 0x0, &(0x7f0000923000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) getsockopt(r2, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f00000f8000/0x14000)=nil, 0x14000, 0x0, 0x10010, r4, 0x0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000200)={0x0, 0x3}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) syz_open_dev$usbmon(0x0, 0x3ff, 0x40002) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x0, 0x0, 0xbf, 0x1ff, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001800)="6d4bfa9c79bba217b73fafbc6e0ac1af426a7f2db625bf033e4336d2a7cc0af95b71927e716d99bb562d04c4ead275ead000494fb2757d722f10cdc3acb3a29d5d29373a37b2a7b64d78d8e3fc68ea39bf5dd93ba213121a4753f790cbb67e3a545b48245726c8ff7c6981737e1f453c9fa641704e115a8bbaf9b89441f006cadf13537756b4c79e6c5242a663fae7ec4c2402cfd969e02cd6ea7fba93fb609d59b9fb76c67db0fea180951696f3f5738a3689d949bfb60d9aa6428982ca4c", 0x0, 0x9, 0x11, 0x0, 0x0}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) 07:02:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x400281, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x1000, 0xa, 0x4, 0x4e000, {}, {0x2, 0x2, 0x8, 0x1, 0x2d02, 0x2, "f8a19cb8"}, 0xe772, 0x4, @offset=0x3, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) fallocate(r0, 0x8, 0x8, 0x1ff) 07:02:26 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffc1, &(0x7f00000000c0)) [ 633.895110] misc userio: Invalid payload size [ 633.899045] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2558 sclass=netlink_tcpdiag_socket pig=21002 comm=syz-executor3 07:02:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f00000000c0)) [ 633.997411] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pig=21006 comm=syz-executor3 07:02:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f00000000c0)) 07:02:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) [ 634.244516] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2558 sclass=netlink_tcpdiag_socket pig=20991 comm=syz-executor3 [ 634.259671] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pig=21006 comm=syz-executor3 07:02:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f00000000c0)) 07:02:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) fcntl$getown(r1, 0x9) close(0xffffffffffffffff) [ 634.626939] misc userio: Invalid payload size 07:02:27 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x20000142) 07:02:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc1, 0x0) 07:02:27 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/106, 0x6a, 0x1f) openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:02:27 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xd) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000400), 0x8) listen(r1, 0x100000001) r2 = accept4(r1, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, 0x0, 0x44) clock_gettime(0x0, &(0x7f0000000200)) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x2803, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040), 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000800), 0xc, 0x0}, 0x20000005) clone(0x0, &(0x7f000075cf53), 0x0, 0x0, &(0x7f0000923000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) getsockopt(r2, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f00000f8000/0x14000)=nil, 0x14000, 0x0, 0x10010, r4, 0x0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000200)={0x0, 0x3}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) syz_open_dev$usbmon(0x0, 0x3ff, 0x40002) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x0, 0x0, 0xbf, 0x1ff, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001800)="6d4bfa9c79bba217b73fafbc6e0ac1af426a7f2db625bf033e4336d2a7cc0af95b71927e716d99bb562d04c4ead275ead000494fb2757d722f10cdc3acb3a29d5d29373a37b2a7b64d78d8e3fc68ea39bf5dd93ba213121a4753f790cbb67e3a545b48245726c8ff7c6981737e1f453c9fa641704e115a8bbaf9b89441f006cadf13537756b4c79e6c5242a663fae7ec4c2402cfd969e02cd6ea7fba93fb609d59b9fb76c67db0fea180951696f3f5738a3689d949bfb60d9aa6428982ca4c", 0x0, 0x9, 0x11, 0x0, 0x0}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) 07:02:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40102, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000080)={{0x1, 0x2, 0x13, 0x3, 0x7}, 0x8, 0x2, 0x3}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:02:27 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) lseek(r0, 0x1000000000000, 0x3) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00001c6000/0x1000)=nil, 0x1000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x6) close(0xffffffffffffffff) 07:02:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc1, 0x0) 07:02:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x501400) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000358000/0x2000)=nil, 0x2000}) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000140)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x7fffffff, 0x0, 0x100000000, 0xfffffffffffffffb, 0x5, 0xb7b, 0x1}, 0xc) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x204000) close(0xffffffffffffffff) [ 634.903850] misc userio: Invalid payload size 07:02:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(0xffffffffffffffff, 0xffffffffffffffbd, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:27 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000040)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) mmap(&(0x7f0000321000/0x2000)=nil, 0x2000, 0x2, 0x148010, r0, 0x0) 07:02:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc1, 0x0) 07:02:27 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000002000/0x400000)=nil, 0x400000}) mbind(&(0x7f0000121000/0x3000)=nil, 0x3000, 0x2, &(0x7f00000000c0)=0x80000001, 0x40, 0x2) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x8000) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:28 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x40000) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000780)={0x83, 0x3, 0x4, "fdd420f158f7c4cbb6a543ca2909b467fb5ec482513ba00d0d48e0b8f82cb30544f81cbb1e5482ab32f33eab788f5ae8712b98f4d68615f059408909026d7bba19ee3593a3e0b62dc557bdc9afad8bff98a59f60b87fd6bc8f3a1135365374d0725b3c873b14461a70b692c683650d9c0ac9d354493e0579bb5e77ea99876174afbde5"}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(0xffffffffffffffff) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x1000, 0x0, 0x0, 0x0, 0xe03, 0x2, 0x3, 0x2, 0x36e, 0x40, 0x196, 0x7f, 0x8, 0x38, 0x2, 0x7fff, 0x3ff, 0x7f}, [{0x4, 0x3, 0x4, 0x345c, 0x0, 0x1, 0xf6b0, 0x10000}, {0x70000007, 0x0, 0xab, 0x5, 0xfffffffffffffff8, 0x0, 0x10001, 0x8}], "efed0b2faf934fa1c0252ef4a51f353478b4d0221cc6065e9a27ebf0d3d265dc4d842583b086f9afc472b676bdb492116f5f842c19fb76317ecb924c1ec32a9b7be782af2e275a104691321ba0118e45197d7d191b32400f06dbe7ab8b8c48a1cc354b8c9297a167", [[], [], [], [], []]}, 0x618) 07:02:28 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x61, "adf54c6fa95dd34420a0ea4c8b27fe5a15b5ed6905ebe4c4a6a1bb1dd7103fb58c9d934695d13ac594b57b5397e2588a105cbf49ea1bc8d80e77d10042de8459efed53e6406dcdd95622e20180b06da6cd882f123e51ba295c2d43f75a0a7ea26c"}, &(0x7f0000000080)=0x69) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x1ff, 0x3}, 0x8) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r2, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r2) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:02:28 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0x20000000000f, &(0x7f0000000180)={0xfffffffffffffffe, 0xb3}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:02:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x14000, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xa8, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:02:28 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x80800, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000100)) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200), 0x0, 0xfffffffffffffffa) r3 = add_key(&(0x7f0000000240)='.dead\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="b769ef8fd893198f9a", 0x9, 0xfffffffffffffffa) keyctl$reject(0x13, r2, 0x4b6, 0x1f, r3) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={r4, 0x6f2}, 0x8) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000140)) 07:02:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xd) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000400), 0x8) listen(r1, 0x100000001) r2 = accept4(r1, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, 0x0, 0x44) clock_gettime(0x0, &(0x7f0000000200)) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x2803, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040), 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000800), 0xc, 0x0}, 0x20000005) clone(0x0, &(0x7f000075cf53), 0x0, 0x0, &(0x7f0000923000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) getsockopt(r2, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f00000f8000/0x14000)=nil, 0x14000, 0x0, 0x10010, r4, 0x0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000200)={0x0, 0x3}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) syz_open_dev$usbmon(0x0, 0x3ff, 0x40002) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x0, 0x0, 0xbf, 0x1ff, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001800)="6d4bfa9c79bba217b73fafbc6e0ac1af426a7f2db625bf033e4336d2a7cc0af95b71927e716d99bb562d04c4ead275ead000494fb2757d722f10cdc3acb3a29d5d29373a37b2a7b64d78d8e3fc68ea39bf5dd93ba213121a4753f790cbb67e3a545b48245726c8ff7c6981737e1f453c9fa641704e115a8bbaf9b89441f006cadf13537756b4c79e6c5242a663fae7ec4c2402cfd969e02cd6ea7fba93fb609d59b9fb76c67db0fea180951696f3f5738a3689d949bfb60d9aa6428982ca4c", 0x0, 0x9, 0x11, 0x0, 0x0}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) [ 635.624220] misc userio: Invalid payload size 07:02:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f0000000240)="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") close(r0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0xffff}, 0x0, 0x0, 0xc94d}) 07:02:28 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) 07:02:28 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x100) write$vnet(r1, &(0x7f00000003c0)={0x1, {&(0x7f0000000140)=""/211, 0xfffffffffffffca3, &(0x7f0000000440)=""/245, 0x2}}, 0xa4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x4, @empty, 0x7}}, [0x100000000, 0x6, 0x7fffffff, 0x3, 0x7, 0x3, 0x7ee, 0x5, 0x3ff, 0xffffffff, 0x3, 0x800, 0x40, 0x6, 0xfffffffffffff001]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r2, 0x8}, 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r3, 0x100000005, &(0x7f0000000040)) recvfrom$inet6(r1, &(0x7f0000000680)=""/42, 0x2a, 0x2001, &(0x7f00000006c0)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, 0x1c) close(0xffffffffffffffff) mq_timedsend(r1, &(0x7f0000000540)="6cc5330f5db4bdcde41ff5de7dd24f59289b746bb36b23cc243e93c5a5306816597cb9047d7cd70f3dd35787a4f7c5c4c1de84eea4417ba4f4a7866c9c77139f5d67680d4cb4fe6bcc04853292a0bba5571a56eb73e9894e8048e0b6e55a5a847e2e5bb555d6a7145c211026d4caad1edc74beacde55ca594455a370efd3eba19a5e3857c698e5d1bef8374131d0bb95639ccbb4a0408ab75db50c62203cf1bb43fa922cd2a13f234c5cd7b348f80cc9c6d7b79bb6792413ca07abf775a6258e64ed12680ebde9074eb52e6a83791cfae41862786c73868ca2c1c3b89c906ffc7f2ad9dbc565b45262682337f97c4567b09601fada7d", 0xf6, 0xfffffffffffffff8, &(0x7f0000000700)={0x0, 0x989680}) fsetxattr$security_selinux(r0, &(0x7f0000000340)='security.selinux\x00', &(0x7f0000000380)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x3) [ 636.233211] FAULT_INJECTION: forcing a failure. [ 636.233211] name failslab, interval 1, probability 0, space 0, times 0 [ 636.268318] CPU: 0 PID: 21125 Comm: syz-executor5 Not tainted 4.20.0+ #172 [ 636.275347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.284703] Call Trace: [ 636.287330] dump_stack+0x1d3/0x2c6 [ 636.290985] ? dump_stack_print_info.cold.1+0x20/0x20 [ 636.296216] should_fail.cold.4+0xa/0x17 [ 636.300296] ? __lock_acquire+0x62f/0x4c20 [ 636.304550] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 