[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.907660] random: sshd: uninitialized urandom read (32 bytes read) [ 32.277589] kauditd_printk_skb: 9 callbacks suppressed [ 32.277597] audit: type=1400 audit(1570229350.846:35): avc: denied { map } for pid=6883 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 32.332815] random: sshd: uninitialized urandom read (32 bytes read) [ 32.917636] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.1.47' (ECDSA) to the list of known hosts. [ 38.467725] random: sshd: uninitialized urandom read (32 bytes read) 2019/10/04 22:49:17 fuzzer started [ 38.659829] audit: type=1400 audit(1570229357.226:36): avc: denied { map } for pid=6893 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.190141] random: cc1: uninitialized urandom read (8 bytes read) 2019/10/04 22:49:18 dialing manager at 10.128.0.105:39039 2019/10/04 22:49:18 syscalls: 2500 2019/10/04 22:49:18 code coverage: enabled 2019/10/04 22:49:18 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/10/04 22:49:18 extra coverage: extra coverage is not supported by the kernel 2019/10/04 22:49:18 setuid sandbox: enabled 2019/10/04 22:49:18 namespace sandbox: enabled 2019/10/04 22:49:18 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/04 22:49:18 fault injection: enabled 2019/10/04 22:49:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/04 22:49:18 net packet injection: enabled 2019/10/04 22:49:18 net device setup: enabled 2019/10/04 22:49:18 concurrency sanitizer: /proc/kcsaninfo does not exist [ 41.039812] random: crng init done 22:51:28 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000078c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x236, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x200000000000028f, &(0x7f0000002700)}}], 0x75a, 0x0) 22:51:28 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80585414, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) sendfile(r3, r4, &(0x7f0000000140), 0x8fff) lseek(r1, 0x20000010000, 0x0) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 22:51:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 22:51:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c) listen(r1, 0xffffffff80000001) accept4(r1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 22:51:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000400fb], 0x1f004}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 170.119827] audit: type=1400 audit(1570229488.686:37): avc: denied { map } for pid=6893 comm="syz-fuzzer" path="/root/syzkaller-shm054515528" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 170.170514] audit: type=1400 audit(1570229488.726:38): avc: denied { map } for pid=6911 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13822 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 170.510971] IPVS: ftp: loaded support on port[0] = 21 [ 171.322004] chnl_net:caif_netlink_parms(): no params data found [ 171.322068] IPVS: ftp: loaded support on port[0] = 21 [ 171.380814] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.387836] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.396284] device bridge_slave_0 entered promiscuous mode [ 171.408239] IPVS: ftp: loaded support on port[0] = 21 [ 171.419237] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.425825] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.432896] device bridge_slave_1 entered promiscuous mode [ 171.483125] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 171.496798] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.504596] chnl_net:caif_netlink_parms(): no params data found [ 171.543391] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.550760] team0: Port device team_slave_0 added [ 171.561410] IPVS: ftp: loaded support on port[0] = 21 [ 171.571026] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.578914] team0: Port device team_slave_1 added [ 171.586353] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 171.601924] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 171.614205] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.620974] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.628351] device bridge_slave_0 entered promiscuous mode [ 171.645583] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.652236] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.659119] device bridge_slave_1 entered promiscuous mode [ 171.722787] device hsr_slave_0 entered promiscuous mode [ 171.760384] device hsr_slave_1 entered promiscuous mode [ 171.822463] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 171.829595] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 171.865793] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 171.881320] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.917286] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.924461] team0: Port device team_slave_0 added [ 171.930172] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.937245] team0: Port device team_slave_1 added [ 171.946065] chnl_net:caif_netlink_parms(): no params data found [ 171.959065] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 171.970140] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.976607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.983539] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.989899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.002656] IPVS: ftp: loaded support on port[0] = 21 [ 172.010383] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 172.102505] device hsr_slave_0 entered promiscuous mode [ 172.140449] device hsr_slave_1 entered promiscuous mode [ 172.180694] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 172.187887] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 172.214057] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.220584] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.227570] device bridge_slave_0 entered promiscuous mode [ 172.236185] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.242616] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.249568] device bridge_slave_1 entered promiscuous mode [ 172.296379] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 172.305778] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 172.331341] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.338523] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.357770] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 172.365055] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.372219] team0: Port device team_slave_0 added [ 172.378212] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 172.385528] team0: Port device team_slave_1 added [ 172.391657] chnl_net:caif_netlink_parms(): no params data found [ 172.407230] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.415107] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 172.416174] IPVS: ftp: loaded support on port[0] = 21 [ 172.503116] device hsr_slave_0 entered promiscuous mode [ 172.550470] device hsr_slave_1 entered promiscuous mode [ 172.631922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.640527] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 172.666140] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 172.673527] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 172.686419] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.693546] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.702322] device bridge_slave_0 entered promiscuous mode [ 172.743089] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.749470] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.756918] device bridge_slave_1 entered promiscuous mode [ 172.763531] chnl_net:caif_netlink_parms(): no params data found [ 172.788682] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 172.797703] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 172.803846] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.830989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.838906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.847601] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 172.872361] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.882515] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 172.889812] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 172.912252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.923177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.931294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.939108] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.945511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.954814] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 172.966457] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.972942] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.980668] device bridge_slave_0 entered promiscuous mode [ 172.987966] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.994434] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.001422] device bridge_slave_1 entered promiscuous mode [ 173.022264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.030286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.037873] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.044356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.057820] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 173.066731] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 173.115026] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 173.124492] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 173.133555] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 173.141456] team0: Port device team_slave_0 added [ 173.146965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.154648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.164444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 173.172548] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 173.178816] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.196365] chnl_net:caif_netlink_parms(): no params data found [ 173.205761] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.214093] team0: Port device team_slave_1 added [ 173.219580] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.227938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.238169] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 173.256035] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 173.264074] team0: Port device team_slave_0 added [ 173.271348] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.278642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.288181] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.296286] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.308585] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.316762] team0: Port device team_slave_1 added [ 173.322459] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.330290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.337917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.345645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.353647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.361841] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.371920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.379009] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.386219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.401253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.412851] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.425904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.434392] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 173.441925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.449808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.457717] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.464102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.471186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.478746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.486369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.519790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 173.573564] device hsr_slave_0 entered promiscuous mode [ 173.620652] device hsr_slave_1 entered promiscuous mode [ 173.660876] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 173.667927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.675574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.683524] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.690761] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.697670] device bridge_slave_0 entered promiscuous mode [ 173.743569] device hsr_slave_0 entered promiscuous mode [ 173.781027] device hsr_slave_1 entered promiscuous mode [ 173.824187] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 173.833084] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 173.841099] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.848007] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.854702] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.861983] device bridge_slave_1 entered promiscuous mode [ 173.873986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.882448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.890699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.898437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.905911] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 173.913848] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 173.927927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.940488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 173.948208] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 173.957288] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 173.968783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.976645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.984766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.992303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.007392] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 174.015596] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 174.022276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.038286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.047261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.056115] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 174.065013] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 174.072867] team0: Port device team_slave_0 added [ 174.085058] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 174.092644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 174.107650] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 174.115023] team0: Port device team_slave_1 added [ 174.122862] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 174.129502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.137711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.148818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.156667] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 174.163000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.172863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.183480] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.195774] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.216590] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.224071] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.236644] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 174.243705] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.251616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.258479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.266699] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 174.287904] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.298631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.307493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.319175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.327540] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.333939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.342230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.359521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.373591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 22:51:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 174.417774] audit: type=1400 audit(1570229492.986:39): avc: denied { map } for pid=6949 comm="syz-executor.5" path="/dev/ashmem" dev="devtmpfs" ino=15722 