636.309661] ? dput.part.25+0x26d/0x790 [ 636.313650] ? graph_lock+0x270/0x270 [ 636.317464] ? find_held_lock+0x36/0x1c0 [ 636.321540] ? find_held_lock+0x36/0x1c0 [ 636.325626] ? ___might_sleep+0x1ed/0x300 [ 636.329799] ? arch_local_save_flags+0x40/0x40 [ 636.334392] ? drm_unbind_agp+0x20/0x20 [ 636.338397] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 636.343969] __should_failslab+0x124/0x180 [ 636.348220] should_failslab+0x9/0x14 [ 636.352027] __kmalloc+0x2e0/0x770 [ 636.355578] ? avc_ss_reset+0x190/0x190 [ 636.359599] ? drm_ioctl+0x4ab/0xb90 [ 636.363324] drm_ioctl+0x4ab/0xb90 [ 636.366876] ? drm_syncobj_destroy_ioctl+0x1e0/0x1e0 [ 636.372015] ? drm_version+0x3d0/0x3d0 [ 636.375934] ? ___might_sleep+0x1ed/0x300 [ 636.380113] ? arch_local_save_flags+0x40/0x40 [ 636.384716] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 636.389677] ? drm_version+0x3d0/0x3d0 [ 636.393580] do_vfs_ioctl+0x1de/0x1790 [ 636.397487] ? ioctl_preallocate+0x300/0x300 [ 636.401928] ? selinux_file_mprotect+0x620/0x620 [ 636.406701] ? __sb_end_write+0xd9/0x110 [ 636.410782] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 636.416335] ? fput+0x130/0x1a0 [ 636.419625] ? do_syscall_64+0x9a/0x820 [ 636.423613] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 636.429170] ? security_file_ioctl+0x94/0xc0 [ 636.429188] ksys_ioctl+0xa9/0xd0 [ 636.429206] __x64_sys_ioctl+0x73/0xb0 [ 636.429222] do_syscall_64+0x1b9/0x820 [ 636.437075] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 636.437095] ? syscall_return_slowpath+0x5e0/0x5e0 [ 636.437111] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 636.437128] ? trace_hardirqs_on_caller+0x310/0x310 [ 636.437146] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 636.437178] ? prepare_exit_to_usermode+0x291/0x3b0 [ 636.437198] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 636.437222] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 636.437236] RIP: 0033:0x4579b9 [ 636.444993] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 636.445002] RSP: 002b:00007ffb6d4bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 636.445017] RAX: ffffffffffffffda RBX: 00007ffb6d4bfc90 RCX: 00000000004579b9 [ 636.445026] RDX: 00000000200000c0 RSI: ffffffffffffffc1 RDI: 0000000000000003 07:02:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(0xffffffffffffffff) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000080)={r1, 0x1}) [ 636.445035] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 636.445044] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffb6d4c06d4 [ 636.445055] R13: 00000000004beee9 R14: 00000000004d02a0 R15: 0000000000000004 07:02:29 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xd) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000400), 0x8) listen(r1, 0x100000001) r2 = accept4(r1, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, 0x0, 0x44) clock_gettime(0x0, &(0x7f0000000200)) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x2803, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040), 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000800), 0xc, 0x0}, 0x20000005) clone(0x0, &(0x7f000075cf53), 0x0, 0x0, &(0x7f0000923000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) getsockopt(r2, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f00000f8000/0x14000)=nil, 0x14000, 0x0, 0x10010, r4, 0x0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000200)={0x0, 0x3}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) syz_open_dev$usbmon(0x0, 0x3ff, 0x40002) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x0, 0x0, 0xbf, 0x1ff, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001800)="6d4bfa9c79bba217b73fafbc6e0ac1af426a7f2db625bf033e4336d2a7cc0af95b71927e716d99bb562d04c4ead275ead000494fb2757d722f10cdc3acb3a29d5d29373a37b2a7b64d78d8e3fc68ea39bf5dd93ba213121a4753f790cbb67e3a545b48245726c8ff7c6981737e1f453c9fa641704e115a8bbaf9b89441f006cadf13537756b4c79e6c5242a663fae7ec4c2402cfd969e02cd6ea7fba93fb609d59b9fb76c67db0fea180951696f3f5738a3689d949bfb60d9aa6428982ca4c", 0x0, 0x9, 0x11, 0x0, 0x0}) 07:02:29 executing program 1: ppoll(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)={0x23c7}, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x3001, 0x10c000}) 07:02:29 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) 07:02:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) 07:02:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000184000/0x4000)=nil, 0x4000}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x1) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)={0x5, 0x0, [{0x1, 0xf4, &(0x7f0000000140)=""/244}, {0xf000, 0xfd, &(0x7f0000000240)=""/253}, {0x1, 0xc0, &(0x7f0000000340)=""/192}, {0xf003, 0x3, &(0x7f0000000400)=""/3}, {0x100000, 0xb7, &(0x7f0000000440)=""/183}]}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:29 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000400)={0x1, 0x4}, 0x3c5b49ae92f9f46d) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) kexec_load(0xffff, 0x4, &(0x7f0000000700)=[{&(0x7f0000000440)="fa504532bafb2f7b589c1b1b1b22e625ecbb3b558ec6f3e21a65d1e2de3fc5bb20e6fa3fd8ab85640c16b4c278c6fa6aaa4a32fbff3fe1d192f02550e0326035da760fe0dc1e5862fdb2c474c521b447443b99b659671570835a3ecd3d6e465d0370d882cd91eeaf8f4a463d62954f568f46953071d517b02794d3fb20b8afba1e1bf80c6d9fb83b818cd69723ef3a1987c0b24e0f3d237bfc8f449feb61ea287a6924ead081840ae90c26f9", 0xac, 0x7}, {&(0x7f0000000500)="18d354102487eb75337d6379a8baf30af55ba9f86b296bc871360f19c40adc4fbecf0de1d512bce6ded695d1c441432b7882868cc6a2a2739c622acebb4ad2dbd9d68215eb498a6741848fc3c5a35fc3892a58d994bc562c612420098a4e1f6b037037b185bf7e2c1822163dd7ee9b555cdd05d6d436eeaaaebea7e229292b0f67b44ad5d37b757c414413c1de5f3a27806088363ebcc49be9b679e3ead2dbc523f917dfe2a038fe74a3845619c0b55ef0a97ef00164f7d9341b8b5e2ff3ee7c0b694c3b12bf730a481df3fb9fac23c3bb945303f2b5324fd28660a463cbc3e6b7b20bd3c2f8fdae8f6170da8fef935b8a6095e799bba554c8", 0xf9, 0x0, 0x35}, {&(0x7f0000000600)="c6a5b5e8ed13c8dc3492b6014708dcb0ebf8d3864b1c9a315a5c106bd30049c5feaa2610cbca91f19e621dd779537eb5304b595459dfff4d62d7717a2616f87cdd1f8d4c18083da896b9fa0fe361e0b1de3b0e75b54860fddf9f826ddb5369c08054336bb840d3457a09e9d13b0e1410c36e483c5b1d46d47b7eadedd6851f0994078ea3264a54f41fa53eab40fcb5c28be541925fb1f81b5b072457b5a0c79b9f709639fcab9ee502561ebf1532fb05875eeb30dfdae4dfb39779557b60ce402ab2f91a16cb36da795289221e0eb4d8b9deb4934feefadf8df456abbaa4", 0xde, 0xffff, 0x97}, {&(0x7f0000000380)="8098e4ac44f3cbfa2733f60503dfe59f6225070202583915b3e2424970b650cdd26dce2d1d34fb7e1d849ef3e4b94ad54229945fa516ef7e588939e996dd9d416a2339ff1832e6c21adace141a5eac1c193fe0a058c6c37944af80d26dc17da1208a8c81694852581539a5a2af8c4f2007e8cb2712b8", 0x76, 0x7, 0x7fff}], 0x30000) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r2, &(0x7f0000000300)="944602a38f6cb53a7d19afb5dd6fed4be71f360cdfcac694b1a63431b99c373c40"}, 0x10) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x1, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x8001, 0x10000, {"b05dc54ebbdf022abde873b3cb8b640c"}, 0x92, 0xa89, 0x1}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) 07:02:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) recvmmsg(r0, &(0x7f0000001740), 0x3fffffffffffde8, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="480000001400197f0900490101048c590188ff3f67614e495b1e2e1f72161affcf5d6f9fafab2a40e10520613057fff7e07906defeff0000e5ed5a00000000c855000000000000ac", 0x48}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8008242}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x400c004) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x210000, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r4, 0xffffffffffffffbd, &(0x7f00000000c0)) close(0xffffffffffffffff) 07:02:29 executing program 5: socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) [ 637.383539] misc userio: Invalid payload size [ 638.118207] misc userio: Invalid payload size 07:02:36 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040), 0xc, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080)='L', 0x0}, 0x20) 07:02:36 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xd) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000400), 0x8) listen(r1, 0x100000001) r2 = accept4(r1, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, 0x0, 0x44) clock_gettime(0x0, &(0x7f0000000200)) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x2803, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040), 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000800), 0xc, 0x0}, 0x20000005) clone(0x0, &(0x7f000075cf53), 0x0, 0x0, &(0x7f0000923000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) getsockopt(r2, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f00000f8000/0x14000)=nil, 0x14000, 0x0, 0x10010, r4, 0x0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000200)={0x0, 0x3}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) syz_open_dev$usbmon(0x0, 0x3ff, 0x40002) 07:02:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x3) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) 07:02:36 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) r1 = dup3(r0, r0, 0x80000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000100)="2efb6ab2ab23c7a6dca378dc9c762494ff225614f9e1f97b4619020c56ee95aaf065ea659a6076c8256178a8cda2a35e007cf1f99dbdcae48034f2baedd687494aa403c48416630a076dbcf164ae48d8f23969683d4503b3b574d58145273ab525c5ba8f0a496a4f6ed6973e88f06b9a243bd1cb59e2ba932b0cd4ca404d5a24b3edf5456b80be7f169623bb5b0186954df17396d546c811de74bf38c307d2b6b2a713a60775d48bfac9fa54760fbc4499904eaed9db5c1e6b4b8a00e97b06d6cd1fb6c2c65449616a2f679d7343a8822c6a452c37cc62656b6266a4bf6322f58e377a98908add357253", &(0x7f0000000200)=""/180}, 0x18) 07:02:36 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x20001) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) 07:02:36 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x3, 0x5}, &(0x7f00000001c0)=0x90) pipe(&(0x7f00000003c0)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r2, 0x4, 0xc74, 0x8, 0x3, 0x22}, &(0x7f0000000380)=0x14) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x100000001}, 0x0) read(r0, &(0x7f0000000240)=""/121, 0xffffffffffffffc3) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000400)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) lsetxattr$security_smack_entry(&(0x7f0000000540)='./file0/file1\x00', &(0x7f0000000580)='security.SMACK64IPIN\x00', 0xfffffffffffffffe, 0x0, 0x3) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000180)={0x800100f, 0x5, 0x3}) syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x3, 0x80) 07:02:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0352, 0x5074e, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$usb(0x0, 0x100202, 0x800000002009) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x5, 0x5, 0x0, 0xffffff8000000000, 0x6, [{0x5, 0x4, 0x1, 0x0, 0x0, 0x2000}, {0x6, 0x744, 0x5, 0x0, 0x0, 0x800}, {0x6, 0x9, 0x44b9, 0x0, 0x0, 0x1}, {0x3, 0x20, 0x3, 0x0, 0x0, 0x80}, {0x3, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x400}, {0x1ff, 0xffffffffffffe897, 0x78e, 0x0, 0x0, 0x100}]}) 07:02:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f0000000000)) close(0xffffffffffffffff) [ 643.745567] misc userio: Invalid payload size [ 643.807166] misc userio: No port type given on /dev/userio [ 643.857321] misc userio: Invalid payload size 07:02:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) r1 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00'}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540)='/dev/nullb0\x00', 0x802, 0x0) sendfile(r4, r4, 0x0, 0x0) finit_module(r2, &(0x7f0000000440)='/dev/snapshot\x00', 0x1) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) pipe2(0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 07:02:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = semget(0x3, 0x3, 0x14) semctl$GETZCNT(r1, 0x1, 0xf, &(0x7f0000000140)=""/198) close(0xffffffffffffffff) [ 643.905489] misc userio: No port type given on /dev/userio 07:02:36 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x100) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002380)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0xff, 0x200302) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000002340)={0x3a2, 0x1, 0x2, 0x80000000, 0xf30b}, 0xc) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x402, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000002c0)={0x3, 0x0, 0x2080, {0x10000, 0x2, 0x1}, [], "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", "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"}) mq_getsetattr(r2, &(0x7f0000000180)={0x7, 0x3, 0x3f, 0x40, 0x2ab, 0x2, 0x7, 0x7f}, &(0x7f00000001c0)) write$selinux_validatetrans(r3, &(0x7f0000002440)=ANY=[@ANYBLOB="73797374656d5f75ffffffff6563745f723a73656d616e616765408d6561645f6c06006b5f743a73302073797374656d5f753a7f626a6563745f723a6167705f6465766963655f743a73302030303030307f897c483030303030303018f9e58f6916d5303036202f7552722f7362e96e2f637570732dd378bcc5e952a21cf5e93cbe2a09bad320f8c4144728f2a39510905b9478d025d4569810024ee0fbd96c8560b5963472ae2e71c83af57bec43c2cec5a1a6db02af90b3fdb9f9a84aec1e925d586e201616403502c27251ea6379efd7d930114a4772fff218f2d96f12a4d2367953122e47c8b34318c844f070a900"], 0x78) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000023c0)=0x7fffffff, &(0x7f0000002400)=0x4) [ 644.110395] misc userio: Invalid payload size [ 644.125499] audit: type=1400 audit(1545980556.810:78): avc: denied { map } for pid=21215 comm="syz-executor0" path="/dev/nullb0" dev="devtmpfs" ino=16265 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 [ 644.214298] misc userio: No port type given on /dev/userio [ 644.255713] QAT: Invalid ioctl 07:02:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) getrlimit(0xf, &(0x7f0000000000)) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(r0) 07:02:37 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xffffffff7fffffff, 0x2) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000100)={0x7, 0x6}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000140)="5f2d071b573edb8aa225b62f4dd1de42", 0x10) 07:02:37 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xd) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000400), 0x8) listen(r1, 0x100000001) r2 = accept4(r1, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, 0x0, 0x44) clock_gettime(0x0, &(0x7f0000000200)) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x2803, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040), 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000800), 0xc, 0x0}, 0x20000005) clone(0x0, &(0x7f000075cf53), 0x0, 0x0, &(0x7f0000923000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) getsockopt(r2, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f00000f8000/0x14000)=nil, 0x14000, 0x0, 0x10010, r4, 0x0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000200)={0x0, 0x3}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) 07:02:37 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 07:02:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0x80000) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@local, @empty, 0x0}, &(0x7f0000000180)=0xc) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) connect$can_bcm(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) getsockopt$rose(r3, 0x104, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) close(0xffffffffffffffff) [ 644.822877] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 644.884553] misc userio: Invalid payload size 07:02:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) syz_execute_func(&(0x7f00000000c0)="36424f6433ef93f39d9df2440f34a2ebf717c4dc7518fff30fbcbb0000eb7e9664660f3a4095040000003b8221db2d14025cb6b156a7b14e00b9a104b9a1047f40c4e3a251519050c2c246aecf0000e4e4410ff8e6c4237bf0d7d4e36226f242d6324849c42222aa717ae567952fa426660fdd624436660fd1650689b72500d00e000082") ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) [ 644.957512] misc userio: No port type given on /dev/userio [ 644.964000] QAT: Invalid ioctl 07:02:37 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x80, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:02:37 executing program 0: open(0x0, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffffb) r0 = gettid() ptrace$peekuser(0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) poll(0x0, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) 07:02:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f0000000000)="163c365e126d6afef1af57b360c2313047050c417411ba5717566b2d274fef4f9d2172e461b931ec351d71eaa7cacfa0077e84a7658f335be56bd2f34df661ae2ecdc61bd8510e01776778a4c866243ef03c389b65e28091cd9510df501ec48fb78c39519223822eaa27a0f3ff942eedcf29a6a9b380f988a3afc2ea1b5507c0786769896a14dac88942c1f4") close(r0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 07:02:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000002c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 07:02:38 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) 07:02:38 executing program 0: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/91, 0x5b) 07:02:38 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x8001, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={0x23c7}, 0x8) 07:02:38 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xd) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000400), 0x8) listen(r1, 0x100000001) r2 = accept4(r1, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, 0x0, 0x44) clock_gettime(0x0, &(0x7f0000000200)) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x2803, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040), 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000800), 0xc, 0x0}, 0x20000005) clone(0x0, &(0x7f000075cf53), 0x0, 0x0, &(0x7f0000923000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) getsockopt(r2, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f00000f8000/0x14000)=nil, 0x14000, 0x0, 0x10010, r4, 0x0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000200)={0x0, 0x3}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 07:02:38 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setresuid(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 07:02:38 executing program 0: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/27, 0x1b) 07:02:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x2, 0x8}, {0x3, 0x5}]}, 0x14, 0x0) getpgid(r1) ioctl(r0, 0xffffffffffffffc1, &(0x7f00000000c0)) 07:02:38 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x42, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x8, 0xffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) read(r0, &(0x7f0000000240)=""/121, 0x4f) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x400000, 0x0) r3 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000180)={r3}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)=""/16, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 07:02:38 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x81, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x200, 0x0, [], {0x0, @reserved}}) 07:02:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) [ 650.086108] oom_reaper: reaped process 21278 (syz-executor3), now anon-rss:0kB, file-rss:32704kB, shmem-rss:0kB [ 650.147174] rsyslogd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 650.164719] rsyslogd cpuset=/ mems_allowed=0-1 [ 650.169375] CPU: 1 PID: 8150 Comm: rsyslogd Not tainted 4.20.0+ #172 [ 650.175875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 650.185238] Call Trace: [ 650.187852] dump_stack+0x1d3/0x2c6 [ 650.191492] ? dump_stack_print_info.cold.1+0x20/0x20 [ 650.196694] ? mark_held_locks+0x130/0x130 [ 650.200948] ? mark_held_locks+0x130/0x130 [ 650.205211] dump_header+0x27b/0xf72 [ 650.208955] ? pagefault_out_of_memory+0x197/0x197 [ 650.213900] ? __lock_acquire+0x62f/0x4c20 [ 650.218155] ? mem_cgroup_charge_statistics+0x780/0x780 [ 650.223527] ? print_usage_bug+0xc0/0xc0 [ 650.227599] ? graph_lock+0x270/0x270 [ 650.231400] ? graph_lock+0x270/0x270 [ 650.235219] ? print_usage_bug+0xc0/0xc0 [ 650.239287] ? print_usage_bug+0xc0/0xc0 [ 650.243352] ? graph_lock+0x270/0x270 [ 650.247167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 650.252714] ? find_held_lock+0x36/0x1c0 [ 650.256794] ? mark_held_locks+0xc7/0x130 [ 650.260956] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 650.266071] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 650.271186] ? lockdep_hardirqs_on+0x421/0x5c0 [ 650.275776] ? trace_hardirqs_on+0xbd/0x310 [ 650.280107] ? kasan_check_read+0x11/0x20 [ 650.284266] ? ___ratelimit+0x36f/0x655 [ 650.288249] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 650.293722] ? trace_hardirqs_on+0x310/0x310 [ 650.298142] ? lock_downgrade+0x900/0x900 [ 650.302320] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 650.307437] ? ___ratelimit+0xaa/0x655 [ 650.311352] ? idr_get_free+0xf70/0xf70 [ 650.315330] ? task_will_free_mem+0xb30/0xb30 [ 650.319829] ? find_held_lock+0x36/0x1c0 [ 650.323922] oom_kill_process.cold.27+0x10/0x903 [ 650.328700] ? graph_lock+0x270/0x270 [ 650.332507] ? oom_badness+0xe6/0xaa0 [ 650.336307] ? kasan_check_read+0x11/0x20 [ 650.340461] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 650.345745] ? oom_evaluate_task+0x540/0x540 [ 650.350172] ? find_held_lock+0x36/0x1c0 [ 650.354242] ? out_of_memory+0x974/0x1430 [ 650.358427] ? lock_downgrade+0x900/0x900 [ 650.362596] ? check_preemption_disabled+0x48/0x280 [ 650.367627] ? kasan_check_read+0x11/0x20 [ 650.371775] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 650.377056] ? rcu_read_unlock_special+0x370/0x370 [ 650.382015] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 650.387573] ? oom_evaluate_task+0x302/0x540 [ 650.391988] out_of_memory+0xa84/0x1430 [ 650.395973] ? oom_killer_disable+0x3a0/0x3a0 [ 650.400471] ? __alloc_pages_slowpath+0xf5c/0x2df0 [ 650.405439] ? __ww_mutex_check_waiters+0x160/0x160 [ 650.410469] __alloc_pages_slowpath+0x2343/0x2df0 [ 650.415343] ? warn_alloc+0x120/0x120 [ 650.419160] ? mark_held_locks+0x130/0x130 [ 650.423406] ? find_get_entry+0xaae/0x1120 [ 650.427667] ? filemap_map_pages+0x1a30/0x1a30 [ 650.432288] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 650.437838] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 650.443380] ? should_fail+0x22d/0xd01 [ 650.447285] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 650.452394] ? graph_lock+0x270/0x270 [ 650.456245] ? __lock_is_held+0xb5/0x140 [ 650.460326] ? ___might_sleep+0x1ed/0x300 [ 650.464478] ? lock_release+0xa00/0xa00 [ 650.468455] ? arch_local_save_flags+0x40/0x40 [ 650.473040] ? xa_load+0x2ba/0x460 [ 650.476588] ? lock_downgrade+0x900/0x900 [ 650.480746] ? check_preemption_disabled+0x48/0x280 [ 650.485777] ? __might_sleep+0x95/0x190 [ 650.489762] __alloc_pages_nodemask+0xad8/0xea0 [ 650.494446] ? __alloc_pages_slowpath+0x2df0/0x2df0 [ 650.499469] ? xa_load+0x2e1/0x460 [ 650.503019] ? xa_clear_mark+0x40/0x40 [ 650.506919] ? graph_lock+0x270/0x270 [ 650.510731] ? print_usage_bug+0xc0/0xc0 [ 650.514801] ? graph_lock+0x270/0x270 [ 650.518608] ? graph_lock+0x270/0x270 [ 650.522421] ? __do_page_cache_readahead+0x663/0x810 [ 650.527532] ? find_held_lock+0x36/0x1c0 [ 650.531605] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 650.537152] alloc_pages_current+0x10c/0x210 [ 650.541578] ? lock_downgrade+0x900/0x900 [ 650.545729] __page_cache_alloc+0x38c/0x5b0 [ 650.550072] ? kasan_check_read+0x11/0x20 [ 650.554226] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 650.559510] ? filemap_range_has_page+0x4e0/0x4e0 [ 650.564360] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 650.569915] ? check_preemption_disabled+0x48/0x280 [ 650.574983] filemap_fault+0x1595/0x25f0 [ 650.579082] ? __lock_page_or_retry+0xa00/0xa00 [ 650.583763] ? mark_held_locks+0x130/0x130 [ 650.588006] ? find_held_lock+0x36/0x1c0 [ 