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 174.449071] device hsr_slave_0 entered promiscuous mode 22:51:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 174.504902] device hsr_slave_1 entered promiscuous mode [ 174.560716] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 174.569686] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 174.580688] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.593481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.602376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.610478] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.616839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.626288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 174.646411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.657438] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 174.665378] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.673695] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 174.685863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.694123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.701598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.711415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 174.722980] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 174.729209] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.737970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.746180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.755180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.765096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.785740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.793886] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.803441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 22:51:33 executing program 0: r0 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) mknod$loop(0x0, 0x6000, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffc6c8, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10100, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f00000005c0)=ANY=[@ANYBLOB="000000df00d9f100005d4d34ab750031315b52a473a6d331419755ea807c07f9fbac51fb0be83cd5eeec457703ffaa457b16643c2cb0a3f75ea05f42b94c81e0c0f5ade7b14a0584ca0d48fcbc0fbf287ee4219be5ecc79bba75f6030dc4d18e7021fb382da550193d7016c1c035fff2f484f31d93b7983752e69ca9457de0ed1e7bd43bfdd6e31a7b059e92ceabd924c225db8fc52d80bd9383b55645ea9c87fdb4a87c99f09a11510e90baec2a26e1feb9d60559d1457513fd9443ae892cd6fe82fbc67be17808c098dac8a217d117d383f9a91c79d89a1a1dfcd9357c59fff3d670e54b16e04d99"], &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='iso9660\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07f02a0000000100ff071e000000450001070300001419001a0012000200040001000a002500"/57, 0x39}], 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000240)='.//ile0\x00', r2, &(0x7f0000000840)='./file0/f.le.\x00') getsockname(r2, &(0x7f00000002c0)=@hci, &(0x7f0000000080)=0x80) syz_open_dev$loop(0x0, 0x0, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000340), 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000), 0x0) poll(&(0x7f0000000280)=[{r3, 0x8312}, {r4, 0x3101}, {r5, 0x220}], 0x3, 0x8) stat(0x0, 0x0) 22:51:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 174.814692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.827124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.835164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.847931] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.854353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.873556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 174.887002] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.894773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.908555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.921956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.933712] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 174.946936] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.957335] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.960043] hrtimer: interrupt took 43249 ns [ 174.968991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.977445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.989105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.996201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.003518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.011445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.019419] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.025826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.036003] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 175.042354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.053634] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 175.059837] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.079531] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 175.098659] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 175.108126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.123345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.134870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.145941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.154342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.162680] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.169182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.176259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.185888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.195705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.206868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.224718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 175.237416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.245211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.254468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.263109] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.269563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.276617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.286431] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 175.298057] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 175.308006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.315918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.326140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.334622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.344684] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 175.354209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.361713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.368546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.377429] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 175.386008] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.393169] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 175.403812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 175.412070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.419713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.428089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.436168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.446885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 175.455688] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 175.463260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.470307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.477789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.485621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.493499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.507764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 175.525793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 22:51:34 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000100)=0x72, 0x4) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000f80)="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", 0x7b7}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0xe211, 0x0) [ 175.535785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.545727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.553908] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.560341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.571542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.581514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.591282] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 175.601096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 175.609988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 175.624167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.636699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.645934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.654031] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.660446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.671331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.679144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.687836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.695594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.708123] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 175.714908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.723986] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.733994] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 175.744077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.754990] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.766771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.776718] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 175.789506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.798407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.806787] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 175.817493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 175.825732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.835139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.847179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.855435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.863687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.872474] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 175.880798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.888362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.899133] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 175.909303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.917660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.927022] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 175.934386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.949019] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 175.960970] 8021q: adding VLAN 0 to HW filter on device batadv0 22:51:35 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000100)=0x72, 0x4) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000f80)="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", 0x663}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xe211, 0x0) 22:51:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f00000006c0)}}], 0x1, 0x0) [ 176.929522] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 22:51:35 executing program 0: r0 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) mknod$loop(0x0, 0x6000, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffc6c8, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10100, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f00000005c0)=ANY=[@ANYBLOB="000000df00d9f100005d4d34ab750031315b52a473a6d331419755ea807c07f9fbac51fb0be83cd5eeec457703ffaa457b16643c2cb0a3f75ea05f42b94c81e0c0f5ade7b14a0584ca0d48fcbc0fbf287ee4219be5ecc79bba75f6030dc4d18e7021fb382da550193d7016c1c035fff2f484f31d93b7983752e69ca9457de0ed1e7bd43bfdd6e31a7b059e92ceabd924c225db8fc52d80bd9383b55645ea9c87fdb4a87c99f09a11510e90baec2a26e1feb9d60559d1457513fd9443ae892cd6fe82fbc67be17808c098dac8a217d117d383f9a91c79d89a1a1dfcd9357c59fff3d670e54b16e04d99"], &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='iso9660\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07f02a0000000100ff071e000000450001070300001419001a0012000200040001000a002500"/57, 0x39}], 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000240)='.//ile0\x00', r2, &(0x7f0000000840)='./file0/f.le.\x00') getsockname(r2, &(0x7f00000002c0)=@hci, &(0x7f0000000080)=0x80) syz_open_dev$loop(0x0, 0x0, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000340), 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000), 0x0) poll(&(0x7f0000000280)=[{r3, 0x8312}, {r4, 0x3101}, {r5, 0x220}], 0x3, 0x8) stat(0x0, 0x0) 22:51:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0xfffffffffffffcf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) clock_gettime(0x8e83c45269354d31, &(0x7f0000000400)) r2 = openat$full(0xffffffffffffff9c, 0x0, 0xde000, 0x0) read$eventfd(r2, &(0x7f0000000100), 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000200000002, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r4, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') sendfile(0xffffffffffffffff, r5, &(0x7f0000000040)=0x40100060, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc) write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r7], 0xca) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) ioctl$RTC_PLL_GET(r6, 0x80207011, &(0x7f00000000c0)) 22:51:35 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 22:51:35 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000100)=0x72, 0x4) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) vmsplice(r1, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000f80)="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", 0xe93}, {&(0x7f0000000240)}], 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0xe211, 0x0) 22:51:35 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @rand_addr=0xac14ffbb}}}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.eve[ts\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x10076) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x299) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 22:51:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='o'], 0x1) write$P9_RATTACH(r0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 22:51:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0xfffffffffffffcf7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40342, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182) r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) clock_gettime(0x8e83c45269354d31, &(0x7f0000000400)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r3, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x24000000) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000200000002, &(0x7f0000000180)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x1a) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r5, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') sendfile(0xffffffffffffffff, r6, &(0x7f0000000040)=0x40100060, 0x4000400000000000) socket$inet6(0xa, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) bind$netlink(r8, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc) write$cgroup_subtree(r7, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r8], 0xca) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 22:51:35 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:35 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup3(r5, r4, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) 22:51:35 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 22:51:35 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 177.260509] audit: type=1804 audit(1570229495.826:40): pid=7077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir494599098/syzkaller.QaPqt5/3/bus" dev="sda1" ino=16551 res=1 22:51:35 executing program 4: clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYPTR64, @ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c7340"], 0x0, 0x43}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:51:36 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:36 executing program 0: open$dir(0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd695}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0xd9b36d668674244f) [ 177.404208] audit: type=1804 audit(1570229495.906:41): pid=7077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir494599098/syzkaller.QaPqt5/3/bus" dev="sda1" ino=16551 res=1 [ 