650.592082] ? filemap_map_pages+0xd78/0x1a30 [ 650.596602] ? lock_downgrade+0x900/0x900 [ 650.600768] ? check_preemption_disabled+0x48/0x280 [ 650.605797] ? kasan_check_read+0x11/0x20 [ 650.609979] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 650.615266] ? rcu_read_unlock_special+0x370/0x370 [ 650.620206] ? filemap_map_pages+0xd9f/0x1a30 [ 650.624727] ? find_get_entries_tag+0x1400/0x1400 [ 650.629580] ? __lock_is_held+0xb5/0x140 [ 650.633642] ? lock_acquire+0x1ed/0x520 [ 650.637623] ? ext4_filemap_fault+0x7a/0xad [ 650.641954] ? lock_release+0xa00/0xa00 [ 650.645968] ? arch_local_save_flags+0x40/0x40 [ 650.650551] ? trace_hardirqs_on+0x310/0x310 [ 650.654977] ? find_held_lock+0x36/0x1c0 [ 650.659068] ? down_read+0x8d/0x120 [ 650.662695] ? ext4_filemap_fault+0x7a/0xad [ 650.667032] ? __down_interruptible+0x700/0x700 [ 650.671753] ? trace_hardirqs_on+0xbd/0x310 [ 650.676099] ext4_filemap_fault+0x82/0xad [ 650.680285] __do_fault+0x100/0x6b0 [ 650.683921] ? do_syslog+0x1572/0x1790 [ 650.687810] ? follow_pfn+0x2e0/0x2e0 [ 650.691614] ? do_syslog+0x30e/0x1790 [ 650.695422] ? pmd_val+0x88/0x100 [ 650.698878] ? add_mm_counter_fast+0xd0/0xd0 [ 650.703290] ? pmd_val+0x88/0x100 [ 650.706772] ? add_mm_counter_fast+0xd0/0xd0 [ 650.711180] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 650.716205] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 650.721763] __handle_mm_fault+0x3956/0x5670 [ 650.726197] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 650.731044] ? graph_lock+0x270/0x270 [ 650.734850] ? print_usage_bug+0xc0/0xc0 [ 650.736428] syz-executor3: vmalloc: allocation failure, allocated 2883387392 of 3008876544 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 650.738921] ? graph_lock+0x270/0x270 [ 650.756450] ? graph_lock+0x270/0x270 [ 650.760269] ? handle_mm_fault+0x42a/0xc70 [ 650.764542] ? lock_downgrade+0x900/0x900 [ 650.768710] ? check_preemption_disabled+0x48/0x280 [ 650.773744] ? kasan_check_read+0x11/0x20 [ 650.774014] syz-executor3 cpuset=syz3 mems_allowed=0-1 [ 650.777890] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 650.777916] ? rcu_read_unlock_special+0x370/0x370 [ 650.777933] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 650.777947] ? check_preemption_disabled+0x48/0x280 [ 650.777966] handle_mm_fault+0x54f/0xc70 [ 650.777982] ? __handle_mm_fault+0x5670/0x5670 [ 650.812565] ? find_vma+0x34/0x190 [ 650.816121] __do_page_fault+0x5f6/0xd70 [ 650.820204] ? kernel_write+0x120/0x120 [ 650.824249] do_page_fault+0xf2/0x7e0 [ 650.828058] ? vmalloc_sync_all+0x30/0x30 [ 650.832219] ? error_entry+0x70/0xd0 [ 650.835959] ? trace_hardirqs_off_caller+0xbb/0x310 [ 650.840994] ? trace_hardirqs_on_caller+0xc0/0x310 [ 650.845968] ? syscall_return_slowpath+0x5e0/0x5e0 [ 650.850898] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 650.855765] ? trace_hardirqs_on_caller+0x310/0x310 [ 650.860780] ? trace_hardirqs_off+0x310/0x310 [ 650.865282] ? prepare_exit_to_usermode+0x291/0x3b0 [ 650.870310] ? page_fault+0x8/0x30 [ 650.873859] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 650.878732] ? page_fault+0x8/0x30 [ 650.882302] page_fault+0x1e/0x30 [ 650.885779] RIP: 0033:0x7eff679fa1fd [ 650.889520] Code: Bad RIP value. [ 650.892888] RSP: 002b:00007eff64f99e30 EFLAGS: 00010293 [ 650.898290] RAX: 0000000000000076 RBX: 0000000001c5e4b0 RCX: 00007eff679fa1fd [ 650.905559] RDX: 0000000000000fff RSI: 00007eff667ce5a0 RDI: 0000000000000004 [ 650.912823] RBP: 0000000000000000 R08: 0000000001c49260 R09: 0000000000000000 [ 650.920090] R10: 6b205d3030303636 R11: 0000000000000293 R12: 000000000065e420 [ 650.927386] R13: 00007eff64f9a9c0 R14: 00007eff6803f040 R15: 0000000000000003 [ 650.935545] CPU: 0 PID: 21309 Comm: syz-executor3 Not tainted 4.20.0+ #172 [ 650.942565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 650.951925] Call Trace: [ 650.954516] dump_stack+0x1d3/0x2c6 [ 650.958158] ? dump_stack_print_info.cold.1+0x20/0x20 [ 650.963399] warn_alloc.cold.118+0xb7/0x1bd [ 650.966701] Mem-Info: [ 650.967720] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 650.970148] active_anon:102328 inactive_anon:209 isolated_anon:0 [ 650.970148] active_file:16 inactive_file:14 isolated_file:0 [ 650.970148] unevictable:0 dirty:0 writeback:0 unstable:0 [ 650.970148] slab_reclaimable:11429 slab_unreclaimable:111237 [ 650.970148] mapped:49154 shmem:245 pagetables:877 bounce:0 [ 650.970148] free:13830 free_pcp:124 free_cma:0 [ 650.974977] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 651.013586] __vmalloc_node_range+0x522/0x750 [ 651.018137] ? drm_property_create_blob.part.2+0xaa/0x470 [ 651.023687] __vmalloc_node_flags_caller+0x75/0x90 [ 651.028304] Node 0 active_anon:409168kB inactive_anon:836kB active_file:60kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 77824kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 651.028626] ? drm_property_create_blob.part.2+0xaa/0x470 [ 651.056063] Node 1 active_anon:144kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 651.061543] kvmalloc_node+0xd7/0xf0 [ 651.061564] drm_property_create_blob.part.2+0xaa/0x470 [ 651.061578] ? find_held_lock+0x36/0x1c0 [ 651.087464] Node 0 DMA free:10256kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 651.091154] ? drm_property_free_blob+0x3b0/0x3b0 [ 651.096514] lowmem_reserve[]: 0 2537 2539 2539 [ 651.100567] ? drm_unbind_agp+0x20/0x20 [ 651.127204] Node 0 DMA32 free:18320kB min:36092kB low:45112kB high:54132kB active_anon:409168kB inactive_anon:836kB active_file:60kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2601648kB mlocked:0kB kernel_stack:6912kB pagetables:3508kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 651.132017] ? lock_downgrade+0x900/0x900 [ 651.136593] lowmem_reserve[]: 0 0 2 2 [ 651.140541] drm_mode_createblob_ioctl+0x1b2/0x570 [ 651.169158] Node 0 Normal free:0kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2460kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 651.173280] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 651.177072] lowmem_reserve[]: 0 0 0 0 [ 651.182005] ? arch_local_save_flags+0x40/0x40 [ 651.182031] drm_ioctl_kernel+0x278/0x330 [ 651.207781] Node 1 Normal free:26744kB min:53760kB low:67200kB high:80640kB active_anon:144kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 651.212593] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 651.216424] lowmem_reserve[]: 0 0 0 0 [ 651.220980] ? drm_setversion+0x8b0/0x8b0 [ 651.225101] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10256kB [ 651.253899] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 651.253927] ? _copy_from_user+0xdf/0x150 [ 651.253945] drm_ioctl+0x58f/0xb90 [ 651.258782] Node 0 DMA32: 730*4kB (UME) 1185*8kB (ME) 254*16kB (ME) 58*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18320kB [ 651.262570] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 651.266711] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 651.278473] ? drm_version+0x3d0/0x3d0 [ 651.278495] ? ___might_sleep+0x1ed/0x300 [ 651.284009] Node 1 Normal: 6*4kB (ME) 8*8kB (ME) 8*16kB (UME) 3*32kB (ME) 1*64kB (E) 2*128kB (ME) 2*256kB (UE) 2*512kB (M) 2*1024kB (M) 1*2048kB (E) 5*4096kB (M) = 26744kB [ 651.288182] ? arch_local_save_flags+0x40/0x40 [ 651.288194] ? __might_fault+0x12b/0x1e0 [ 651.288210] ? lock_downgrade+0x900/0x900 [ 651.291749] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.305189] ? drm_version+0x3d0/0x3d0 [ 651.305233] do_vfs_ioctl+0x1de/0x1790 [ 651.305254] ? ioctl_preallocate+0x300/0x300 [ 651.310090] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 651.320716] ? selinux_file_mprotect+0x620/0x620 [ 651.320731] ? logic_pio_trans_hwaddr+0xd/0x370 [ 651.320748] ? __sanitizer_cov_trace_const_cmp4+0xb/0x20 [ 651.324615] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.328764] ? put_timespec64+0x10f/0x1b0 [ 651.328778] ? nsecs_to_jiffies+0x30/0x30 [ 651.328793] ? do_syscall_64+0x9a/0x820 [ 651.344233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 651.348784] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 651.348801] ? security_file_ioctl+0x94/0xc0 [ 651.348817] ksys_ioctl+0xa9/0xd0 [ 651.352858] 275 total pagecache pages [ 651.357004] __x64_sys_ioctl+0x73/0xb0 [ 651.357023] do_syscall_64+0x1b9/0x820 [ 651.357043] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 651.365861] 0 pages in swap cache [ 651.369753] ? syscall_return_slowpath+0x5e0/0x5e0 [ 651.369770] ? trace_hardirqs_on_caller+0x310/0x310 [ 651.369788] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 651.373675] Swap cache stats: add 0, delete 0, find 0/0 [ 651.378072] ? recalc_sigpending_tsk+0x180/0x180 [ 651.378106] ? __switch_to_asm+0x40/0x70 [ 651.378123] ? __switch_to_asm+0x34/0x70 [ 651.386702] Free swap = 0kB [ 651.391450] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 651.396105] Total swap = 0kB [ 651.401568] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 651.401580] RIP: 0033:0x4579b9 [ 651.401603] Code: Bad RIP value. [ 651.410469] 1965979 pages RAM [ 651.414576] RSP: 002b:00007f1a01608c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.418740] 0 pages HighMem/MovableOnly [ 651.422679] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004579b9 [ 651.422691] RDX: 0000000020000000 RSI: ffffffffffffffbd RDI: 0000000000000006 [ 651.431272] 343429 pages reserved [ 651.436770] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 651.436780] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a016096d4 [ 651.436788] R13: 00000000004beee9 R14: 00000000004d02a0 R15: 00000000ffffffff [ 651.472787] Mem-Info: [ 651.499988] 0 pages cma reserved [ 651.511302] syz-executor3: vmalloc: allocation failure, allocated 2384920576 of 3008876544 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 651.535661] Unreclaimable slab info: [ 651.545580] active_anon:102328 inactive_anon:209 isolated_anon:0 [ 651.545580] active_file:16 inactive_file:14 isolated_file:0 [ 651.545580] unevictable:0 dirty:0 writeback:0 unstable:0 [ 651.545580] slab_reclaimable:11429 slab_unreclaimable:111237 [ 651.545580] mapped:49154 shmem:245 pagetables:877 bounce:0 [ 651.545580] free:13704 free_pcp:124 free_cma:0 [ 651.560763] Name Used Total [ 651.571962] syz-executor3 cpuset=syz3 mems_allowed=0-1 [ 651.601061] pid_2 135KB 148KB [ 651.642957] Node 0 active_anon:409168kB inactive_anon:836kB active_file:52kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 77824kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 651.668161] batadv_tt_change_cache 3KB 7KB [ 651.686619] Node 1 active_anon:144kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 651.707506] batadv_tl_cache 5KB 12KB [ 651.720376] CPU: 0 PID: 21278 Comm: syz-executor3 Not tainted 4.20.0+ #172 [ 651.727411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.736776] Call Trace: [ 651.739366] dump_stack+0x1d3/0x2c6 [ 651.740863] TIPC 11KB 14KB [ 651.743003] ? dump_stack_print_info.cold.1+0x20/0x20 [ 651.752393] SCTPv6 18KB 24KB [ 651.753527] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 651.758950] sctp_bind_bucket 1KB 3KB [ 651.763655] warn_alloc.cold.118+0xb7/0x1bd [ 651.769023] DCCPv6 17KB 21KB [ 651.773318] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 651.778688] DCCP 16KB 20KB [ 651.783522] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 651.788917] bridge_fdb_cache 11KB 15KB [ 651.794377] __vmalloc_node_range+0x522/0x750 [ 651.799740] fib6_nodes 115KB 136KB [ 651.804206] ? drm_property_create_blob.part.2+0xaa/0x470 [ 651.809564] ip6_dst_cache 178KB 247KB [ 651.815073] __vmalloc_node_flags_caller+0x75/0x90 [ 651.820463] RAWv6 78KB 91KB [ 651.825368] ? drm_property_create_blob.part.2+0xaa/0x470 [ 651.830778] UDPv6 3KB 7KB [ 651.836280] kvmalloc_node+0xd7/0xf0 [ 651.841651] tw_sock_TCPv6 0KB 3KB [ 651.845332] drm_property_create_blob.part.2+0xaa/0x470 [ 651.850701] TCPv6 23KB 29KB [ 651.856030] ? drm_property_free_blob+0x3b0/0x3b0 [ 651.861406] nf_conntrack 6KB 11KB [ 651.866206] ? retint_kernel+0x2d/0x2d [ 