177.487487] ptrace attach of "/root/syz-executor.4"[7093] was attempted by "/root/syz-executor.4"[7095] [ 177.510305] protocol 88fb is buggy, dev hsr_slave_0 [ 177.515605] protocol 88fb is buggy, dev hsr_slave_1 22:51:36 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 22:51:36 executing program 0: truncate(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) 22:51:36 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0xfffffffffffffcf7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40342, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182) r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) clock_gettime(0x8e83c45269354d31, &(0x7f0000000400)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r3, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x24000000) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000200000002, &(0x7f0000000180)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x1a) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r5, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') sendfile(0xffffffffffffffff, r6, &(0x7f0000000040)=0x40100060, 0x4000400000000000) socket$inet6(0xa, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) bind$netlink(r8, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc) write$cgroup_subtree(r7, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r8], 0xca) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 22:51:36 executing program 3: syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x3, 0x2) pipe(&(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 22:51:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, 0x0, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4040}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x6a5}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0xafeea91871660a16}, {r0, 0x95}], 0x8, 0x0) 22:51:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x40c5, 0x0) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c97f13", 0x12, 0x400}], 0x0, 0x0) 22:51:36 executing program 0: r0 = socket$inet(0x2, 0x4000020000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 22:51:36 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 177.874711] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 177.914218] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:51:36 executing program 2: semop(0x0, &(0x7f0000000100), 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa9411d0704eaaaa86dd601bfc9700288800fe8000000000f9000000000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000919588e6000000852bf3"], 0x0) [ 177.987710] MINIX-fs: mounting unchecked file system, running fsck is recommended 22:51:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da", 0x7d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x3bd, 0x0, 0x252}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:51:36 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x44, 0x0, &(0x7f0000000080)="4d50b441e692763113ef8745ffa3a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x400}, 0x28) 22:51:36 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x100000000000003, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x400045d, 0x0) 22:51:36 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 22:51:36 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 178.120802] minix_free_inode: bit 1 already cleared [ 178.165214] syz-executor.2 (7172) used greatest stack depth: 24608 bytes left 22:51:36 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) getpid() r0 = getpid() r1 = gettid() tkill(r1, 0x16) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xffffffffffffffff) 22:51:36 executing program 4: r0 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x21) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000280)='?', 0x1, 0x0, 0x0, 0x0) 22:51:36 executing program 5: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:36 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r0 = getpid() r1 = gettid() bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) tkill(r1, 0x16) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xffffffffffffffff) 22:51:37 executing program 5: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:37 executing program 5: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:37 executing program 4: r0 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x21) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)="3f0f772982b501312493e19a25a55a9efb0b6955b21d575474f06b982793c0dad4e69d5e6730ae26d17d5cf2b37cce8ed27d5dc27e7fe81d08b17a87912c8ceadbe0c11606b32a9e1d10e03b03efc7aa3eb725ef2903e254bb04e17fcee4d3acc54ffb1d740d096f646cc0f87b7b5ff7e1b922f0cb0e6333d16826816f351c60", 0x80, 0x0, 0x0, 0x0) 22:51:37 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b4000000000000006a0a00ff000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0xfffffffffffffef3}, 0x15) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) write(r0, &(0x7f0000000100)="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", 0xfc) [ 178.582289] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. 22:51:37 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fe530cb7d7f933eda02ba18ad181867514fe60077d4dd90123d3ee7cf43548ee858e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90b0c48258f8dbe82e16cf8db95f5b068a9e0000000000000000000000000000000000000000000000000000000000000018287ba7d8807cf077cc420efca6785deb269d0a91985602763e0d70d404da006a3d6eef8fb7fcdd82eb1e484180662cbd99feefdef5a242392e5d7d6babf097edeae9f8c8bdd111886dc6b151388499033258854e42de2f6d96b56185c1baae2ba1a07790b6e5fa80ec5ba2d62ad3d4a38c3675dc40777707ed2c8a9c5726f5bf2d4bc2"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x44, 0x0, &(0x7f0000000080)="4d50b441e692763113ef8745ffa3a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x400}, 0x28) 22:51:37 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:37 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 22:51:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r0 = getpid() r1 = gettid() tkill(r1, 0x16) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xffffffffffffffff) 22:51:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xffffffffffffffad}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8afafc401f6a72bf90cba5701c0f05f6b7ae11ff4b92d979184dfab9ce8c9352ca52edb5b8e16385579f2b142c3c46606fc233a442c84fa4c49c82f9", 0xbe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x121, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:51:39 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:39 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x200001000000067, &(0x7f0000000280)=0x806, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 22:51:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r4, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) dup2(r0, r4) tkill(r1, 0x1000000000013) 22:51:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close(r1) io_setup(0x2000000000d30, &(0x7f0000000500)=0x0) dup(r0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r1, 0x0}]) 22:51:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 22:51:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 22:51:40 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:40 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x200001000000067, &(0x7f0000000280)=0x806, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 22:51:40 executing program 3: 22:51:40 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:40 executing program 3: 22:51:42 executing program 1: 22:51:42 executing program 0: 22:51:42 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:42 executing program 3: 22:51:42 executing program 2: 22:51:42 executing program 4: 22:51:43 executing program 4: 22:51:43 executing program 2: 22:51:43 executing program 3: 22:51:43 executing program 0: 22:51:43 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:43 executing program 1: 22:51:43 executing program 2: 22:51:43 executing program 4: 22:51:43 executing program 3: 22:51:43 executing program 0: 22:51:43 executing program 4: 22:51:43 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:43 executing program 1: 22:51:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r2 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f0000000200)={[{0x0, '\x03\xa1xI?\x1e\xc2\xce\xc9`~\x88d\xc4W\x8a\xd7\x02k\x00W\xef=\xcd\x02\x00\x93\xdd\x86\xdd\x00\x00\x00\x00\xba\x99$0\x1fr\x94\"\xadlh\x83B\xb9\xc3\x9e\x80\xac\xa4\xb1\xd8\xc4\x01v\xec\t\xb4(\x04R\xfdy\x86z?_\xa4R\x06\r)\x7f\x94\x01\xb4\xe3^\xb9\xe6\x8b\x9a\xdf\xd1xQJ\x94\x1a\xf9o\xe5@U\x16\x80\x10\x7f\xdfy\xd1\xaf\x8fNV0\x9a\xc9s=A\xcc\x0f\xf1\x19\x99\xc3\xc3t\x0f\bZ'}]}, 0xfda7) 22:51:43 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="230000006b0081aee4050c00000f00000a8bc36f7d79ce3263dac37b7403c609000000", 0x23}], 0x1}, 0x0) 22:51:43 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect(r0, &(0x7f00000004c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 22:51:43 executing program 1: r0 = socket(0x10, 0x400000000080803, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x3}}, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d020b49ff70880000800328000802010001010000bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 22:51:43 executing program 4: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0xa) socket$unix(0x1, 0x4, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'syz_tun\x00', 0x2}, 0x18) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x6}}, 0x18) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000040)=[{}, {r2}, {r3}, {r3}, {r2}, {r3}, {}, {}, {}], 0x9, 0x0, 0x0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) [ 184.712810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=107 sclass=netlink_route_socket pig=7323 comm=syz-executor.2 22:51:43 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:43 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/53, 0x35}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 22:51:43 executing program 2: [ 184.807243] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.822590] device nr0 entered promiscuous mode 22:51:43 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:43 executing program 2: [ 184.885615] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.918494] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 22:51:43 executing program 1: 22:51:43 executing program 2: [ 184.951597] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 184.994375] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.014109] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.025661] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.037303] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.054415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.065691] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.072556] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.079353] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.083847] device nr0 entered promiscuous mode [ 185.086204] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.097800] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.105080] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.112266] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.119155] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.126368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.133603] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.140759] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.147882] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.154714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.161564] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.168436] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.176622] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.183680] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.190831] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.197930] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.197944] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.211767] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.218565] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.225479] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.232366] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.239299] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.239313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.253015] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.259703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.259717] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.259730] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.259743] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.259755] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.274367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.300121] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.306808] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.306821] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.306833] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.320300] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.320314] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.320326] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.347159] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 22:51:43 executing program 3: 22:51:43 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:43 executing program 1: 22:51:43 executing program 2: [ 185.353902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.360622] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.367306] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.374064] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.380812] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.390147] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.500809] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.507554] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.519009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.534093] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.540922] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.547687] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.557176] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.564027] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.573422] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.580206] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.586903] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.593697] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 22:51:44 executing program 4: 22:51:44 executing program 3: [ 185.600451] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.607244] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.614058] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.621369] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.628165] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.648713] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.656112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.663570] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.670374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.677070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.683904] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.690806] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.697675] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.704825] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.711684] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.718377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.725167] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.732025] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.738707] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.746871] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.753885] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.760645] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.767326] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.774621] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.781342] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.788216] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.794966] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.801697] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.808392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.815126] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.821934] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.828604] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.835466] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.842345] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.849044] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.855818] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.862624] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.869307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.876027] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.883031] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.890116] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 