651.871578] AF_VSOCK 1KB 3KB [ 651.875428] ? drm_mode_createblob_ioctl+0x104/0x570 [ 651.880828] sd_ext_cdb 0KB 7KB [ 651.885860] drm_mode_createblob_ioctl+0x1b2/0x570 [ 651.891244] scsi_sense_cache 1056KB 1060KB [ 651.896144] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 651.901514] virtio_scsi_cmd 16KB 16KB [ 651.906332] drm_ioctl_kernel+0x278/0x330 [ 651.906351] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 651.911704] sgpool-128 8KB 8KB [ 651.915834] ? drm_setversion+0x8b0/0x8b0 [ 651.920674] sgpool-64 4KB 12KB [ 651.926014] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 651.930158] sgpool-32 2KB 15KB [ 651.935492] ? _copy_from_user+0xdf/0x150 [ 651.941029] sgpool-16 1KB 7KB [ 651.946358] drm_ioctl+0x58f/0xb90 [ 651.946374] ? drm_mode_getblob_ioctl+0x2b0/0x2b0 [ 651.946395] ? drm_version+0x3d0/0x3d0 [ 651.950516] sgpool-8 0KB 7KB [ 651.955876] ? ___might_sleep+0x1ed/0x300 [ 651.959445] mqueue_inode_cache 11KB 21KB [ 651.964228] ? arch_local_save_flags+0x40/0x40 [ 651.968121] bio_post_read_ctx 14KB 15KB [ 651.973433] ? __might_fault+0x12b/0x1e0 [ 651.973448] ? lock_downgrade+0x900/0x900 [ 651.977652] bio-2 14KB 15KB [ 651.983016] ? drm_version+0x3d0/0x3d0 [ 651.987594] jfs_mp 7KB 7KB [ 651.992929] do_vfs_ioctl+0x1de/0x1790 [ 651.997022] nfs_commit_data 3KB 14KB [ 652.001110] ? ioctl_preallocate+0x300/0x300 [ 652.006468] nfs_write_data 32KB 32KB [ 652.010342] ? selinux_file_mprotect+0x620/0x620 [ 652.015712] ext4_system_zone 1KB 7KB [ 652.019592] ? logic_pio_trans_hwaddr+0xd/0x370 [ 652.019611] ? __sanitizer_cov_trace_const_cmp4+0xb/0x20 [ 652.019624] ? put_timespec64+0x10f/0x1b0 [ 652.024968] kioctx 1KB 7KB [ 652.029359] ? nsecs_to_jiffies+0x30/0x30 [ 652.029374] ? do_syscall_64+0x9a/0x820 [ 652.029393] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 652.034732] aio_kiocb 1KB 4KB [ 652.039473] ? security_file_ioctl+0x94/0xc0 [ 652.039489] ksys_ioctl+0xa9/0xd0 [ 652.039505] __x64_sys_ioctl+0x73/0xb0 [ 652.044860] dio 2KB 7KB [ 652.049504] do_syscall_64+0x1b9/0x820 [ 652.049519] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 652.049535] ? syscall_return_slowpath+0x5e0/0x5e0 [ 652.054961] bio-1 1KB 7KB [ 652.059093] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 652.059109] ? trace_hardirqs_on_caller+0x310/0x310 [ 652.059141] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 652.064500] pid_namespace 2KB 11KB [ 652.068629] ? prepare_exit_to_usermode+0x291/0x3b0 [ 652.068648] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 652.068667] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 652.072626] posix_timers_cache 3KB 7KB [ 652.078155] RIP: 0033:0x4579b9 [ 652.078178] Code: Bad RIP value. [ 652.083551] rpc_buffers 17KB 25KB [ 652.087939] RSP: 002b:00007f1a0164ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 652.087953] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004579b9 [ 652.087961] RDX: 0000000020000000 RSI: ffffffffffffffbd RDI: 0000000000000004 [ 652.087972] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 652.091407] rpc_tasks 2KB 7KB [ 652.095284] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a0164b6d4 [ 652.095296] R13: 00000000004beee9 R14: 00000000004d02a0 R15: 00000000ffffffff [ 652.100670] UNIX 39KB 50KB [ 652.107582] Node 0 DMA free:10256kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 652.139337] tcp_bind_bucket 4KB 12KB [ 652.150032] lowmem_reserve[]: 0 2537 2539 2539 [ 652.175048] ip_fib_trie 17KB 23KB [ 652.201635] Node 0 DMA32 free:17816kB min:36092kB low:45112kB high:54132kB active_anon:409168kB inactive_anon:836kB active_file:52kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2601648kB mlocked:0kB kernel_stack:6912kB pagetables:3508kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 652.222449] ip_fib_alias 80KB 94KB [ 652.232854] lowmem_reserve[]: 0 0 2 2 [ 652.283572] ip_dst_cache 3KB 28KB [ 652.307994] Node 0 Normal free:0kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2460kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 652.330183] RAW 46KB 50KB [ 652.348402] lowmem_reserve[]: 0 0 0 0 [ 652.352213] Node 1 Normal free:26744kB min:53760kB low:67200kB high:80640kB active_anon:144kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 652.359463] UDP 17KB 32KB [ 652.390403] lowmem_reserve[]: 0 0 0 0 [ 652.393300] TCP 8KB 11KB [ 652.394239] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10256kB [ 652.399640] hugetlbfs_inode_cache 4KB 7KB [ 652.399651] fscache_cookie_jar 1KB 7KB [ 652.399673] eventpoll_pwq 27KB 39KB [ 652.399684] eventpoll_epi 45KB 82KB [ 652.419903] Node 0 DMA32: 728*4kB (UME) 1165*8kB (ME) 243*16kB (UME) 53*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17816kB [ 652.437505] inotify_inode_mark 54KB 59KB [ 652.463487] request_queue 164KB 164KB [ 652.463609] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 652.468946] blkdev_ioc 21KB 23KB [ 652.468957] bio-0 393KB 393KB [ 652.499312] Node 1 Normal: 6*4kB (ME) 8*8kB (ME) 8*16kB (UME) 3*32kB (ME) 1*64kB (E) 2*128kB (ME) 2*256kB (UE) 2*512kB (M) 2*1024kB (M) 1*2048kB (E) 5*4096kB (M) = 26744kB [ 652.505353] biovec-max 1889KB 1889KB [ 652.516034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 652.536184] biovec-128 6KB 12KB [ 652.548942] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 652.555366] biovec-64 225KB 259KB [ 652.557573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 652.557586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 652.557592] 275 total pagecache pages [ 652.557609] 0 pages in swap cache [ 652.557619] Swap cache stats: add 0, delete 0, find 0/0 [ 652.557640] Free swap = 0kB [ 652.557649] Total swap = 0kB [ 652.567189] biovec-16 21KB 30KB [ 652.586227] 1965979 pages RAM [ 652.589161] bio_integrity_payload 1KB 7KB [ 652.597304] 0 pages HighMem/MovableOnly [ 652.599428] khugepaged_mm_slot 12KB 23KB [ 652.604789] 343429 pages reserved [ 652.604797] 0 pages cma reserved [ 652.616405] dmaengine-unmap-256 2KB 6KB [ 652.635937] dmaengine-unmap-128 1KB 3KB [ 652.641559] Mem-Info: [ 652.644019] active_anon:102328 inactive_anon:209 isolated_anon:0 [ 652.644019] active_file:13 inactive_file:17 isolated_file:0 [ 652.644019] unevictable:0 dirty:0 writeback:0 unstable:0 [ 652.644019] slab_reclaimable:11429 slab_unreclaimable:111237 [ 652.644019] mapped:49154 shmem:245 pagetables:877 bounce:0 [ 652.644019] free:13754 free_pcp:62 free_cma:0 [ 652.652038] dmaengine-unmap-16 0KB 4KB [ 652.686200] Node 0 active_anon:409168kB inactive_anon:836kB active_file:48kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 77824kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 652.723294] dmaengine-unmap-2 0KB 3KB [ 652.728838] audit_buffer 0KB 7KB [ 652.734209] skbuff_ext_cache 10KB 23KB [ 652.746938] skbuff_fclone_cache 151KB 195KB [ 652.751800] Node 1 active_anon:144kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 652.752493] skbuff_head_cache 2065KB 4601KB [ 652.792213] Node 0 DMA free:10256kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 652.806347] configfs_dir_cache 2KB 8KB [ 652.836394] file_lock_cache 0KB 7KB [ 652.841775] file_lock_ctx 0KB 3KB [ 652.847276] fsnotify_mark_connector 34KB 39KB [ 652.853165] net_namespace 60KB 60KB [ 652.866427] lowmem_reserve[]: 0 2537 2539 2539 [ 652.871027] Node 0 DMA32 free:17816kB min:36092kB low:45112kB high:54132kB active_anon:409168kB inactive_anon:836kB active_file:48kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2601648kB mlocked:0kB kernel_stack:6912kB pagetables:3508kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 652.874349] shmem_inode_cache 5477KB 5481KB [ 652.926356] task_delay_info 174KB 265KB [ 652.931742] taskstats 83KB 99KB [ 652.940576] lowmem_reserve[]: 0 0 2 2 [ 652.944407] Node 0 Normal free:0kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2460kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 652.946370] proc_dir_entry 658KB 682KB [ 652.986560] pde_opener 2KB 11KB [ 652.991929] seq_file 222KB 295KB [ 652.997781] lowmem_reserve[]: 0 0 0 0 [ 653.001599] Node 1 Normal free:26944kB min:53760kB low:67200kB high:80640kB active_anon:144kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 653.035622] sigqueue 121KB 129KB [ 653.041067] kernfs_node_cache 13632KB 13659KB [ 653.056403] mnt_cache 98KB 108KB [ 653.061793] filp 4587KB 5133KB [ 653.076407] lowmem_reserve[]: 0 0 0 0 [ 653.080262] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10256kB [ 653.092241] names_cache 93797KB 93818KB [ 653.097961] iint_cache 30KB 67KB [ 653.103333] hashtab_node 118KB 119KB [ 653.108786] ebitmap_node 1055KB 1169KB [ 653.114155] avtab_node 1012KB 1013KB [ 653.126471] avc_node 52KB 59KB [ 653.131841] selinux_file_security 296KB 368KB [ 653.141124] Node 0 DMA32: 728*4kB (UME) 1165*8kB (ME) 243*16kB (UME) 53*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17816kB [ 653.154987] selinux_inode_security 3145KB 3524KB [ 653.168789] key_jar 4KB 15KB [ 653.174164] uts_namespace 3KB 11KB [ 653.181510] nsproxy 2KB 7KB [ 653.187096] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 653.206059] vm_area_struct 10197KB 12607KB [ 653.213817] mm_struct 2080KB 2886KB [ 653.219237] fs_cache 188KB 292KB [ 653.224604] files_cache 634KB 877KB [ 653.237584] Node 1 Normal: 6*4kB (ME) 9*8kB (UME) 7*16kB (ME) 3*32kB (ME) 1*64kB (E) 2*128kB (ME) 1*256kB (E) 3*512kB (UM) 2*1024kB (M) 1*2048kB (E) 5*4096kB (M) = 26992kB [ 653.255123] signal_cache 1280KB 1631KB [ 653.260541] sighand_cache 504KB 520KB [ 653.265918] task_struct 5148KB 5191KB [ 653.279406] cred_jar 1106KB 1676KB [ 653.284789] anon_vma_chain 4659KB 5484KB [ 653.291994] anon_vma 199KB 604KB [ 653.297406] pid 67KB 204KB [ 653.302778] Acpi-Operand 155KB 186KB [ 653.316437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 653.325282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 653.334843] Acpi-ParseExt 7KB 7KB [ 653.340253] Acpi-Parse 41KB 47KB [ 653.345618] Acpi-State 52KB 63KB [ 653.358942] Acpi-Namespace 21KB 23KB [ 653.364316] numa_policy 0KB 7KB [ 653.371159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 653.380066] debug_objects_cache 892KB 1094KB [ 653.385624] trace_event_file 265KB 266KB [ 653.398476] ftrace_event_field 378KB 385KB [ 653.403970] pool_workqueue 91KB 100KB [ 653.409515] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 653.420273] task_group 5KB 7KB [ 653.425642] page->ptl 2189KB 3039KB [ 653.431061] 275 total pagecache pages [ 653.434870] 0 pages in swap cache [ 653.446396] kmalloc-2M 2050KB 2050KB [ 653.451779] kmalloc-512k 2056KB 2056KB [ 653.459098] Swap cache stats: add 0, delete 0, find 0/0 [ 653.464463] Free swap = 0kB [ 653.468448] kmalloc-256k 516KB 516KB [ 653.473835] kmalloc-128k 780KB 780KB [ 653.486513] kmalloc-64k 2838KB 2904KB [ 653.491892] kmalloc-32k 28314KB 28611KB [ 653.500055] Total swap = 0kB [ 653.503109] 1965979 pages RAM [ 653.506214] 0 pages HighMem/MovableOnly [ 653.510284] kmalloc-16k 3745KB 3910KB [ 653.515648] kmalloc-8k 2549KB 2656KB [ 653.529180] kmalloc-4k 19813KB 19839KB [ 653.534568] kmalloc-2k 11158KB 12431KB [ 653.541737] 343429 pages reserved [ 653.545208] 0 pages cma reserved [ 653.548794] kmalloc-1k 6603KB 7938KB [ 653.554163] kmalloc-512 5604KB 6476KB [ 653.579427] kmalloc-256 3658KB 3963KB [ 653.584802] kmalloc-128 955KB 1004KB [ 653.590223] kmalloc-96 1419KB 1748KB [ 653.595591] kmalloc-64 2959KB 3564KB [ 653.608605] kmalloc-32 3011KB 3531KB [ 653.613992] kmalloc-192 1532KB 1756KB [ 653.621395] kmem_cache 270KB 273KB [ 653.626870] Out of memory: Kill process 8296 (syz-fuzzer) score 60 or sacrifice child [ 653.634932] Killed process 20299 (syz-executor3) total-vm:70272kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 653.663938] rsyslogd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 653.683202] rsyslogd cpuset=/ mems_allowed=0-1 [ 653.687887] CPU: 1 PID: 8150 Comm: rsyslogd Not tainted 4.20.0+ #172 [ 653.694399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.703749] Call Trace: [ 