22:51:44 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/53, 0x35}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 22:51:44 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:44 executing program 2: 22:51:44 executing program 1: 22:51:44 executing program 4: 22:51:44 executing program 3: [ 185.898206] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 22:51:44 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/53, 0x35}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 22:51:44 executing program 4: 22:51:44 executing program 1: 22:51:44 executing program 3: 22:51:44 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 185.952457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 185.959215] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 22:51:44 executing program 4: [ 186.038902] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.097062] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.123371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.133831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.146136] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.153070] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.159863] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.176776] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.183935] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.191104] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.197968] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.204910] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.211733] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.218560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.225754] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.232519] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.239199] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.246082] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.252968] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.259869] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.266639] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.273602] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.280465] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.287255] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.294002] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.300721] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.307389] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.314120] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.320832] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.327498] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.334211] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.340911] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.347590] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.354306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.361072] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.367875] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.374612] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.381319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.387988] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.394707] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.401409] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.408087] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.414818] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.421524] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.428205] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.434937] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.441647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 22:51:45 executing program 0: 22:51:45 executing program 1: 22:51:45 executing program 3: 22:51:45 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:45 executing program 2: 22:51:45 executing program 4: [ 186.448314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.455099] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.462104] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.468948] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 186.476977] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 22:51:45 executing program 1: 22:51:45 executing program 2: 22:51:45 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:45 executing program 0: 22:51:45 executing program 4: 22:51:45 executing program 3: 22:51:45 executing program 1: 22:51:45 executing program 2: 22:51:45 executing program 0: 22:51:45 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:45 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x1100082) memfd_create(0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f00000001c0)=0x2) fchdir(0xffffffffffffffff) 22:51:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f00000001c0)=0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read(r2, &(0x7f0000001400)=""/119, 0x77) 22:51:45 executing program 1: 22:51:45 executing program 2: 22:51:45 executing program 0: 22:51:45 executing program 4: 22:51:45 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:45 executing program 1: 22:51:45 executing program 3: 22:51:45 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x8000fffffffe) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) 22:51:45 executing program 0: r0 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x21) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="a504", 0x2) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 22:51:45 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:45 executing program 4: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in, 0x0, 0x5, 0x0, "9527eb1fe4a70061631dce40540ea584dc670e8a5b346583b4b9fd983552f8df14ee9ef7112f35b7d06988ac8f9131a1d9718dde8c44f8ab9d20c6894f2929496f17cef927115402414625e9abc4eb6a"}, 0xd8) sendto$inet(r1, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 22:51:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) 22:51:45 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="135a77c146c5268978427e0bb3ce13059f5c0721f49be0f313b8862d9e136a69a0d40eb092a4c4ed1a1948b1732b342b46b1a3b2b66d"], 0x1}}, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x61883bea5100b932, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xf17) unshare(0x40040400) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f00000000c0)={0x1, 0xffffffffffffff07, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa5c, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x7, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x4, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x4}, 0x0, 0x5e, 0xeb67, 0x0, 0x0, 0x5, 0x6}, 0x0, 0x9, r4, 0xc) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x4200) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200e80, 0x14) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x810040, 0x0) r5 = fanotify_init(0x0, 0x0) fanotify_mark(r5, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREAD(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x153) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) close(0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x4ffe0, 0x0) r7 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) getpeername(r7, 0x0, &(0x7f0000000100)) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000480)={0xffffffffffffffff, r4, 0x9f7, 0x63, &(0x7f0000000040)="afadd26e7504c5f39e22000b0b9b81136075d19d7e724c84e17330c2b77f599eaa454d42859a1b4ae09d7840cc7d1abca1fb636017f91eca69b09982011b18b41ab97877596225a1c1143898b8b5175ccf09dd7b3854112c49ecc0548ee15a0d70237e", 0x9439, 0x4, 0x6, 0x8, 0xfe00, 0x0, 0x3, 'syz9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe3\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009[JB\xf7\xda\x8f\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x0, 0x0, 0x0, 0xb, 0x3, 0x401, 0x3}}) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000380)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 22:51:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd38d9b", @nested={0x18, 0x9, [@generic="b50a738ae8676094c221d918039dd719ce"]}]}, 0x30}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc7ccd311e2c9b669}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="20002abd7000ffdbdf250a00000008000400000000000800040014000000"], 0x24}, 0x1, 0x0, 0x0, 0x20048881}, 0x4000000) socket$packet(0x11, 0x2, 0x300) 22:51:45 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:45 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x7f, 0x40, 0x3, 0x8}, {0x0, 0x7, 0x1f, 0x3}, {0x80000001, 0x7ec3, 0x5, 0x3}, {0x1000, 0x6, 0x0, 0x9}, {0x100000000, 0x2, 0x8}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000580)=0x4) sched_setattr(0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x90000, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8}}, [""]}, 0x24}}, 0x24006440) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) [ 187.069330] audit: type=1400 audit(1570229505.636:42): avc: denied { create } for pid=7475 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 187.074406] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) 22:51:45 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) lstat(&(0x7f0000000040)='./bus\x00', 0x0) tkill(r0, 0x1000000000016) 22:51:45 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 187.182287] rtc_cmos 00:00: Alarms can be up to one day in the future [ 187.202000] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 187.216286] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 187.237066] IPVS: ftp: loaded support on port[0] = 21 22:51:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) 22:51:45 executing program 4: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f00000000c0)={0x0, 0x0, 0x7}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x4, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) socket$kcm(0x29, 0x5, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000240)=0x80000000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x0, 0x3, 0x7, 0x0, 0xf92}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000280)=0xc) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000009140)=[{{0x0, 0x0, &(0x7f0000004840)=[{&(0x7f0000003840)=""/4096, 0xc003}, {&(0x7f0000001600)=""/129, 0x81}], 0x2}}], 0x1, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x26, 0x400000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) [ 187.265894] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 187.284483] audit: type=1400 audit(1570229505.646:43): avc: denied { write } for pid=7475 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 22:51:45 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:46 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x20000, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000380)={{0x8, 0x3, 0x0, 0x66, '\x00', 0x7}, 0x2, 0x30, 0x4, r1, 0x2, 0xe98e, 'syz1\x00', &(0x7f00000000c0)=['keyringvboxnet0\x05-.+\x00', ']\\\x00'], 0x17, [], [0x4, 0x0, 0x1, 0x7f]}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x6) r2 = syz_open_dev$media(&(0x7f0000000ac0)='/dev/media#\x00', 0x1000, 0x400000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000b00)=0x2, 0x4) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r4, r5, 0x0, 0x96a8) readv(r5, &(0x7f0000000900)=[{&(0x7f0000000cc0)=""/135, 0x87}, {&(0x7f0000000580)=""/205, 0xffffffffffffff76}, {&(0x7f0000000d80)=""/248, 0xf8}, {&(0x7f0000000780)=""/161, 0xa1}, {&(0x7f0000000c00)=""/148, 0x94}], 0x5) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) r7 = getpid() ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000980)={[], 0xc7ac, 0x7, 0xaa6e, 0x7fff, 0x100000000, r7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0xe5}, 0x0) r8 = gettid() r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/zero\x00', 0x20000, 0x0) ioctl$PIO_SCRNMAP(r9, 0x4b41, &(0x7f0000000b80)="dd12fc79da78aa0b69396338f37ecf04a646ff91f76c70481862912605f985f1228f04a1a64a8bac80f0a9b0967167fb2dff2677388965e102f08086ed1a6b62784a15b9fac69a362db6b9f0f21d588a82b63b36c19e9e7242bc27e38108c573fe48754331f94029575877c426aa7bc0a453") process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r10, r11, 0x0, 0x96a8) ioctl$PPPIOCSMRU(r11, 0x40047452, &(0x7f0000000a80)=0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r8, r3, 0x0, 0x16, &(0x7f0000000140)='vmnet1{#vmnet0trusted\x00'}, 0x30) capset(&(0x7f0000000a00)={0xccc0198, r12}, &(0x7f0000000a40)={0xffff, 0x9, 0x6, 0x30000000, 0x711, 0x33d}) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000200)={0x60, 0x0, 0x1, {{0xff, 0x1, 0x4, 0x0, 0x0, 0x81, 0x62, 0x44f4}}}, 0x60) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffffb, @local, 0x401}, 0x1c) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000000)) 22:51:46 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 187.479875] audit: type=1400 audit(1570229505.696:44): avc: denied { read } for pid=7475 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 22:51:46 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:46 executing program 1: fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f0000000480)='TRUE', 0x4, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a6ffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x100, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$TCSETXW(r3, 0x5435, &(0x7f0000000140)={0x7f, 0x4, [0xc8c, 0x3f, 0x8, 0x97d6], 0x7}) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e25}, 0x10) 22:51:46 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @loopback, 0x7f}, 0x1c) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/205, 0xcd, 0x2171, &(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x1ac4082c9224de86, {{0x42}, 0x2}}, 0x80) timerfd_settime(r1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 22:51:46 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) memfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) inotify_init() fcntl$setpipe(r3, 0x407, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) dup(0xffffffffffffffff) write(r3, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) syz_open_dev$cec(0x0, 0x0, 0x2) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x3f) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000008c0)="fc0000001a000700ab0925000900070002ab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030010000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05de", 0x70) 22:51:46 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x2) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = dup(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4000001) write(r1, &(0x7f00000001c0)="ad0c", 0x2) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000002c0)={0xe, 0x0, 0x0, 0x0, 0x61, "acdf4eeb3194a95220d30217a63b0bf61ae6e66e7a1f66922ab9e9d64ebe5702bd33455777d2e583d6bc7d805c2d652765dacef86160113722c2ebfff39607fc7b8b04ba6049e53e0f51728726806b1745d4847a4d3c693f85008a64ed87bfdf31"}, 0x6d) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'batadv0\x00', 0x800}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r4 = semget$private(0x0, 0x207, 0x0) semop(r4, &(0x7f0000000140)=[{0x0, 0x23}], 0x1) semop(r4, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000640)={{0x0, 0x0, 0x0, 0xee00}}) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000340)=""/106) sendto$inet(r0, &(0x7f00000000c0)="e0", 0xffd4, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) read$rfkill(r6, &(0x7f0000000240), 0x8) [ 188.004908] loop1: p1 p2[EZD] p3 p4 22:51:46 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 188.029750] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 188.088824] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 188.147763] overlayfs: filesystem on './file0' not supported as upperdir 22:51:46 executing program 4: sendto$unix(0xffffffffffffffff, &(0x7f0000000040)="a453ba197ece0790eea891170802b10c5432093748f82b2e0104567f3786d6d10bf0e08ad883bd6df87cccd3106574a833c52f0a4165f2be78c6f88ebd28079bafce81ed09de5fc60119f6dc7437f4cacd0ecfefdf5f98940b6a7fa2d9b208ee4967058678aa1a7c8a21818cb0c971230d7a133539063341a4d7ea82efaae3a6434cb974b1c2e7b142c8ce5e223f6cc3069d0297790dc69895578e42d77896dfa54fa34e32be3e00d31e0c2ff67e1690", 0xb0, 0x8000, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x2010, r0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000100)={0x400, 0x9, 0x3f}) 22:51:46 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:46 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000280)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000080000008700"/24], &(0x7f00000002c0)='GPL\x00', 0x1, 0xcf, &(0x7f0000000340)=""/207, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 22:51:46 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x41) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x9effffff00000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 22:51:46 executing program 0: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/exec\x00', 0x2, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001400)='fd/4\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4, 0xd17}, 0xc) read$eventfd(r0, 0x0, 0x0) 22:51:46 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x2cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x84800, 0x0) write$9p(r0, &(0x7f0000000800)="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", 0x600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = gettid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r5, 0x8008ae9d, &(0x7f0000000080)=""/6) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r6, r7, 0x0, 0x96a8) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$key(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r10, r11, 0x0, 0x96a8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x4a040, 0x0) r12 = fcntl$dupfd(0xffffffffffffffff, 0x406, r7) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) sendmsg$key(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xfffffffffffffc58}}, 0x4044000) ioctl$VIDIOC_ENUM_FRAMESIZES(r12, 0xc02c564a, &(0x7f00000000c0)={0x5, 0x20303159, 0x1, @stepwise={0x80000000, 0x9, 0xfffffc01, 0xa00, 0x9, 0x40}}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000780), &(0x7f0000000180)=0x60) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r13, 0x0, r13) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r14, 0x0, r14) sendmmsg$unix(r0, &(0x7f0000000740), 0x2a9, 0x2000040) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) sendfile(r0, r1, 0x0, 0x10000) 22:51:47 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 188.409356] audit: type=1800 audit(1570229506.966:45): pid=7588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16603 res=0 22:51:47 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x12fdab6c) r3 = socket$inet(0x2, 0x3, 0x2c) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x400, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) splice(r4, 0x0, r3, 0x0, 0x19404, 0x2) 22:51:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffef1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0xc) syz_mount_image$bfs(&(0x7f0000000100)='bfs\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="d10c8cb849d92b2f94192ebd4644918c43e6", 0x12, 0x6}], 0x800, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2, 0x3}, 0x10) write(r0, &(0x7f0000000000)="1f0000000102ff3ea33b1f000000594c000071e3230c37f30501001b000700", 0x1f) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) getpeername$tipc(r2, &(0x7f0000000280)=@id, &(0x7f00000002c0)=0x10) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x5f40c2, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r4, 0xffffffffffffffff, 0x0, 0x96a8) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000240)={0x100000, &(0x7f0000000200), 0x0, r3, 0xf}) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f00000000c0)) 22:51:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000140)='security.capability\x00', &(0x7f00000002c0)=@v1={0x1000000, [{0x7, 0x4}]}, 0xc, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) 22:51:47 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:47 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000005060501ff0000fffdffff2ef6ff04610c0001"], 0x17}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000040)={0x38, "4a8447df9dc633916956d7ae2ef81c824653a797a7b43e79c7838f9bcdcb2b71b428cf5a19e53c4b9531ec55a7b7ceba4dff37c21a4d95b320f9e83fa83b0035f9aaa81ed64c8537d740974844233506b0d39f768314e530e08a0e6fc3604370611a60c157bb755028d3c36a56c1c9aebd25e85df90df7e0991b0bc190f586be"}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 188.560176] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 188.630675] audit: type=1400 audit(1570229506.996:46): avc: denied { map } for pid=7589 comm="syz-executor.4" path="socket:[28353]" dev="sockfs" ino=28353 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=socket permissive=1 [ 188.660847] protocol 88fb is buggy, dev hsr_slave_0 [ 188.660885] protocol 88fb is buggy, dev hsr_slave_1 [ 188.684076] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:51:47 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_matches\x00') readv(r1, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r1, &(0x7f0000000580), 0x3c1) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000340)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0xda95, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x2, 0x5}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000001300)=ANY=[@ANYBLOB="019478486437ceb913000000", @ANYBLOB="42e8ddf3f0ea577563dbda0b51c9f72aa5409ae27abd4adc47f0820dc0a4ee3a1387506ed08c2dfea2a6fbfde971663db8f9ae697d238401e5b58e664fef99dbcc7bb12127db949dd90284e698bd62adc08e114b87402fe3dda8593a167244967554b0d0903c11280e043bbbcb931e4c78abdc0e87693216cd7078abf7adc3c2b29448bd609dc47199842fad7244925d0b3bf98e45dde2e2111b399ed549c82491380cd56a647f9d12b3663a9552b726490f32fa374505b8ea6260d669c197736e6042d01bfa05b6b0ea1363f0ec6941dc77f76e475274a33cf06514231252a1b22048c611f9d2990ed232ea7179072d74b2c2bac7dc42a541"], &(0x7f0000000180)=0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000980)={r6}, &(0x7f00000009c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x74, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x100000001, @rand_addr="557d95166f4d6170707e0f89eff1c3e2", 0x9}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x4, @remote, 0x1bf}, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [], @remote}, 0x2}]}, &(0x7f00000002c0)=0x10) r7 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x6, 0x2, 0x5, 0x80000000000007f}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x100000001, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0xfffffe3c) write$binfmt_aout(r7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x604) open(&(0x7f00000012c0)='./file0\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) connect$l2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c) sendmmsg(r2, &(0x7f0000005fc0), 0xa9, 0x0) r8 = syz_open_dev$cec(&(0x7f0000001240)='/dev/cec#\x00', 0x1, 0x2) ioctl$BLKREPORTZONE(r8, 0xc0101282, &(0x7f0000001280)={0xdf}) [ 188.754585] audit: type=1804 audit(1570229507.016:47): pid=7588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir859842867/syzkaller.oRuwr7/23/file0" dev="sda1" ino=16603 res=1 [ 188.790119] protocol 88fb is buggy, dev hsr_slave_0 [ 188.795442] protocol 88fb is buggy, dev hsr_slave_1 22:51:47 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 188.842868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7618 comm=syz-executor.3 [ 188.916237] audit: type=1800 audit(1570229507.026:48): pid=7588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16603 res=0 [ 188.950580] protocol 88fb is buggy, dev hsr_slave_0 [ 188.955696] protocol 88fb is buggy, dev hsr_slave_1 22:51:47 executing program 3: setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x1}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x61883bea5100b932, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xf17) unshare(0x40040400) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={{0x100000000, 0x7, 0x12000, 0x0, 0x774}}) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x4200) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200e80, 0x14) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x4000, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x53, 0x0, 0x0, 0x81, 0x0, 0x2, 0x40c20, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, @perf_bp={&(0x7f0000000100), 0x2}, 0x846, 0x1, 0x8, 0x0, 0xfffffffffffff800, 0x1, 0x1}, r4, 0xf, r5, 0xf) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000001c0)) socket$inet_sctp(0x2, 0x5, 0x84) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) open(&(0x7f0000002bc0)='./file0\x00', 0x400002, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f0000000300)={[{@index_on='index=on'}]}) 22:51:47 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, 0x0) [ 188.965138] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 22:51:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f00000004c0)='cgroup.subtree_control\x00', 0x2, 0x0) sendfile(r6, r2, 0x0, 0x96a8) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x541d, 0x0, 0x0, 0xfffffffffffffd9c) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000040)={[{0xffff7fff, 0x51}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) 22:51:47 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, 0x0) [ 189.044667] audit: type=1400 audit(1570229507.036:49): avc: denied { ioctl } for pid=7582 comm="syz-executor.3" path="socket:[28363]" dev="sockfs" ino=28363 ioctlcmd=0x8933 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 189.150740] audit: type=1400 audit(1570229507.186:50): avc: denied { create } for pid=7612 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 189.249051] audit: type=1400 audit(1570229507.246:51): avc: denied { write } for pid=7612 comm="syz-executor.0" path="socket:[28402]" dev="sockfs" ino=28402 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 22:51:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0x14}, 0x8a) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x11}) 22:51:48 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100e05070000000b0000000000200000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x8}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 22:51:48 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, 0x0) 22:51:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_matches\x00') readv(r1, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r1, &(0x7f0000000580), 0x3c1) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000340)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0xda95, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x2, 0x5}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000001300)=ANY=[@ANYBLOB="019478486437ceb913000000", @ANYBLOB="42e8ddf3f0ea577563dbda0b51c9f72aa5409ae27abd4adc47f0820dc0a4ee3a1387506ed08c2dfea2a6fbfde971663db8f9ae697d238401e5b58e664fef99dbcc7bb12127db949dd90284e698bd62adc08e114b87402fe3dda8593a167244967554b0d0903c11280e043bbbcb931e4c78abdc0e87693216cd7078abf7adc3c2b29448bd609dc47199842fad7244925d0b3bf98e45dde2e2111b399ed549c82491380cd56a647f9d12b3663a9552b726490f32fa374505b8ea6260d669c197736e6042d01bfa05b6b0ea1363f0ec6941dc77f76e475274a33cf06514231252a1b22048c611f9d2990ed232ea7179072d74b2c2bac7dc42a541"], &(0x7f0000000180)=0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000980)={r6}, &(0x7f00000009c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x74, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x100000001, @rand_addr="557d95166f4d6170707e0f89eff1c3e2", 0x9}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x4, @remote, 0x1bf}, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [], @remote}, 0x2}]}, &(0x7f00000002c0)=0x10) r7 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x6, 0x2, 0x5, 0x80000000000007f}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x100000001, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0xfffffe3c) write$binfmt_aout(r7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x604) open(&(0x7f00000012c0)='./file0\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) connect$l2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c) sendmmsg(r2, &(0x7f0000005fc0), 0xa9, 0x0) r8 = syz_open_dev$cec(&(0x7f0000001240)='/dev/cec#\x00', 0x1, 0x2) ioctl$BLKREPORTZONE(r8, 0xc0101282, &(0x7f0000001280)={0xdf}) 22:51:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_matches\x00') readv(r1, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r1, &(0x7f0000000580), 0x3c1) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000340)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0xda95, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x2, 0x5}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000001300)=ANY=[@ANYBLOB="019478486437ceb913000000", @ANYBLOB="42e8ddf3f0ea577563dbda0b51c9f72aa5409ae27abd4adc47f0820dc0a4ee3a1387506ed08c2dfea2a6fbfde971663db8f9ae697d238401e5b58e664fef99dbcc7bb12127db949dd90284e698bd62adc08e114b87402fe3dda8593a167244967554b0d0903c11280e043bbbcb931e4c78abdc0e87693216cd7078abf7adc3c2b29448bd609dc47199842fad7244925d0b3bf98e45dde2e2111b399ed549c82491380cd56a647f9d12b3663a9552b726490f32fa374505b8ea6260d669c197736e6042d01bfa05b6b0ea1363f0ec6941dc77f76e475274a33cf06514231252a1b22048c611f9d2990ed232ea7179072d74b2c2bac7dc42a541"], &(0x7f0000000180)=0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000980)={r6}, &(0x7f00000009c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x74, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x100000001, @rand_addr="557d95166f4d6170707e0f89eff1c3e2", 0x9}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x4, @remote, 0x1bf}, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [], @remote}, 0x2}]}, &(0x7f00000002c0)=0x10) r7 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x6, 0x2, 0x5, 0x80000000000007f}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x100000001, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0xfffffe3c) write$binfmt_aout(r7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x604) open(&(0x7f00000012c0)='./file0\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) connect$l2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c) sendmmsg(r2, &(0x7f0000005fc0), 0xa9, 0x0) r8 = syz_open_dev$cec(&(0x7f0000001240)='/dev/cec#\x00', 0x1, 0x2) ioctl$BLKREPORTZONE(r8, 0xc0101282, &(0x7f0000001280)={0xdf}) 22:51:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_matches\x00') readv(r1, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r1, &(0x7f0000000580), 0x3c1) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000340)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0xda95, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x2, 0x5}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000001300)=ANY=[@ANYBLOB="019478486437ceb913000000", @ANYBLOB="42e8ddf3f0ea577563dbda0b51c9f72aa5409ae27abd4adc47f0820dc0a4ee3a1387506ed08c2dfea2a6fbfde971663db8f9ae697d238401e5b58e664fef99dbcc7bb12127db949dd90284e698bd62adc08e114b87402fe3dda8593a167244967554b0d0903c11280e043bbbcb931e4c78abdc0e87693216cd7078abf7adc3c2b29448bd609dc47199842fad7244925d0b3bf98e45dde2e2111b399ed549c82491380cd56a647f9d12b3663a9552b726490f32fa374505b8ea6260d669c197736e6042d01bfa05b6b0ea1363f0ec6941dc77f76e475274a33cf06514231252a1b22048c611f9d2990ed232ea7179072d74b2c2bac7dc42a541"], &(0x7f0000000180)=0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000980)={r6}, &(0x7f00000009c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x74, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x100000001, @rand_addr="557d95166f4d6170707e0f89eff1c3e2", 0x9}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x4, @remote, 0x1bf}, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [], @remote}, 0x2}]}, &(0x7f00000002c0)=0x10) r7 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x6, 0x2, 0x5, 0x80000000000007f}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x100000001, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0xfffffe3c) write$binfmt_aout(r7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x604) open(&(0x7f00000012c0)='./file0\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) connect$l2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c) sendmmsg(r2, &(0x7f0000005fc0), 0xa9, 0x0) r8 = syz_open_dev$cec(&(0x7f0000001240)='/dev/cec#\x00', 0x1, 0x2) ioctl$BLKREPORTZONE(r8, 0xc0101282, &(0x7f0000001280)={0xdf}) [ 189.585020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3600 sclass=netlink_route_socket pig=7660 comm=syz-executor.2 22:51:48 executing program 2 (fault-call:5 fault-nth:0): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 189.646352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3600 sclass=netlink_route_socket pig=7665 comm=syz-executor.2 22:51:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_matches\x00') readv(r1, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r1, &(0x7f0000000580), 0x3c1) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000340)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0xda95, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x2, 0x5}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000001300)=ANY=[@ANYBLOB="019478486437ceb913000000", @ANYBLOB="42e8ddf3f0ea577563dbda0b51c9f72aa5409ae27abd4adc47f0820dc0a4ee3a1387506ed08c2dfea2a6fbfde971663db8f9ae697d238401e5b58e664fef99dbcc7bb12127db949dd90284e698bd62adc08e114b87402fe3dda8593a167244967554b0d0903c11280e043bbbcb931e4c78abdc0e87693216cd7078abf7adc3c2b29448bd609dc47199842fad7244925d0b3bf98e45dde2e2111b399ed549c82491380cd56a647f9d12b3663a9552b726490f32fa374505b8ea6260d669c197736e6042d01bfa05b6b0ea1363f0ec6941dc77f76e475274a33cf06514231252a1b22048c611f9d2990ed232ea7179072d74b2c2bac7dc42a541"], &(0x7f0000000180)=0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000980)={r6}, &(0x7f00000009c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x74, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x100000001, @rand_addr="557d95166f4d6170707e0f89eff1c3e2", 0x9}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x4, @remote, 0x1bf}, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [], @remote}, 0x2}]}, &(0x7f00000002c0)=0x10) r7 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x6, 0x2, 0x5, 0x80000000000007f}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x100000001, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0xfffffe3c) write$binfmt_aout(r7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x604) open(&(0x7f00000012c0)='./file0\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) connect$l2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c) sendmmsg(r2, &(0x7f0000005fc0), 0xa9, 0x0) r8 = syz_open_dev$cec(&(0x7f0000001240)='/dev/cec#\x00', 0x1, 0x2) ioctl$BLKREPORTZONE(r8, 0xc0101282, &(0x7f0000001280)={0xdf}) 22:51:48 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x1037b) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="a5fd894658c21392cfb6371b8fdea0ac3f8d155f"], 0x1a000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 22:51:48 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:48 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_matches\x00') readv(r1, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r1, &(0x7f0000000580), 0x3c1) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000340)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0xda95, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x2, 0x5}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000001300)=ANY=[@ANYBLOB="019478486437ceb913000000", @ANYBLOB="42e8ddf3f0ea577563dbda0b51c9f72aa5409ae27abd4adc47f0820dc0a4ee3a1387506ed08c2dfea2a6fbfde971663db8f9ae697d238401e5b58e664fef99dbcc7bb12127db949dd90284e698bd62adc08e114b87402fe3dda8593a167244967554b0d0903c11280e043bbbcb931e4c78abdc0e87693216cd7078abf7adc3c2b29448bd609dc47199842fad7244925d0b3bf98e45dde2e2111b399ed549c82491380cd56a647f9d12b3663a9552b726490f32fa374505b8ea6260d669c197736e6042d01bfa05b6b0ea1363f0ec6941dc77f76e475274a33cf06514231252a1b22048c611f9d2990ed232ea7179072d74b2c2bac7dc42a541"], &(0x7f0000000180)=0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000980)={r6}, &(0x7f00000009c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x74, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x100000001, @rand_addr="557d95166f4d6170707e0f89eff1c3e2", 0x9}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x4, @remote, 0x1bf}, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [], @remote}, 0x2}]}, &(0x7f00000002c0)=0x10) r7 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x6, 0x2, 0x5, 0x80000000000007f}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x100000001, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0xfffffe3c) write$binfmt_aout(r7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0b0105fffa0100003b01000048d20000e10200000100000000000000000000008a36e53f28ce85063c826d50a03f4cb3d00c98c3b88509ed46db5f0c1b023462eb2894d56c261274ca5dfa190ebdb02807ca9fdfbaed0edc3a834aef61862aa266af35ebacf310030d5449357efa6d7db6e8b8c13480599dc4e774d73c6a00a83aa516c1fc93326371189a809ae8d81bc265a35bcbd51ccacbcb553d89ddbb50ed18194cc5dbbb193818610394a699996de4e921a76629b40ee08137cc9f39ba0bbe7ec43d04375fc7782ec6936239dae4d6848308f92def568436996d4c3b40d74fb7c06333b067112bbc6b39a1ac5da1f812711ba392435e9c6880246c4c5db614620b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000807b2853028055db3e725dcb5cde6f6c84886e1dc88d991aee6c70dc93c2cb48b12b57d8866d479ae8c0f4284b12429bb6328e460e1facea2f761d05454bb3377bbd6429eed21c708c5826af83ea6deafd973f331319a2b50e8fc3aa6d5f0094e335b2533a30f778f715158ca277aa8b7269a8d871640bc0404d447fc0e28f358015f9fb3a7f0700e6dc34ba676063060abf1e3064c8bd0b7266484e2e3444de3b57985edc5c2c0ffab25cae0f513efca8bc765371405286c9cf117ed268f53c32f68b9fd13aaa0d66cf396f7857ecfaa05dee56c662612271e0ed7aba53a019b95aa3a7f6bf50f26253ff2c46ca1a1fa434ee758d3c8f36d807d580633b1bc7cbdf70c97edc841dd7d781a87621a4f100486dff352b22d25a83837d31a3ed9e230a4904373d01f9f4f12295f6ea60bf2017069a4400366a6f145a27c4dce0a8d0c3032842f2411800807d39a5341649c76ca4cf3c605f0c8a66828d6b2e6998ab93"], 0x604) open(&(0x7f00000012c0)='./file0\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) connect$l2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c) sendmmsg(r2, &(0x7f0000005fc0), 0xa9, 0x0) r8 = syz_open_dev$cec(&(0x7f0000001240)='/dev/cec#\x00', 0x1, 0x2) ioctl$BLKREPORTZONE(r8, 0xc0101282, &(0x7f0000001280)={0xdf}) 22:51:48 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:49 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) lgetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)=@random={'osx.', ')nodev\x00'}, &(0x7f00000003c0)=""/124, 0x7c) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000340)='/dev/ashmem\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000480)={r6, 0xf000}, 0x8) fadvise64(r5, 0x0, 0x4000, 0x5) epoll_wait(r2, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x5, 0x0) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x11, 0x2, 0x20, 0x10000}, 0x14) 22:51:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x0, &(0x7f0000000400)) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x26) r1 = socket$inet(0x10, 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xffffffff) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) r3 = syz_open_procfs(r2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ptrace$getregs(0xc, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, [{[{0x9100, 0x4, 0x0, 0x1}], {0x8100, 0x4, 0x1, 0x2}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x7, 0x3}}}}}, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='bpf\x00', 0x8000, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x71f2}}], [{@fowner_eq={'fowner'}}, {@obj_type={'obj_type', 0x3d, 'devtmpfs\x00'}}, {@subj_user={'subj_user', 0x3d, 'vboxnet0\xd4lovmnet0procsystem'}}, {@fowner_gt={'fowner>'}}, {@euid_lt={'euid<'}}]}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 22:51:49 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x40, 0x0) getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x8000) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="fd000000"], &(0x7f000095dffc)=0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @remote}}}, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) dup2(r1, r0) [ 190.531538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 22:51:49 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000380)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\x00\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\xdd\xcb\xd9L\xeaR\x18 \xab*\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:49 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000280)) fcntl$dupfd(r0, 0x0, r0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x0, &(0x7f0000000200)='/dev/sequencer2\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2000000000005) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={'veth1\x00', {0x2, 0x4e20, @loopback}}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r8 = creat(0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0xdfd4e7600a885198) getsockopt$inet6_mreq(r8, 0x29, 0x0, &(0x7f0000000100)={@rand_addr, 0x0}, &(0x7f00000002c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r11}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@bridge_delneigh={0x64, 0x1d, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, 0xae, 0x2, 0xb}, [@NDA_LLADDR={0xc, 0x2, @random="740dcdf69b27"}, @NDA_IFINDEX={0x8, 0x8, r11}, @NDA_CACHEINFO={0x14, 0x3, {0xfffff0bb, 0x8000, 0x2, 0x2}}, @NDA_MASTER={0x8, 0x9, 0x1}, @NDA_PORT={0x8, 0x6, 0x4e24}, @NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_PROBES={0x8, 0x4, 0x7}]}, 0x64}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000440)={'vcan0\x00', r10}) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000480)={r12, 0x1, 0x6}, 0x10) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r5, 0x80044326, &(0x7f0000000080)=0x8c) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x7c9c5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="5214d19c7ea0000000000000dd1b000000dbce276f160000003dc5d5000000002e18a2f23541a24c47e598fc8ed32a9aed6c954c699e97896a9844324dbadc2c9c4f5a4f6a7372e975c5"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f0000000340)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0xfffffffffffffff6}, 0x48) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) sendmsg$key(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r14, 0x112, 0xa, &(0x7f00000004c0)=0xffffffff, &(0x7f0000000500)=0x4) 22:51:49 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x300000200008927, &(0x7f00000000c0)={'bond0\x00\x00z\a\x00\x00\x00\x00\x06\x00\x05', @ifru_names='ip_vti0\x00\x03\x00'}) syz_open_dev$cec(&(0x7f0000000600)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x715, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) msgget$private(0x0, 0x0) clock_gettime(0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000540)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mremap(&(0x7f0000f36000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_map={0x4, 0x6, 0x3ff, 0x94, 0x5, 0x4}}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000640)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000005c0)={0x1, r4}) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) getgid() socket$inet6_tcp(0xa, 0x1, 0x0) 22:51:49 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x40, 0x0) getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x8000) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="fd000000"], &(0x7f000095dffc)=0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @remote}}}, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) dup2(r1, r0) 22:51:49 executing program 4: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x7f, 0x40, 0x3, 0x8}, {0x1, 0x0, 0x8}, {0x0, 0x7, 0x1f, 0x3}, {0x80000001, 0x7ec3, 0x5, 0x3}, {0x1000, 0x6, 0x0, 0x9}, {0x100000000, 0x2, 0x8}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000580)=0x4) sched_setattr(0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r6 = semget(0x3, 0x2, 0x364) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r7, r8, 0x0, 0x96a8) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) fstat(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="33db7f", @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=r11, @ANYBLOB=',\x00']) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000006c0)={{0x76e8, r9, r11, r12, r13, 0xaa, 0x3}, 0x6, 0x473a068a}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) [ 190.714348] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 190.738974] syz-executor.5 (7706) used greatest stack depth: 24512 bytes left 22:51:49 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x40, 0x0) getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x8000) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="fd000000"], &(0x7f000095dffc)=0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @remote}}}, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) dup2(r1, r0) 22:51:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) socket$pppoe(0x18, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet(r0, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="c2d30b3531af2acc7fdcef7cfc07fd744becdbfa32877a34e0cad3108ddfc3976bcdd7110b8c6c8b837639e91d73ef36b06bca2e38759a333524b17615c4db98256ed4e3d288be886ea6ee1b512f1e68423ff3a68f9b0aa877bfb9a81370c61cbb76d7cb4dfa1923f83897cedfcf09014310701a554acf32927fcb073e54db31302db330ddfe08c1883972783e9173c95419551a82b1dca35347f439e70f5bf90de57b2f6ae55fa2416fef07a99b712824f7f58a7be33f84128f288a969f3d3bfcc08a183ec1e956addac036d2d5911842e4492c705735a8bc8f5e614e3509df2464cfd4345d4c0709a4136cb2899ae90fdf704be152813b2fdb4f", 0xfb}, {&(0x7f0000000480)="0d58f180dd59b5bd5a51eca1c231a254a84d16ff8b3b8b43a950ece26de9901f03e92d5132508f338d364fa5babc9cc096b51a973e5d6d6d50c548cfc89f37731576c01e79ce4e46aafa4f433f597636f349e3ef6a1b46a4e625d6971431cf20dd94f6a492a9c57ff928425ae52a50262aceff501601c53526741df93a747096c0a62a2898dd9cb4736c7cf459ea6951f29379b3fa27d0a83a8a4cd54e61257410ff0b74679640e0c34b494a354813415eced12f0abadb6c2deb979ad6499c3f1b2096625560d684d21936be074b8ca375f6791531297457aaf8092a900a806f7653781b5fdeea53f5132477c265", 0xee}, {&(0x7f0000000580)="be443a35120d97705b5e1d1c7dd490e7c446cb1bde2e3b00d19f9eb2c1fe8000db5a19e583051cca9b9b95446090e215c9c335ea1b856b25cf61654492561bc3da9a047684e731e28325a3b249b7f59abc672d52bf8edd6df8461910f1c1921eb02acd7e7aae864b220e60992ab83031b51def259cca71706601c5141038cc952881d19ec53140b3daf2166a720a13bd959cd761218e32c0a9eb56e358e760cc7112f456d15236e8a9912d6a6fae44ea18024d97ccaf8f31a9303af19f9044dc523eff1af6314a893a0a02f349b8da5e1a44a8fa57b4f48f25242e68b619a6405e30077caaaba5b7649902c6", 0xec}, {&(0x7f0000000680)="d4a5242c450f287c1932317ba2cf9cf439cb6dce35e18fc6f6485b19b1aa74482df9a4bf6aa0f86d39b1ca4d25c51945b90bbc3b5597c16dc01261c82949613cbcfc9be4312445ef7378755ccb173522fa57ad0c625b72ba13e25fc0c692c760fbe83f69d9aae2", 0x67}, {&(0x7f0000000840)="27381064d351dea99bd87933110f199cd4951462e0ceeb10300826343808d738c4d0923c7f607d48b5a82ab0df74c15c486eaea4303cb5c279b3212ef8bf77037fadd30633a0c9d82dda34cf8fdef70879b3f61bccfcd78d8f8bc3a517fc3037ecd187e0a5a18ece076c68dd7096b40740446bc0bf6dd9d2f6d1a9e0752b72cc94f02d436fe3a85d6a5baac08cdb69ad1f5ea2d94cda4d6a87c8e4195e1f123458f2ed2f9792fb4e591e5316b8620665087fddc843acf3443fd46475c2531140929061c5ecd317fe29ae7a450d2559d04ba097c10434654f6d119c2b1c9487f7d16813b6ecd7323512cd0ea6", 0xec}, {&(0x7f0000000940)="7da306674c86ac7673730deb4cae68cd38592125b3c7b31e4023757ce642528f970944b6e5f5ba152474b7b6a76f12e0b83b865713e3e0a94529168c2c5102a373cd0830231e942a417e9fc4b01c044323c28d0105c0f41650c7f037095fda429ca731f78afbcd5d31067f9ac3acfdd73e218aa5b8aeeaac025b0e06712b631f3f9886fc3f10d656abbe2d09334ee1fcb5cd5555a48d54965aa49596db20290565e2ff6337572d794435cc7d38f24d84540403b68a3a194b5f5fde9a364f46c8a462c3629c7482aafd9bf1ea03a6e90b379ffa1f6d0c20fe32445aca96c04b8e1c4285da1a9f4a", 0xe7}, {&(0x7f0000000a40)="23062e399c4b7dffb456b16845939657eabb47d1d3f820fa97afb31dc17d576258dd3623952319f945d50340bf77e342a9ee7b12a5b028510bcc99fcf5adc3008d1574547b045ae52e09cf2baec5d160ca4e78142f24428065d0b9509fdd452a5a3bd21cc57b18cf981f654519ecd84de0fb376b2fe7a2e38820c865bbdc56b9a09a", 0x82}], 0x7}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)="a9", 0x1}, {&(0x7f0000001cc0)="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", 