653.706364] dump_stack+0x1d3/0x2c6 [ 653.710019] ? dump_stack_print_info.cold.1+0x20/0x20 [ 653.715279] ? mark_held_locks+0x130/0x130 [ 653.719534] ? mark_held_locks+0x130/0x130 [ 653.723803] dump_header+0x27b/0xf72 [ 653.727539] ? pagefault_out_of_memory+0x197/0x197 [ 653.732473] ? __lock_acquire+0x62f/0x4c20 [ 653.736714] ? mem_cgroup_charge_statistics+0x780/0x780 [ 653.742084] ? print_usage_bug+0xc0/0xc0 [ 653.746199] ? graph_lock+0x270/0x270 [ 653.750016] ? graph_lock+0x270/0x270 [ 653.753814] ? print_usage_bug+0xc0/0xc0 [ 653.757894] ? print_usage_bug+0xc0/0xc0 [ 653.761965] ? graph_lock+0x270/0x270 [ 653.765798] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 653.771350] ? find_held_lock+0x36/0x1c0 [ 653.775450] ? mark_held_locks+0xc7/0x130 [ 653.779621] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 653.784724] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 653.789829] ? lockdep_hardirqs_on+0x421/0x5c0 [ 653.794415] ? trace_hardirqs_on+0xbd/0x310 [ 653.798756] ? kasan_check_read+0x11/0x20 [ 653.802933] ? ___ratelimit+0x36f/0x655 [ 653.806919] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 653.812386] ? trace_hardirqs_on+0x310/0x310 [ 653.816804] ? lock_downgrade+0x900/0x900 [ 653.820991] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 653.826107] ? ___ratelimit+0xaa/0x655 [ 653.830020] ? idr_get_free+0xf70/0xf70 [ 653.834002] ? task_will_free_mem+0xb30/0xb30 [ 653.838496] ? find_held_lock+0x36/0x1c0 [ 653.842614] oom_kill_process.cold.27+0x10/0x903 [ 653.847391] ? graph_lock+0x270/0x270 [ 653.851224] ? oom_badness+0xe6/0xaa0 [ 653.855033] ? kasan_check_read+0x11/0x20 [ 653.859186] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 653.864471] ? oom_evaluate_task+0x540/0x540 [ 653.868885] ? find_held_lock+0x36/0x1c0 [ 653.872971] ? out_of_memory+0x974/0x1430 [ 653.877132] ? lock_downgrade+0x900/0x900 [ 653.881294] ? check_preemption_disabled+0x48/0x280 [ 653.886362] ? kasan_check_read+0x11/0x20 [ 653.890552] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 653.895836] ? rcu_read_unlock_special+0x370/0x370 [ 653.900777] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 653.906333] ? oom_evaluate_task+0x302/0x540 [ 653.910750] out_of_memory+0xa84/0x1430 [ 653.914734] ? oom_killer_disable+0x3a0/0x3a0 [ 653.919233] ? __alloc_pages_slowpath+0xf5c/0x2df0 [ 653.924170] ? __ww_mutex_check_waiters+0x160/0x160 [ 653.929219] __alloc_pages_slowpath+0x2343/0x2df0 [ 653.934095] ? warn_alloc+0x120/0x120 [ 653.937951] ? mark_held_locks+0x130/0x130 [ 653.942221] ? find_get_entry+0xaae/0x1120 [ 653.946468] ? filemap_map_pages+0x1a30/0x1a30 [ 653.951063] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 653.956604] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 653.962144] ? should_fail+0x22d/0xd01 [ 653.966081] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 653.971187] ? graph_lock+0x270/0x270 [ 653.975015] ? __lock_is_held+0xb5/0x140 [ 653.979118] ? ___might_sleep+0x1ed/0x300 [ 653.983294] ? lock_release+0xa00/0xa00 [ 653.987269] ? arch_local_save_flags+0x40/0x40 [ 653.991852] ? xa_load+0x2ba/0x460 [ 653.995442] ? lock_downgrade+0x900/0x900 [ 653.999595] ? check_preemption_disabled+0x48/0x280 [ 654.004620] ? __might_sleep+0x95/0x190 [ 654.008594] __alloc_pages_nodemask+0xad8/0xea0 [ 654.013268] ? __alloc_pages_slowpath+0x2df0/0x2df0 [ 654.018287] ? xa_load+0x2e1/0x460 [ 654.021825] ? xa_clear_mark+0x40/0x40 [ 654.025727] ? graph_lock+0x270/0x270 [ 654.029545] ? print_usage_bug+0xc0/0xc0 [ 654.033611] ? graph_lock+0x270/0x270 [ 654.037411] ? graph_lock+0x270/0x270 [ 654.041231] ? __do_page_cache_readahead+0x663/0x810 [ 654.046396] ? find_held_lock+0x36/0x1c0 [ 654.050522] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 654.056105] alloc_pages_current+0x10c/0x210 [ 654.060542] ? lock_downgrade+0x900/0x900 [ 654.064690] __page_cache_alloc+0x38c/0x5b0 [ 654.069010] ? kasan_check_read+0x11/0x20 [ 654.073161] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 654.078442] ? filemap_range_has_page+0x4e0/0x4e0 [ 654.083303] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 654.088850] ? check_preemption_disabled+0x48/0x280 [ 654.093874] filemap_fault+0x1595/0x25f0 [ 654.097958] ? __lock_page_or_retry+0xa00/0xa00 [ 654.102633] ? mark_held_locks+0x130/0x130 [ 654.106868] ? find_held_lock+0x36/0x1c0 [ 654.110962] ? filemap_map_pages+0xd78/0x1a30 [ 654.115488] ? lock_downgrade+0x900/0x900 [ 654.119648] ? check_preemption_disabled+0x48/0x280 [ 654.124675] ? kasan_check_read+0x11/0x20 [ 654.128826] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 654.134130] ? rcu_read_unlock_special+0x370/0x370 [ 654.139110] ? filemap_map_pages+0xd9f/0x1a30 [ 654.143635] ? find_get_entries_tag+0x1400/0x1400 [ 654.148492] ? __lock_is_held+0xb5/0x140 [ 654.152559] ? lock_acquire+0x1ed/0x520 [ 654.156544] ? ext4_filemap_fault+0x7a/0xad [ 654.160880] ? lock_release+0xa00/0xa00 [ 654.164873] ? arch_local_save_flags+0x40/0x40 [ 654.169465] ? trace_hardirqs_on+0x310/0x310 [ 654.173903] ? find_held_lock+0x36/0x1c0 [ 654.178006] ? down_read+0x8d/0x120 [ 654.181635] ? ext4_filemap_fault+0x7a/0xad [ 654.186004] ? __down_interruptible+0x700/0x700 [ 654.190675] ? trace_hardirqs_on+0xbd/0x310 [ 654.195012] ext4_filemap_fault+0x82/0xad [ 654.199169] __do_fault+0x100/0x6b0 [ 654.202804] ? do_syslog+0x1572/0x1790 [ 654.206694] ? follow_pfn+0x2e0/0x2e0 [ 654.210502] ? do_syslog+0x30e/0x1790 [ 654.214340] ? pmd_val+0x88/0x100 [ 654.217814] ? add_mm_counter_fast+0xd0/0xd0 [ 654.222305] ? pmd_val+0x88/0x100 [ 654.225817] ? add_mm_counter_fast+0xd0/0xd0 [ 654.230230] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 654.235285] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 654.240850] __handle_mm_fault+0x3956/0x5670 [ 654.245268] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 654.250111] ? graph_lock+0x270/0x270 [ 654.253927] ? print_usage_bug+0xc0/0xc0 [ 654.258030] ? graph_lock+0x270/0x270 [ 654.261828] ? graph_lock+0x270/0x270 [ 654.265661] ? handle_mm_fault+0x42a/0xc70 [ 654.269902] ? lock_downgrade+0x900/0x900 [ 654.274065] ? check_preemption_disabled+0x48/0x280 [ 654.279098] ? kasan_check_read+0x11/0x20 [ 654.283254] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 654.288530] ? rcu_read_unlock_special+0x370/0x370 [ 654.293463] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 654.299018] ? check_preemption_disabled+0x48/0x280 [ 654.304076] handle_mm_fault+0x54f/0xc70 [ 654.308141] ? __handle_mm_fault+0x5670/0x5670 [ 654.312725] ? find_vma+0x34/0x190 [ 654.316271] __do_page_fault+0x5f6/0xd70 [ 654.320331] ? kernel_write+0x120/0x120 [ 654.324331] do_page_fault+0xf2/0x7e0 [ 654.328134] ? vmalloc_sync_all+0x30/0x30 [ 654.332316] ? error_entry+0x70/0xd0 [ 654.336051] ? trace_hardirqs_off_caller+0xbb/0x310 [ 654.341080] ? trace_hardirqs_on_caller+0xc0/0x310 [ 654.346016] ? syscall_return_slowpath+0x5e0/0x5e0 [ 654.350941] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 654.355785] ? trace_hardirqs_on_caller+0x310/0x310 [ 654.360809] ? trace_hardirqs_off+0x310/0x310 [ 654.365317] ? prepare_exit_to_usermode+0x291/0x3b0 [ 654.370334] ? page_fault+0x8/0x30 [ 654.373874] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 654.378755] ? page_fault+0x8/0x30 [ 654.382343] page_fault+0x1e/0x30 [ 654.385812] RIP: 0033:0x7eff679fa1fd [ 654.389531] Code: Bad RIP value. [ 654.392889] RSP: 002b:00007eff64f99e30 EFLAGS: 00010293 [ 654.398253] RAX: 0000000000000076 RBX: 0000000001c5e4b0 RCX: 00007eff679fa1fd [ 654.405520] RDX: 0000000000000fff RSI: 00007eff667ce5a0 RDI: 0000000000000004 [ 654.412787] RBP: 0000000000000000 R08: 0000000001c49260 R09: 0000000000000000 [ 654.420054] R10: 6b205d3030303636 R11: 0000000000000293 R12: 000000000065e420 [ 654.427325] R13: 00007eff64f9a9c0 R14: 00007eff6803f040 R15: 0000000000000003 [ 654.454720] Mem-Info: [ 654.457296] active_anon:102303 inactive_anon:209 isolated_anon:0 [ 654.457296] active_file:15 inactive_file:15 isolated_file:0 [ 654.457296] unevictable:0 dirty:0 writeback:0 unstable:0 [ 654.457296] slab_reclaimable:11429 slab_unreclaimable:111237 [ 654.457296] mapped:49154 shmem:245 pagetables:840 bounce:0 [ 654.457296] free:13703 free_pcp:221 free_cma:0 [ 654.606419] Node 0 active_anon:409024kB inactive_anon:836kB active_file:52kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 77824kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 654.685455] Node 1 active_anon:140kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 654.724066] Node 0 DMA free:10256kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 654.765900] lowmem_reserve[]: 0 2537 2539 2539 [ 654.778302] Node 0 DMA32 free:17848kB min:36092kB low:45112kB high:54132kB active_anon:409024kB inactive_anon:836kB active_file:52kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2601648kB mlocked:0kB kernel_stack:6880kB pagetables:3328kB bounce:0kB free_pcp:628kB local_pcp:628kB free_cma:0kB [ 654.879417] lowmem_reserve[]: 0 0 2 2 [ 654.883250] Node 0 Normal free:0kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2460kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 654.933691] lowmem_reserve[]: 0 0 0 0 [ 654.952899] Node 1 Normal free:26740kB min:53760kB low:67200kB high:80640kB active_anon:140kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:256kB local_pcp:256kB free_cma:0kB [ 654.988471] lowmem_reserve[]: 0 0 0 0 [ 654.992294] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10256kB [ 655.020678] Node 0 DMA32: 728*4kB (UME) 1165*8kB (ME) 243*16kB (UME) 54*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17848kB [ 655.048894] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 655.068010] Node 1 Normal: 7*4kB (UME) 9*8kB (UME) 7*16kB (ME) 3*32kB (ME) 1*64kB (E) 2*128kB (ME) 2*256kB (UE) 2*512kB (M) 2*1024kB (M) 1*2048kB (E) 5*4096kB (M) = 26740kB [ 655.095155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 655.106170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 655.144498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 655.155309] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 655.198072] 275 total pagecache pages [ 655.201886] 0 pages in swap cache [ 655.205345] Swap cache stats: add 0, delete 0, find 0/0 [ 655.226018] Free swap = 0kB [ 655.246386] Total swap = 0kB [ 655.249409] 1965979 pages RAM [ 655.252503] 0 pages HighMem/MovableOnly [ 655.273008] 343429 pages reserved [ 655.276537] 0 pages cma reserved [ 655.279945] Unreclaimable slab info: [ 655.283680] Name Used Total [ 655.313669] pid_2 135KB 148KB [ 655.342318] batadv_tt_change_cache 3KB 7KB [ 655.369963] batadv_tl_cache 5KB 12KB [ 655.375367] TIPC 11KB 14KB [ 655.396475] SCTPv6 18KB 24KB [ 655.401869] sctp_bind_bucket 1KB 3KB [ 655.437997] DCCPv6 17KB 21KB [ 655.443379] DCCP 16KB 20KB [ 655.457265] bridge_fdb_cache 11KB 15KB [ 655.462645] fib6_nodes 115KB 136KB [ 655.495431] ip6_dst_cache 178KB 247KB [ 655.513417] RAWv6 78KB 91KB [ 655.519620] UDPv6 3KB 7KB [ 655.532327] tw_sock_TCPv6 0KB 3KB [ 655.537757] TCPv6 23KB 29KB [ 655.543174] nf_conntrack 6KB 11KB [ 655.572689] AF_VSOCK 1KB 3KB [ 655.581858] sd_ext_cdb 0KB 7KB [ 655.602759] scsi_sense_cache 1056KB 1060KB [ 655.614410] virtio_scsi_cmd 16KB 16KB [ 655.623040] sgpool-128 8KB 8KB [ 655.642579] sgpool-64 4KB 12KB [ 655.654382] sgpool-32 2KB 15KB [ 655.670434] sgpool-16 1KB 7KB [ 655.676900] sgpool-8 0KB 7KB [ 655.682297] mqueue_inode_cache 11KB 21KB [ 655.700335] bio_post_read_ctx 14KB 15KB [ 655.705781] bio-2 14KB 15KB [ 655.721440] jfs_mp 7KB 7KB [ 655.744869] nfs_commit_data 3KB 14KB [ 655.751085] nfs_write_data 32KB 32KB [ 655.756561] ext4_system_zone 1KB 7KB [ 655.771214] kioctx 1KB 7KB [ 655.791274] aio_kiocb 1KB 4KB [ 655.798418] dio 2KB 7KB [ 655.803923] bio-1 1KB 7KB [ 655.826368] pid_namespace 2KB 11KB [ 655.831762] posix_timers_cache 3KB 7KB [ 655.837323] rpc_buffers 17KB 25KB [ 655.843459] rpc_tasks 2KB 7KB [ 655.849453] UNIX 39KB 50KB [ 655.854883] tcp_bind_bucket 4KB 12KB [ 655.861444] ip_fib_trie 17KB 