0x341}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000ec0)="bd", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000003b00)="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", 0x501}], 0x1}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001700)='b', 0x1}], 0x1}}, {{&(0x7f0000001780)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000002cc0)=[{&(0x7f00000017c0)="a3ca3f1e38bec5c2a93e7e61f624cd313095e3647dcea030", 0x18}, {&(0x7f0000001840)="725dd774246a8e3dc13a3390715084aa07ba64f5ab3a98680559bbe5b65c5bc889fb64bc40edaa314b7f996f40b51758671fab0235f223d3271a351529802bf1def0", 0x42}, {&(0x7f0000004b00)="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", 0xb00}, {&(0x7f00000033c0)="93", 0x1}, {&(0x7f00000019c0)="5966a3aa3ca36e77e8", 0x9}, {&(0x7f0000001a00)="71457143d488c9ef1e70e84a40d6633734b23d", 0x13}, {&(0x7f0000001a40)="397c2854182568b0b72771497601c437d5a9c8cf205be5f61046fdafc3b85f7a1bb48d87b75c230c7d4ab2796e8f2814fb4a89228a6fc654ad4ee2e1198d0b44790d219f6cb92b4979472ef89bcafa4f3df38ae4e064f19f336a842a6972a97aa9ebcc1f0e4963f51d884c575105a319bd83734f6cf700", 0x77}, {&(0x7f0000001b40)="2298", 0x2}, {&(0x7f0000001b80)="0cce781964164057e71e1e8ad2f9ccdfe66d05a3105530a6f022f3ebc4c4f9fd29da32488190caf550af1a59838644409507c30f413e8ad22037238ba30f6e24f80d669847d2c06c838b47ba77153212e5b5fd9258442f958f2acd674ccdc7f8b62b229705ab99317fc32413516f001f3f9b491255107114ae22ecb0c4ad8795525a43cc090d849f9d51c5341b88483a31200c5cba49f43e11f9ae73bd338ee19a9ec5052101e704fc4d1292d9e075da20409721b90027bac7a08ee36bb07dcd6b50e8f21ff5", 0xc6}], 0x9, &(0x7f0000002d80)=[@ip_retopts={{0x10}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x2, @multicast1}}}], 0x60}}], 0x6, 0x600d054) 22:51:49 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) ftruncate(r2, 0x200003) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) getpid() ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000280)=0x4) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:49 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x2, 0x7, 0x3, 0x8800, 0xffffffffffffffff}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r3, r4, 0x0, 0x96a8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) ioctl$SIOCAX25GETUID(r4, 0x89e0, &(0x7f0000000200)={0x3, @default, r5}) sendfile(r1, r2, &(0x7f0000000080), 0x1ff) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000240)={r9, @in6={{0xa, 0x4e21, 0x3, @rand_addr="e855f5847d6c314812bf30c35410fbf9", 0x4}}}, 0x84) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r10, 0x0, 0x480, &(0x7f0000001a40), &(0x7f0000000340)=0x40) 22:51:49 executing program 0: r0 = socket(0x1, 0x6, 0x0) write(r0, &(0x7f0000000000)="2400000052001f0014f9f407112c04091c0007ed070001000a0000000900000000000000", 0x24) 22:51:49 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000080)=0x3) 22:51:49 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.redirect\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:49 executing program 0: socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r0, r1, 0x0, 0x96a8) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x8, 0x4, 0x2, 0xf406, 0x9, 0x3, 0x3, 0x24, 0x7, 0x1f}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r7 = getpgid(r6) fcntl$lock(r3, 0x24, &(0x7f0000000080)={0x2, 0x6, 0x4, 0x7, r7}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000200)={0x81, 0x2, 0x8, 0x401, 0x13, 0x39, 0x7, 0x12, 0x3, 0x6}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0x701, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 22:51:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x7}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x9) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) 22:51:49 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xfffffffffffffffd, 0x501200) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000000c0)=""/161) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e00001000020008000e00000000000400120093004c8c8695211e69c6a932eb60dfde6c11efa0aab9b281e364117e8b9e31250cf78c05d32123905e6e49e63c7c8dbb2b408db2cb603f47fb4788f57ddc66c569d13b3067c70c1084aa1919f9026e2ad9f4d9a561655b189535c54e3c2d6fce08b7b59cea7e9da0f29347628b292e86cb374e1c307e097e9306"], 0x40}}, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r2, r3, 0x0, 0x96a8) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000240)={0xac3, 0x1, 0x5, 0x7, 0x16, 0x7}) 22:51:49 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:50 executing program 1: write(0xffffffffffffffff, 0x0, 0x9241) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000001c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xfffffffd}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000002440)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000180)=0x8) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10001) creat(&(0x7f0000002440)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) openat$zero(0xffffffffffffff9c, 0x0, 0x80101, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$inet_dccp_buf(r5, 0x21, 0x17, &(0x7f00000000c0)="e021fafeda70d5be48265f828c72db1f0b20a268019c9ec1bb83923141ea92e9ccd0711e1286d5c5ef0c239967c10817", 0x30) syz_open_pts(0xffffffffffffffff, 0x4404) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='threaded\x00', 0xfb3f) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = creat(0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4001c0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='threaded\x00', 0xfb3f) fallocate(r6, 0x0, 0x0, 0x10001) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) 22:51:50 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) mkdir(0x0, 0x10) chdir(&(0x7f0000000280)='./file0\x00') r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$invalidate(0x15, r1) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r1) add_key$user(0x0, 0x0, 0x0, 0x2ca, 0xfffffffffffffff9) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) socket$can_bcm(0x1d, 0x2, 0x2) getgid() getresgid(&(0x7f00000004c0), 0x0, 0x0) r3 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000200)={@multicast2, @dev}, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000840), &(0x7f0000000900)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000240), 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x480080, 0x0) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x7}, &(0x7f0000000100)=0x20) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='trusted.overlay.upper\x00', &(0x7f0000000500)={0x0, 0xfb, 0x79, 0x1, 0x80, "4ebe26852dbbfd038ed29d045d09f90f", "344f365f1467b274bf02095b15d448c41c93fc785d5816e2944cb81ee63234e315364ecabdec1f45f0db284f732717ed76d962cb33762392be1c8a8a46975a753346b53b2f71cd573142476884392b3974fc235e24dcd321d48459fd13bb6ec6ba1f3829"}, 0x79, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0xb8c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22:51:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open$dir(&(0x7f0000000440)='./file0\x00', 0x80880, 0x18b) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r4, r5, 0x0, 0x96a8) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="24f33e52", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={r9, 0xa}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000380)={r10, @in6={{0xa, 0x4e20, 0x8, @mcast2, 0x2}}, 0x1, 0x9}, 0x90) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}], 0x20) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r12 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r11, r12, 0x0, 0x1) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r14 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r15, r16, 0x0, 0x96a8) ioctl$VIDIOC_S_FBUF(r16, 0x4030560b, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000040)="5979bbdb0a8527ac22890524cd23f4", {0x20, 0x800, 0x1caaab2c, 0x4, 0x1, 0x9, 0x6, 0x2}}) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r17, r18, 0x0, 0x96a8) ioctl$TCSETA(r18, 0x5406, &(0x7f0000000100)={0x3, 0x2, 0x3, 0x6, 0x16, 0x3f, 0x5, 0x7, 0x4, 0xff}) sendfile(r13, r14, 0x0, 0x1) 22:51:50 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x10000, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @remote}, 0x80, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)='nr0\x00', 0x3ff, 0x7f}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(r2, &(0x7f0000000000)='./file0\x00', 0x4000, 0x1) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000002c0)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000280)=0x18, 0x4) 22:51:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006080), 0x3ea818461ad5563, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x4}, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000640)=ANY=[@ANYRES16, @ANYRES64], 0xa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r8 = accept4$vsock_stream(r7, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x800) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000100)={r8, 0x0, 0x401, 0x1, 0x48}) fallocate(r4, 0x3, 0x0, 0x8020003) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) lseek(r4, 0x19, 0x3) socket(0x0, 0x0, 0x0) 22:51:50 executing program 4: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x7f, 0x40, 0x3, 0x8}, {0x1, 0x0, 0x8}, {0x0, 0x7, 0x1f, 0x3}, {0x80000001, 0x7ec3, 0x5, 0x3}, {0x1000, 0x6, 0x0, 0x9}, {0x100000000, 0x2, 0x8}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000580)=0x4) sched_setattr(0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r6 = semget(0x3, 0x2, 0x364) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r7, r8, 0x0, 0x96a8) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) fstat(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="33db7f", @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=r11, @ANYBLOB=',\x00']) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000006c0)={{0x76e8, r9, r11, r12, r13, 0xaa, 0x3}, 0x6, 0x473a068a}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) 22:51:50 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x7f, 0x40, 0x3, 0x8}, {0x1, 0x0, 0x8}, {0x0, 0x7, 0x1f, 0x3}, {0x80000001, 0x7ec3, 0x5, 0x3}, {0x1000, 0x6, 0x0, 0x9}, {0x100000000, 0x2, 0x8}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000580)=0x4) sched_setattr(0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r6 = semget(0x3, 0x2, 0x364) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r7, r8, 0x0, 0x96a8) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) fstat(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="33db7f", @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=r11, @ANYBLOB=',\x00']) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000006c0)={{0x76e8, r9, r11, r12, r13, 0xaa, 0x3}, 0x6, 0x473a068a}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) 22:51:50 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) lseek(r0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000280)={0x439, 0x0, 0x8521, 0x4, 0x5, 0x3ff}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:50 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x7f, 0x40, 0x3, 0x8}, {0x1, 0x0, 0x8}, {0x0, 0x7, 0x1f, 0x3}, {0x80000001, 0x7ec3, 0x5, 0x3}, {0x1000, 0x6, 0x0, 0x9}, {0x100000000, 0x2, 0x8}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000580)=0x4) sched_setattr(0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r6 = semget(0x3, 0x2, 0x364) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r7, r8, 0x0, 0x96a8) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) fstat(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="33db7f", @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=r11, @ANYBLOB=',\x00']) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000006c0)={{0x76e8, r9, r11, r12, r13, 0xaa, 0x3}, 0x6, 0x473a068a}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) 22:51:50 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x7f, 0x40, 0x3, 0x8}, {0x1, 0x0, 0x8}, {0x0, 0x7, 0x1f, 0x3}, {0x80000001, 0x7ec3, 0x5, 0x3}, {0x1000, 0x6, 0x0, 0x9}, {0x100000000, 0x2, 0x8}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000580)=0x4) sched_setattr(0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r6 = semget(0x3, 0x2, 0x364) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r7, r8, 0x0, 0x96a8) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) fstat(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="33db7f", @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=r11, @ANYBLOB=',\x00']) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000006c0)={{0x76e8, r9, r11, r12, r13, 0xaa, 0x3}, 0x6, 0x473a068a}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) 22:51:50 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x7f, 0x40, 0x3, 0x8}, {0x1, 0x0, 0x8}, {0x0, 0x7, 0x1f, 0x3}, {0x80000001, 0x7ec3, 0x5, 0x3}, {0x1000, 0x6, 0x0, 0x9}, {0x100000000, 0x2, 0x8}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000580)=0x4) sched_setattr(0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r6 = semget(0x3, 0x2, 0x364) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r7, r8, 0x0, 0x96a8) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) fstat(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="33db7f", @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=r11, @ANYBLOB=',\x00']) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000006c0)={{0x76e8, r9, r11, r12, r13, 0xaa, 0x3}, 0x6, 0x473a068a}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) 22:51:50 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) setns(0xffffffffffffffff, 0x10000000) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x82}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000082130743a3ff520000022cbd7000fddbdf250a0000008d3c2d521142169c42f3938de1ac4549320d40af9851b074cb8a5427bd6acc3a250e91c0767252d20791f446b42e3d71f5b89c671cd7328f4ccce44dd3b53e8cb9b583c2ad82010077740fc0d6d2ba1c84ae84dfa67274e4821236"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:51 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ashmem\x00', 0x20100, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$invalidate(0x15, r2) close(r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, r2) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$search(0xa, r1, &(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={'syz', 0x1}, r3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r4 = syz_open_dev$vcsn(&(0x7f0000000a80)='/dev/vcs#\x00', 0x81, 0x400200) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRESOCT=r6], &(0x7f0000a8a000)=0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f000059aff8), &(0x7f000034f000)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000ac0)=@assoc_value, 0x8) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:51 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:51 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='vboxnet1securityposix_acl_access\x00') 22:51:51 executing program 4: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x7f, 0x40, 0x3, 0x8}, {0x1, 0x0, 0x8}, {0x0, 0x7, 0x1f, 0x3}, {0x80000001, 0x7ec3, 0x5, 0x3}, {0x1000, 0x6, 0x0, 0x9}, {0x100000000, 0x2, 0x8}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000580)=0x4) sched_setattr(0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r6 = semget(0x3, 0x2, 0x364) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r7, r8, 0x0, 0x96a8) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) fstat(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="33db7f", @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=r11, @ANYBLOB=',\x00']) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000006c0)={{0x76e8, r9, r11, r12, r13, 0xaa, 0x3}, 0x6, 0x473a068a}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) 22:51:51 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) fstat(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) ioctl$TUNSETGROUP(r2, 0x400454ce, r4) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$ASHMEM_SET_NAME(r5, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:51 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000280)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:51 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x40, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000280)={0x80000001, 0x9, 0x1}) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) accept4$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x10000, 