23KB [ 655.866861] ip_fib_alias 80KB 94KB [ 655.872229] ip_dst_cache 3KB 28KB [ 655.877644] RAW 46KB 50KB [ 655.883012] UDP 17KB 32KB [ 655.888474] TCP 8KB 11KB [ 655.893844] hugetlbfs_inode_cache 4KB 7KB [ 655.899608] fscache_cookie_jar 1KB 7KB [ 655.905067] eventpoll_pwq 27KB 39KB [ 655.912193] eventpoll_epi 45KB 82KB [ 655.918294] inotify_inode_mark 54KB 59KB [ 655.924691] request_queue 164KB 164KB [ 655.931115] blkdev_ioc 21KB 23KB [ 655.937361] bio-0 416KB 416KB [ 655.943559] biovec-max 1889KB 1889KB [ 655.949814] biovec-128 6KB 12KB [ 655.956562] biovec-64 288KB 291KB [ 655.962746] biovec-16 30KB 30KB [ 655.968162] bio_integrity_payload 1KB 7KB [ 655.973874] khugepaged_mm_slot 12KB 23KB [ 655.980169] dmaengine-unmap-256 2KB 6KB [ 655.986520] dmaengine-unmap-128 1KB 3KB [ 655.992164] dmaengine-unmap-16 0KB 4KB [ 655.997677] dmaengine-unmap-2 0KB 3KB [ 656.003040] audit_buffer 0KB 7KB [ 656.008443] skbuff_ext_cache 23KB 23KB [ 656.013809] skbuff_fclone_cache 151KB 195KB [ 656.019432] skbuff_head_cache 2065KB 4601KB [ 656.024798] configfs_dir_cache 2KB 8KB [ 656.036378] file_lock_cache 0KB 7KB [ 656.041773] file_lock_ctx 0KB 3KB [ 656.056384] fsnotify_mark_connector 34KB 39KB [ 656.062279] net_namespace 60KB 60KB [ 656.067742] shmem_inode_cache 5477KB 5481KB [ 656.073104] task_delay_info 174KB 265KB [ 656.086363] taskstats 83KB 99KB [ 656.091736] proc_dir_entry 658KB 682KB [ 656.106358] pde_opener 2KB 11KB [ 656.111722] seq_file 222KB 295KB [ 656.117156] sigqueue 121KB 129KB [ 656.122554] kernfs_node_cache 13632KB 13659KB [ 656.127959] mnt_cache 98KB 108KB [ 656.133340] filp 4587KB 5133KB [ 656.138745] names_cache 93806KB 93827KB [ 656.144128] iint_cache 30KB 67KB [ 656.149540] hashtab_node 118KB 119KB [ 656.154937] ebitmap_node 1055KB 1169KB [ 656.160376] avtab_node 1012KB 1013KB [ 656.165747] avc_node 52KB 59KB [ 656.171159] selinux_file_security 296KB 368KB [ 656.176967] selinux_inode_security 3145KB 3524KB [ 656.182778] key_jar 4KB 15KB [ 656.188217] uts_namespace 3KB 11KB [ 656.193612] nsproxy 2KB 7KB [ 656.199050] vm_area_struct 10197KB 12607KB [ 656.204438] mm_struct 2080KB 2886KB [ 656.209839] fs_cache 188KB 292KB [ 656.215217] files_cache 634KB 877KB [ 656.220643] signal_cache 1280KB 1631KB [ 656.226009] sighand_cache 504KB 520KB [ 656.231407] task_struct 5148KB 5191KB [ 656.236837] cred_jar 1106KB 1676KB [ 656.242205] anon_vma_chain 4659KB 5484KB [ 656.247608] anon_vma 199KB 604KB [ 656.252992] pid 67KB 204KB [ 656.258427] Acpi-Operand 155KB 186KB [ 656.263797] Acpi-ParseExt 7KB 7KB [ 656.269202] Acpi-Parse 41KB 47KB [ 656.274598] Acpi-State 52KB 63KB [ 656.280012] Acpi-Namespace 21KB 23KB [ 656.285383] numa_policy 0KB 7KB [ 656.296425] debug_objects_cache 892KB 1094KB [ 656.301986] trace_event_file 265KB 266KB [ 656.307393] ftrace_event_field 378KB 385KB [ 656.312856] pool_workqueue 91KB 100KB [ 656.318266] task_group 5KB 7KB [ 656.323636] page->ptl 2189KB 3039KB [ 656.329107] kmalloc-2M 2050KB 2050KB [ 656.334479] kmalloc-512k 2056KB 2056KB [ 656.339888] kmalloc-256k 516KB 516KB [ 656.345265] kmalloc-128k 780KB 780KB [ 656.350680] kmalloc-64k 2838KB 2904KB [ 656.356078] kmalloc-32k 28314KB 28611KB [ 656.361504] kmalloc-16k 3745KB 3910KB [ 656.366917] kmalloc-8k 2549KB 2656KB [ 656.372282] kmalloc-4k 19813KB 19839KB [ 656.377712] kmalloc-2k 11158KB 12431KB [ 656.383097] kmalloc-1k 6603KB 7938KB [ 656.388502] kmalloc-512 5604KB 6476KB [ 656.393867] kmalloc-256 3658KB 3963KB [ 656.399277] kmalloc-128 955KB 1004KB [ 656.404642] kmalloc-96 1426KB 1748KB [ 656.410044] kmalloc-64 2959KB 3564KB [ 656.415438] kmalloc-32 3022KB 3531KB [ 656.420887] kmalloc-192 1532KB 1756KB [ 656.426275] kmem_cache 270KB 273KB [ 656.431728] Out of memory: Kill process 8296 (syz-fuzzer) score 60 or sacrifice child [ 656.439839] Killed process 8310 (syz-executor0) total-vm:70272kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 656.450190] oom_reaper: reaped process 8310 (syz-executor0), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB [ 660.077026] device bridge_slave_1 left promiscuous mode [ 660.082641] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.137234] device bridge_slave_0 left promiscuous mode [ 660.142737] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.720291] team0 (unregistering): Port device team_slave_1 removed [ 663.731208] team0 (unregistering): Port device team_slave_0 removed [ 663.743197] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 663.782503] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 663.864851] bond0 (unregistering): Released all slaves [ 664.188588] IPVS: ftp: loaded support on port[0] = 21 [ 665.044374] chnl_net:caif_netlink_parms(): no params data found [ 665.407685] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.414154] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.422165] device bridge_slave_0 entered promiscuous mode [ 665.472218] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.479204] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.487485] device bridge_slave_1 entered promiscuous mode [ 665.621720] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 665.668770] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 665.815876] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 665.823181] team0: Port device team_slave_0 added [ 665.854796] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 665.862489] team0: Port device team_slave_1 added [ 665.905430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 665.952687] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 666.086841] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 666.118499] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 666.463104] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 666.597378] device bridge_slave_1 left promiscuous mode [ 666.602936] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.657778] device bridge_slave_0 left promiscuous mode [ 666.663261] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.774076] team0 (unregistering): Port device team_slave_1 removed [ 666.787572] team0 (unregistering): Port device team_slave_0 removed [ 666.799821] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 666.863447] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 666.958650] bond0 (unregistering): Released all slaves [ 668.555096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.721344] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 668.867714] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 668.873859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 668.882736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 669.041021] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 669.047297] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.201983] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 669.209109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 669.217624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 669.225340] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.231751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.239612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 669.329562] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 669.336714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 669.344981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 669.353001] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.359409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.449718] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 669.456799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 669.560009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 669.567078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 669.668321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 669.675237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 669.683674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 669.691972] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 669.791764] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 669.799247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 669.807641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 669.908034] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 669.914774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 669.924189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 670.020628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 670.027799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 670.035385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 670.770127] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 671.015850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.517866] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 675.526229] CPU: 1 PID: 2562 Comm: kworker/u4:4 Not tainted 4.20.0+ #172 [ 675.533073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.542521] Workqueue: writeback wb_workfn (flush-8:0) [ 675.547800] Call Trace: [ 675.550387] dump_stack+0x1d3/0x2c6 [ 675.554016] ? dump_stack_print_info.cold.1+0x20/0x20 [ 675.559280] panic+0x2ad/0x55f [ 675.562494] ? add_taint.cold.5+0x16/0x16 [ 675.566647] ? trace_hardirqs_on+0x310/0x310 [ 675.571056] ? do_raw_spin_trylock+0x270/0x270 [ 675.575643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 675.581183] ? check_preemption_disabled+0x48/0x280 [ 675.586213] ? check_preemption_disabled+0x3a/0x280 [ 675.591251] __schedule+0x1ec6/0x1ed0 [ 675.595066] ? find_held_lock+0x36/0x1c0 [ 675.599169] ? graph_lock+0x270/0x270 [ 675.602975] ? __sched_text_start+0x8/0x8 [ 675.607129] ? wake_up_process+0x10/0x20 [ 675.611192] ? find_held_lock+0x36/0x1c0 [ 675.615275] ? mark_held_locks+0xc7/0x130 [ 675.619427] ? _raw_spin_unlock_irq+0x27/0x80 [ 675.623931] ? _raw_spin_unlock_irq+0x27/0x80 [ 675.628428] ? lockdep_hardirqs_on+0x421/0x5c0 [ 675.633013] ? preempt_schedule+0x4d/0x60 [ 675.637163] preempt_schedule_common+0x1f/0xe0 [ 675.641745] preempt_schedule+0x4d/0x60 [ 675.645716] ___preempt_schedule+0x16/0x18 [ 675.649974] _raw_spin_unlock_irq+0x75/0x80 [ 675.654382] __flush_work+0x45e/0x9b0 [ 675.658221] ? lock_acquire+0x1ed/0x520 [ 675.662198] ? insert_work+0x4c0/0x4c0 [ 675.666090] ? mark_held_locks+0xc7/0x130 [ 675.670240] ? queue_work_on+0xe8/0x1e0 [ 675.674214] ? queue_work_on+0xe8/0x1e0 [ 675.678193] ? lockdep_hardirqs_on+0x421/0x5c0 [ 675.682794] ? flush_workqueue_prep_pwqs+0x810/0x810 [ 675.687912] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 675.693461] ? find_next_bit+0x104/0x130 [ 675.697525] flush_work+0x17/0x20 [ 675.700986] drain_all_pages+0x418/0x680 [ 675.705056] ? drain_local_pages+0x30/0x30 [ 675.709312] __alloc_pages_slowpath+0xb61/0x2df0 [ 675.714064] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 675.719573] ? virtscsi_kick_cmd+0x86/0x130 [ 675.723917] ? warn_alloc+0x120/0x120 [ 675.727807] ? scsi_dispatch_cmd+0x452/0xe60 [ 675.732221] ? scsi_mq_init_request+0x300/0x300 [ 675.736893] ? sd_setup_write_same10_cmnd+0x770/0x770 [ 675.742091] ? graph_lock+0x270/0x270 [ 675.745889] ? graph_lock+0x270/0x270 [ 675.749693] ? check_preemption_disabled+0x48/0x280 [ 675.754706] ? graph_lock+0x270/0x270 [ 675.758511] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 675.764087] ? should_fail+0x22d/0xd01 [ 675.767990] ? __lock_is_held+0xb5/0x140 [ 675.772051] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 675.777185] ? find_held_lock+0x36/0x1c0 [ 675.781260] ? graph_lock+0x270/0x270 [ 675.785062] ? lock_downgrade+0x900/0x900 [ 675.789256] ? check_preemption_disabled+0x48/0x280 [ 675.794274] ? __lock_is_held+0xb5/0x140 [ 675.798343] ? ___might_sleep+0x1ed/0x300 [ 675.802499] ? arch_local_save_flags+0x40/0x40 [ 675.807089] ? __might_sleep+0x95/0x190 [ 675.811063] __alloc_pages_nodemask+0xad8/0xea0 [ 675.815731] ? __alloc_pages_slowpath+0x2df0/0x2df0 [ 675.820750] ? graph_lock+0x270/0x270 [ 675.824550] ? print_usage_bug+0xc0/0xc0 [ 675.828615] ? __zone_watermark_ok+0x330/0x7b0 [ 675.833202] ? print_usage_bug+0xc0/0xc0 [ 675.837288] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 675.842856] ? blk_mq_dispatch_rq_list+0x163d/0x2500 [ 675.847977] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 675.853521] ? __radix_tree_lookup+0x3b6/0x510 [ 675.858118] ? blk_mq_get_driver_tag+0x830/0x830 [ 675.862872] ? print_usage_bug+0xc0/0xc0 [ 675.866952] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 675.872496] alloc_pages_current+0x10c/0x210 [ 675.876909] __page_cache_alloc+0x38c/0x5b0 [ 675.881258] ? filemap_range_has_page+0x4e0/0x4e0 [ 675.886115] ? lock_downgrade+0x900/0x900 [ 675.890329] ? deadline_remove_request+0x29a/0x640 [ 675.895266] pagecache_get_page+0x396/0xf00 [ 675.899591] ? do_raw_spin_trylock+0x270/0x270 [ 675.904177] ? find_get_pages_contig+0x18d0/0x18d0 [ 675.909114] ? _raw_spin_unlock+0x2c/0x50 [ 675.913277] ? dd_dispatch_request+0x399/0xd40 [ 675.917865] ? graph_lock+0x270/0x270 [ 675.921686] ? deadline_remove_request+0x640/0x640 [ 675.926619] ? refcount_add_not_zero_checked+0x330/0x330 [ 675.932073] ? __lock_acquire+0x62f/0x4c20 [ 675.936306] ? mark_held_locks+0x130/0x130 [ 675.940558] ? ___ratelimit.cold.2+0x6b/0x6b [ 675.944979] ? __lock_is_held+0xb5/0x140 [ 675.949056] ? ___might_sleep+0x1ed/0x300 [ 675.953206] ? scsi_mq_get_budget+0x216/0x530 [ 675.957702] ? arch_local_save_flags+0x40/0x40 [ 675.962286] ? scsi_run_queue+0x1610/0x1610 [ 675.966619] ? __might_sleep+0x95/0x190 [ 675.970603] ext4_mb_load_buddy_gfp+0xddf/0x1e70 [ 675.975363] ? dd_prepare_request+0x10/0x10 [ 675.979706] ? ext4_mb_good_group+0x730/0x730 [ 675.984213] ? blk_mq_do_dispatch_ctx+0x6d0/0x6d0 [ 675.989057] ? graph_lock+0x270/0x270 [ 675.992856] ? find_held_lock+0x36/0x1c0 [ 675.996934] ? __lock_acquire+0x62f/0x4c20 [ 676.001172] ? __lock_acquire+0x62f/0x4c20 [ 676.005419] ? find_held_lock+0x36/0x1c0 [ 676.009510] ? mark_held_locks+0x130/0x130 [ 676.013743] ? mark_held_locks+0x130/0x130 [ 676.018038] ? __read_once_size_nocheck.constprop.8+0x10/0x10 [ 676.023949] ? ret_from_fork+0x3a/0x50 [ 676.027842] ? print_usage_bug+0xc0/0xc0 [ 676.031918] ? unwind_next_frame.part.7+0x1ae/0x9e0 [ 676.036948] ? unwind_dump+0x190/0x190 [ 676.040832] ? blk_mq_bio_to_request+0x940/0x940 [ 676.045590] ? unwind_dump+0x190/0x190 [ 676.049483] ? graph_lock+0x270/0x270 [ 676.053282] ? graph_lock+0x270/0x270 [ 676.057107] ? unwind_next_frame+0x3e/0x50 [ 676.061361] ? find_held_lock+0x36/0x1c0 [ 676.065445] ext4_mb_find_by_goal+0x2fa/0x1040 [ 676.070029] ? ext4_mb_normalize_request.constprop.32+0x8e4/0x1940 [ 676.076381] ? ext4_mb_use_best_found+0x9b0/0x9b0 [ 676.081257] ? kasan_check_read+0x11/0x20 [ 676.085418] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 676.090726] ? kasan_check_read+0x11/0x20 [ 676.094898] ext4_mb_regular_allocator+0x282/0x1590 [ 676.099938] ? ext4_mb_complex_scan_group+0xb10/0xb10 [ 676.105136] ? ext4_mb_free_metadata+0xc90/0xc90 [ 676.109905] ? rcu_read_lock_sched_held+0x108/0x120 [ 676.114932] ? kmem_cache_alloc+0x33a/0x730 [ 676.119277] ext4_mb_new_blocks+0x1de3/0x4840 [ 676.123791] ? ext4_discard_preallocations+0x13c0/0x13c0 [ 676.129245] ? unwind_next_frame.part.7+0x1ae/0x9e0 [ 676.134258] ? unwind_dump+0x190/0x190 [ 676.138159] ? unwind_dump+0x190/0x190 [ 676.142072] ? unwind_next_frame+0x3e/0x50 [ 676.146340] ? __save_stack_trace+0x7d/0xf0 [ 676.150668] ? ret_from_fork+0x3a/0x50 [ 676.154558] ? save_stack+0xa9/0xd0 [ 676.158196] ? save_stack+0x43/0xd0 [ 676.161834] ? kasan_kmalloc+0xc7/0xe0 [ 676.165718] ? __kmalloc+0x15b/0x770 [ 676.169492] ? ext4_find_extent+0x757/0x9b0 [ 676.173816] ? ext4_ext_map_blocks+0x2ad/0x6180 [ 676.178485] ? ext4_map_blocks+0x8f7/0x1b60 [ 676.182802] ? ext4_writepages+0x2573/0x4180 [ 676.187238] ? do_writepages+0x9a/0x1a0 [ 676.191212] ? __writeback_single_inode+0x20a/0x1660 [ 676.196343] ? writeback_sb_inodes+0x71f/0x1210 [ 676.201013] ? __writeback_inodes_wb+0x1b9/0x340 [ 676.205766] ? wb_writeback+0xa73/0xfc0 [ 676.209737] ? wb_workfn+0xee9/0x1790 [ 676.213540] ? process_one_work+0xc90/0x1c40 [ 676.217968] ? worker_thread+0x17f/0x1390 [ 676.222160] ? kthread+0x35a/0x440 [ 676.225713] ? ret_from_fork+0x3a/0x50 [ 676.229611] ? graph_lock+0x270/0x270 [ 676.233442] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.238982] ? check_preemption_disabled+0x48/0x280 [ 676.244010] ? __lock_is_held+0xb5/0x140 [ 676.248071] ? graph_lock+0x270/0x270 [ 676.251879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.257424] ? check_preemption_disabled+0x48/0x280 [ 676.262474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.268017] ? ext4_ext_search_right+0x2e1/0xb10 [ 676.272779] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.278327] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 676.283346] ext4_ext_map_blocks+0x2eef/0x6180 [ 676.287950] ? ext4_ext_release+0x10/0x10 [ 676.292104] ? __pagevec_release+0x88/0x120 [ 676.296427] ? find_held_lock+0x36/0x1c0 [ 676.300493] ? graph_lock+0x270/0x270 [ 676.304292] ? graph_lock+0x270/0x270 [ 676.308103] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.313659] ? lock_acquire+0x1ed/0x520 [ 676.317632] ? ext4_map_blocks+0x88f/0x1b60 [ 676.321968] ? lock_release+0xa00/0xa00 [ 676.325949] ? arch_local_save_flags+0x40/0x40 [ 676.330530] ? ext4_es_cache_extent+0x6a0/0x6a0 [ 676.335212] ? down_write+0x8a/0x130 [ 676.338968] ? ext4_map_blocks+0x88f/0x1b60 [ 676.343299] ? down_read+0x120/0x120 [ 676.347022] ext4_map_blocks+0x8f7/0x1b60 [ 676.351172] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.356737] ? check_preemption_disabled+0x48/0x280 [ 676.361759] ? ext4_issue_zeroout+0x160/0x160 [ 676.366251] ? __lock_is_held+0xb5/0x140 [ 676.370342] ext4_writepages+0x2573/0x4180 [ 676.374603] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 676.379362] ? print_usage_bug+0xc0/0xc0 [ 676.383421] ? rb_erase_cached+0xc78/0x3720 [ 676.387768] ? attach_entity_load_avg+0x860/0x860 [ 676.392612] ? rb_next+0x140/0x140 [ 676.396156] ? print_usage_bug+0xc0/0xc0 [ 676.400226] ? __lock_acquire+0x62f/0x4c20 [ 676.404465] ? print_usage_bug+0xc0/0xc0 [ 676.408525] ? graph_lock+0x270/0x270 [ 676.412325] ? print_usage_bug+0xc0/0xc0 [ 676.416388] ? __lock_acquire+0x62f/0x4c20 [ 676.420624] ? mark_held_locks+0x130/0x130 [ 676.424874] ? mark_held_locks+0x130/0x130 [ 676.429128] ? graph_lock+0x270/0x270 [ 676.432944] ? __writeback_single_inode+0x6d8/0x1660 [ 676.438053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.443590] ? check_preemption_disabled+0x48/0x280 [ 676.448613] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 676.453370] do_writepages+0x9a/0x1a0 [ 676.457174] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 676.461935] ? do_writepages+0x9a/0x1a0 [ 676.465920] __writeback_single_inode+0x20a/0x1660 [ 676.470883] ? __lock_acquire+0x62f/0x4c20 [ 676.475140] ? __mark_inode_dirty+0x1510/0x1510 [ 676.479824] ? mark_held_locks+0x130/0x130 [ 676.484057] ? find_held_lock+0x36/0x1c0 [ 676.488164] ? find_held_lock+0x36/0x1c0 [ 676.492238] ? wbc_attach_and_unlock_inode+0x5c0/0xa30 [ 676.497516] ? lock_downgrade+0x900/0x900 [ 676.501663] ? find_held_lock+0x13f/0x1c0 [ 676.505815] ? kasan_check_read+0x11/0x20 [ 676.509982] ? do_raw_spin_unlock+0xa7/0x330 [ 676.514405] ? do_raw_spin_trylock+0x270/0x270 [ 676.518984] ? __lock_is_held+0xb5/0x140 [ 676.523057] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 676.528595] ? wbc_attach_and_unlock_inode+0x675/0xa30 [ 676.533875] ? __writeback_single_inode+0x1660/0x1660 [ 676.539076] writeback_sb_inodes+0x71f/0x1210 [ 676.543593] ? wbc_detach_inode+0x940/0x940 [ 676.547918] ? lock_release+0xa00/0xa00 [ 676.551919] ? down_read_trylock+0xda/0x140 [ 676.556264] ? trylock_super+0x22/0x110 [ 676.560253] ? downgrade_write+0x270/0x270 [ 676.564484] ? graph_lock+0x270/0x270 [ 676.568288] ? up_read_non_owner+0x100/0x100 [ 676.572716] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 676.578260] __writeback_inodes_wb+0x1b9/0x340 [ 676.582874] ? writeback_sb_inodes+0x1210/0x1210 [ 676.587632] ? __lock_is_held+0xb5/0x140 [ 676.591703] wb_writeback+0xa73/0xfc0 [ 676.595534] ? writeback_inodes_wb.constprop.50+0x330/0x330 [ 676.601270] ? widen_string+0xe0/0x2e0 [ 676.605168] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 676.610362] ? print_usage_bug+0xc0/0xc0 [ 676.614440] ? string+0x225/0x2d0 [ 676.617899] ? widen_string+0x2e0/0x2e0 [ 676.621891] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 676.626910] ? find_next_bit+0x104/0x130 [ 676.630996] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 676.636028] ? find_next_bit+0x104/0x130 [ 676.640096] ? cpumask_next+0x41/0x50 [ 676.643897] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 676.648923] ? get_nr_dirty_inodes+0xd6/0x130 [ 676.653428] ? __local_bh_enable_ip+0x160/0x260 [ 676.658109] ? get_nr_dirty_pages+0x17c/0x1f0 [ 676.662607] ? _raw_spin_unlock_bh+0x30/0x40 [ 676.667019] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 676.672038] ? wb_split_bdi_pages.isra.29+0x134/0x1b0 [ 676.677245] ? wb_wait_for_completion+0x2d0/0x2d0 [ 676.682093] ? wb_workfn+0x521/0x1790 [ 676.685910] ? __local_bh_enable_ip+0x160/0x260 [ 676.690623] wb_workfn+0xee9/0x1790 [ 676.694272] ? __lock_acquire+0x62f/0x4c20 [ 676.698519] ? inode_wait_for_writeback+0x40/0x40 [ 676.703366] ? mark_held_locks+0x130/0x130 [ 676.707602] ? mark_held_locks+0x130/0x130 [ 676.711856] ? set_next_entity+0x2f0/0xaf0 [ 676.716100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.721642] ? update_load_avg+0x2470/0x2470 [ 676.726085] ? pick_next_task_fair+0xa0e/0x1ba0 [ 676.730776] ? debug_object_deactivate+0x2eb/0x450 [ 676.735747] ? lock_downgrade+0x900/0x900 [ 676.739900] ? find_held_lock+0x36/0x1c0 [ 676.743978] ? graph_lock+0x270/0x270 [ 676.747785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.753340] ? check_preemption_disabled+0x48/0x280 [ 676.758361] ? __lock_is_held+0xb5/0x140 [ 676.762467] process_one_work+0xc90/0x1c40 [ 676.766771] ? mark_held_locks+0x130/0x130 [ 676.771029] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 676.775705] ? __switch_to_asm+0x40/0x70 [ 676.779768] ? __switch_to_asm+0x34/0x70 [ 676.783858] ? __switch_to_asm+0x40/0x70 [ 676.787916] ? __switch_to_asm+0x34/0x70 [ 676.791986] ? __switch_to_asm+0x40/0x70 [ 676.796046] ? __switch_to_asm+0x34/0x70 [ 676.800110] ? __switch_to_asm+0x40/0x70 [ 676.804188] ? __switch_to_asm+0x34/0x70 [ 676.808247] ? __switch_to_asm+0x40/0x70 [ 676.812309] ? __schedule+0x874/0x1ed0 [ 676.816197] ? __switch_to_asm+0x34/0x70 [ 676.820278] ? __switch_to_asm+0x40/0x70 [ 676.824355] ? graph_lock+0x270/0x270 [ 676.828176] ? __sched_text_start+0x8/0x8 [ 676.832333] ? lockdep_hardirqs_on+0x421/0x5c0 [ 676.836937] ? lock_acquire+0x1ed/0x520 [ 676.840912] ? worker_thread+0x3e0/0x1390 [ 676.845076] ? kasan_check_read+0x11/0x20 [ 676.849240] ? do_raw_spin_lock+0x14f/0x350 [ 676.853578] ? kasan_check_read+0x11/0x20 [ 676.857727] ? rwlock_bug.part.2+0x90/0x90 [ 676.861974] ? trace_hardirqs_on+0x310/0x310 [ 676.866449] worker_thread+0x17f/0x1390 [ 676.870427] ? __switch_to_asm+0x34/0x70 [ 676.874510] ? process_one_work+0x1c40/0x1c40 [ 676.879019] ? __sched_text_start+0x8/0x8 [ 676.883188] ? __kthread_parkme+0xce/0x1a0 [ 676.887445] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 676.892568] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 676.897673] ? lockdep_hardirqs_on+0x421/0x5c0 [ 676.902256] ? trace_hardirqs_on+0xbd/0x310 [ 676.906749] ? kasan_check_read+0x11/0x20 [ 676.910898] ? __kthread_parkme+0xce/0x1a0 [ 676.915139] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 676.920606] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 676.925713] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 676.931254] ? __kthread_parkme+0xfb/0x1a0 [ 676.935491] ? process_one_work+0x1c40/0x1c40 [ 676.939985] kthread+0x35a/0x440 [ 676.943350] ? kthread_bind+0x40/0x40 [ 676.947157] ret_from_fork+0x3a/0x50 [ 676.952285] Kernel Offset: disabled [ 676.956145] Rebooting in 86400 seconds..