0x242002) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) 22:51:51 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) stat(0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000300), 0x1) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) utime(0x0, &(0x7f00000001c0)={0x9}) syz_open_dev$usbmon(0x0, 0xfc2, 0x200) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) 22:51:51 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x7f, 0x40, 0x3, 0x8}, {0x1, 0x0, 0x8}, {0x0, 0x7, 0x1f, 0x3}, {0x80000001, 0x7ec3, 0x5, 0x3}, {0x1000, 0x6, 0x0, 0x9}, {0x100000000, 0x2, 0x8}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000580)=0x4) sched_setattr(0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r6 = semget(0x3, 0x2, 0x364) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r7, r8, 0x0, 0x96a8) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) fstat(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="33db7f", @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=r11, @ANYBLOB=',\x00']) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000006c0)={{0x76e8, r9, r11, r12, r13, 0xaa, 0x3}, 0x6, 0x473a068a}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) 22:51:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000015000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="660f3882bc4fd40f20c06635020000000f22c00f01caf30f1276d42e0f01c566b9800000c00f326635000400000f300fc73dbaf80c66b8beab658e66efbafc0cedc432baa100ec", 0x47}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x100000, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0xbbc500, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000300)={0x5, 0x17, 0x5, 0x9, 0x3f, 0x9, 0x4}, 0xc) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r5, r6, 0x0, 0x96a8) mmap$usbfs(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x200000d, 0x30, r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$key(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="28000000030000dc67982e97b885eb6c04cb000000000000000000010000000000000007000000000000006b657972696e6700947fcdcaf80df8af9312bfd09094da8bc1589c9b72f258a97d87df6481512c05d5f8754a22b33b9a6437c9dd6b28b419ea53e6e652519b491b861c271b090bfd96aeafc5076ce78a3ac4fb590296946cbceff0f69c1660f28b3d9095f2c05c90afdd65535fc593d2ac016173b81f142a7c11acccf590ef49d5d56a13706f7fdb5210d58889037528a90f87e3b10c1d3998e6478efb337e2436facfafe5cec124204d695ea083ced91247a94646662a36af2f4f971228345dc96f8b913c5cb757dd3ee94907d3ad52db825662c5a9a4153f2411151a2fc063c9f58e89aaa422bdaf54dc9b2767f856a8ef5777daca299ac34f9b6cfd64ba6abcb0a82bbba8b6549f14e596e75d8449c822ea32b8d76c1da0708084de2ab78ec9786110"], 0x28) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') r11 = socket$bt_rfcomm(0x1f, 0x744ea4e74da0dae3, 0x3) sendfile(r9, r11, 0x0, 0x96a8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r10, 0xc0a85352, &(0x7f0000000200)={{0x3b, 0x7a}, 'port0\x00', 0x18, 0x4, 0x20, 0x7d7d, 0x11, 0x7fffffff, 0x9a8, 0x0, 0x4, 0x772}) signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x302, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) sendmsg$key(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r13, 0x0, 0x483, &(0x7f0000000380)={0x6c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 'sed\x00', 0x8, 0x0, 0x9}, 0x2c) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') 22:51:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r2, r3, 0x0, 0x96a8) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x6) setrlimit(0x8, &(0x7f00000a3ff0)) mlockall(0x1) 22:51:51 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000440), 0x4) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r3 = msgget(0x2, 0xc10) msgsnd(r3, &(0x7f0000000280)={0x0, "6fc28039fab098cdf9de89b4edf06945438f776dc601c98587652ea999bd4c4593deba7fc94f646d4f661c9f0c1160a1c7950c3b4b327f3a16608f70062ab339a4d4cceeecf9dad7cc6b352fbfa99cb24464b93b0e5410882b36e526e0a53f995f4df0e4"}, 0x6c, 0x800) openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x50000, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000540)) msgsnd(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a"], 0x1, 0x0) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[]], 0x1, 0x0) msgrcv(r4, &(0x7f0000000040), 0x8, 0x0, 0x0) msgsnd(r4, &(0x7f0000000300)={0x0, "ebc1d322fb59c9b4e5565eafc086d536f3378fe4309151d47bfeca3e07ae82099ae753fbcada60f337b15ad26298cd672de2691cb1e286e369086f9b93080a9b7e57559bcfe8f3ba0022d117d66c6d11d14d7ac87a235ae4b4f7c12d7e94a641aee2f11201b13a8325366743cb535b1f3b797909dbaa96169a597f9d7d7cc2f79c76327c051a09a850b645b53b5563f28ef54305d3f6e280212f9db4fec3ab1b84c0a9a9a145da8e724d6875cc8fc7b58c6b2312b5dd188c04a84fcc22239f5dbc07ab3ae91f4fd65ba047d5369d8c0789daa7e4a025829ac93855b21fdf17f7f0f7fa08f56ff9cea7e2e568bb4f3326179ebc0769214f352b23"}, 0x102, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:51 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) stat(0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000300), 0x1) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) utime(0x0, &(0x7f00000001c0)={0x9}) syz_open_dev$usbmon(0x0, 0xfc2, 0x200) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) 22:51:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) stat(0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000300), 0x1) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) utime(0x0, &(0x7f00000001c0)={0x9}) syz_open_dev$usbmon(0x0, 0xfc2, 0x200) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) 22:51:51 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) stat(0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000300), 0x1) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) utime(0x0, &(0x7f00000001c0)={0x9}) syz_open_dev$usbmon(0x0, 0xfc2, 0x200) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) 22:51:52 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) stat(0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000300), 0x1) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) utime(0x0, &(0x7f00000001c0)={0x9}) syz_open_dev$usbmon(0x0, 0xfc2, 0x200) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) 22:51:52 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000680)={@my=0x0}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) shutdown(r1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x7b}, 0x0, 0x0, 0x0, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4ca101, 0x0) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x810}, {r0, 0x8}, {r2, 0x2}, {r3, 0x8010}, {0xffffffffffffffff, 0x2158}, {r4, 0x400}], 0x6, &(0x7f00000001c0), &(0x7f0000000200)={0xa}, 0x8) 22:51:52 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="bced637615f704c4f0040000"], 0xc) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) socket$rxrpc(0x21, 0x2, 0x2) setsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f0000000240), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getrandom(&(0x7f0000000880)=""/4096, 0x1000, 0x1) renameat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0x0) 22:51:52 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0xffffffffffffff49}], 0x4000, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$dspn(&(0x7f0000000a40)='/dev/dsp#\x00', 0xb4f, 0x200000) accept4$alg(r6, 0x0, 0x0, 0x0) r7 = fcntl$dupfd(r5, 0x0, r5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r8) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r9, r10, 0x0, 0x96a8) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r11, 0x0, r11) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES32=r2, @ANYRESOCT=r4, @ANYRESOCT=r5, @ANYPTR64, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRESOCT=r8, @ANYRES32=r5, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYRES64, @ANYBLOB="94bdb9e4e36414edb33ee2919a76db6fb07306928bd77d7e978693679d6d85b9bd85958936ffe1826549fcf45dda591a06b533430485104f3854fcb619a7540f1c4a79d6d156f4f080d9631c514474057a4e161200aab95947b6ab7c19b08517c5ac2138245a39ec564fbf106af0f7b51a9c8a70c44333e39f83e14135b0cc8aae3afe4914f59a5ab7fceafc8cdad0a7701aac963830c3c93b8fadb225c84a490a92bc03836d910d57308b27c3e44000c934f4586a0cc808e7d04fe33a1dcd3a7b0924c8499dc90afc27ada1da4d007d0f97401a", @ANYRESHEX], @ANYRESHEX, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r9, @ANYRESHEX=r11, @ANYPTR64, @ANYRESHEX=r1, @ANYPTR, @ANYRES32=r7], @ANYRES64=r0], @ANYBLOB="6f235ded597047af3e8bc0a6c275dbb6bf17cc2151cc39248359ee7d4a0df7fbcfde33b0b78646e74ec21955755f3117013a9c346afd9e7da18b991da1c903a8ce33e001b570f4b879dd4d69a8231b048a762768863973899d2c93560c5beee9a32eef2022449663c0ea5a6528218bb221f79095a498874dcd17a85d74469ea3b82a8e63a41bc8062015ec070a76fcd0287ac5bae59c471afd11d2cf7f1694622361106c8fdb696180", @ANYRES16=r11]) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='tr,rfd', @ANYRESHEX=r13, @ANYRESHEX=r13, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r14, 0x0) io_setup(0x4a000, &(0x7f0000000a80)=0x0) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) r17 = fcntl$dupfd(r16, 0x0, r16) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) sendmsg$key(r17, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r18, r19, 0x0, 0x96a8) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) sendmsg$key(r21, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) io_submit(r15, 0x3, &(0x7f0000001cc0)=[&(0x7f0000000b80)={0x0, 0x0, 0x0, 0x3, 0x8, r4, &(0x7f0000000ac0)="7833ed37b22ca5233c9f55528e3e823e354a4e08e05952e91cf53c51b7354e33b9a7363245f3b5f992b03b3fbb34ffef93447fd1738bb132078ed0970c75992b9ec42097691a81c61be36f017897625c08be3a2b0824cb6fa4180aa415be8a3df1f9d824f9374f98fb4bc17dec431bdedd1202fa2fd323650a8ea83f94017ee5acd0095f28a6680fd8", 0x89, 0x3f}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000000bc0)="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", 0x1000, 0x6, 0x0, 0xc6031f2d58bdf20f, r17}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x2, 0x8, r19, &(0x7f0000001c00)="6439d91153a4888071f0016743add53ad9855ac9e8220ce03f1b8daa552b8b68011386529964dda1a8afe03e0a3359e2c5ead23ed3d32743ffef7b0ca00f4a31da2c491871e823ab507c15195719e281f326", 0x52, 0x6, 0x0, 0x0, r21}]) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x200, 0x3, &(0x7f0000000740)=[{&(0x7f0000000240)="730c9815050b327179f8791d7a8b3011be7e567d96f0e86f8fd4d75ae6f6161365ec1b78cf38bb7469acbcebf8b56c59ac822781d14b80f947ba568804c3f33cd23ebf941f259f9dce4343b7bf12720e23f4d36a3feb46ed53c96a32b9ab7ff3c5e3969d0e295fe317d53fd420778da89678963215066e52e0abd2", 0x7b, 0x7fff}, {&(0x7f0000000800)="6d73de9fa655699b26114c468931fd08e81899b7eec2caf06c55ab55977c4ffe08999748f0966d4a79086e9565bfea056bf8e76551642947c6e1732040c23b193db4cfc1997e29e5b4071b4c93b0ecdf9f256bf22eb25f97923f10f0548af00405974d044c248244484dafb2b7d5598ffec3bef287301465d1482aabfe8cf12695b70a34d48bd08fe858f85753ef4f696a6f2a91a134c22529cf7bc6eb780cc72afecf09e3511c5fc2ebf78b9340483f12beb8bae42439aa9ce247db3ea290d9", 0xc0, 0x10000}, {&(0x7f0000000500)="8c49255f910ed695e16a9d2755cc926b5dc8f02e6575191c3660804cbc25392396ffd4fc4f76", 0x26, 0xfff}], 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB='nodelalloc,resgid=', @ANYRESHEX=r12, @ANYBLOB=',fscontext=system_u,rootcontext=root,pcr=00000000000000000024,smackfsfloor=ext4\x00,>\x00\x00\x00', @ANYRESDEC=r14, @ANYBLOB=',smackfshat=stat\x00,dont_appraise,obj_type=,mask=MAY_WRITE,\x00']) 22:51:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8000001000008912, &(0x7f0000000100)="11f0a505ba583bcb7bf070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="24000000180007041dfffd946f6105001d000300fe0200000001080008000200ac14140e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x40001) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000300)=""/67) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000002c0)) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="c4000000750100b900000024b445a4c4b43378149297426f32a9f9bb86a87f824fc4bd8d6b162390caa75688b0071889708ddb0cd768795e74905fe485715ad95145a4ba04e00e0d838aedc737a16be2de0de7b8a20a6dd788bdb93de3a4d4dc7127db128f7a437077bc522b7100ffb3e17d0baf98b6bfab2bb800ba4945e81b38cd619f5ed3d568ecf0db6cfa8ef66447cbb642c2a093a89f5f5e5695e774627a4649c7098f780ef1358b3b21238ee269de143636aaf9aa40b0709645c9419593b0db2661"], 0xc4) 22:51:52 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x7f, 0x40, 0x3, 0x8}, {0x1, 0x0, 0x8}, {0x0, 0x7, 0x1f, 0x3}, {0x80000001, 0x7ec3, 0x5, 0x3}, {0x1000, 0x6, 0x0, 0x9}, {0x100000000, 0x2, 0x8}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000580)=0x4) sched_setattr(0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r6 = semget(0x3, 0x2, 0x364) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r7, r8, 0x0, 0x96a8) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) fstat(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="33db7f", @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=r11, @ANYBLOB=',\x00']) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000006c0)={{0x76e8, r9, r11, r12, r13, 0xaa, 0x3}, 0x6, 0x473a068a}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) 22:51:52 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) pipe(0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000240)=""/113, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0), 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0xfffffffffffffffc) clock_adjtime(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) sendto$packet(r1, &(0x7f0000000380)="1a8343fe7047a19d8459e2d520b762dbe4e271ae2eb749ed8317c78e0f58b632d5fbf7eea9a38b7bf0c5fb8137a28e1a2e10e725b2fe352c692bc72954f41d228e", 0x41, 0x95, &(0x7f0000000500)={0x11, 0x7, r3, 0x1, 0x40, 0x6, @random="5dfa3aad142d"}, 0x14) syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000000)='cpuset.memory_migrate\x00', 0x2, 0x0) r6 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) sendfile(r5, r6, 0x0, 0x508) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000200)={0x1, 0x2, 0x2, {0x0, 0x6, 0x91, 0x4}}) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r7, r8, 0x0, 0x96a8) fstatfs(r8, &(0x7f0000000140)=""/32) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 22:51:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x200, 0x0) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000200)=0xc) [ 193.789646] kauditd_printk_skb: 1 callbacks suppressed [ 193.789654] audit: type=1400 audit(1570229512.356:53): avc: denied { bind } for pid=7914 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 22:51:52 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xfe) prctl$PR_SET_SECUREBITS(0x1c, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) chroot(0x0) write$nbd(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x4d) sendfile(r3, r3, &(0x7f0000000200), 0xa198) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000080)) fcntl$getown(0xffffffffffffffff, 0x9) r4 = fcntl$getown(r0, 0x9) syz_open_procfs(r4, &(0x7f0000000100)='Q_@\xc3f\x8f\x01\xa1') preadv(r1, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) dup3(0xffffffffffffffff, r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = dup(r7) r9 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r9) sendmsg$nl_netfilter(r6, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x30, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x0, @pid}, @typed={0x14, 0x7, @ipv6=@mcast2}]}, 0x30}}, 0x0) 22:51:52 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r2, r3, 0x0, 0x96a8) write$selinux_load(r3, &(0x7f00000002c0)={0xf97cff8c, 0x8, 'SE Linux', "4a2a2cba54111595536bd5f76d8007a3e07984a6731445d59c1bb0366d276364afd870165f6a06cf9c99c08e4ff23645e0d8c01dd7be3ca56c36d88c433fdd362e8ed521add8fc20b70e60f7ce8ae8f86f26f7deef69f3b10fdf1934dc9518883ce0fa18d32e0dc669c02cb63bb4bb5e34b325e19c65eb9a08d21a95662f058c62ecfe358e50abadb03807fcd4c0338fb3b3b7ba4e8391f027c6a2f4421accd648184e5a372bf42f2249c06c5558941d39fc3a118467dd0ff8c1f9b626309bc8921e2db1cd92b40fb9ac27"}, 0xdb) openat$cgroup_ro(r1, &(0x7f0000000280)='memory.current\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:52 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x8004033, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write$FUSE_STATFS(r1, &(0x7f0000000280)={0x60, 0x0, 0x4, {{0x4, 0x0, 0x9, 0x10000, 0x7, 0x1bd2, 0x7, 0x5}}}, 0x60) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x80000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) 22:51:52 executing program 2: socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r0, r1, 0x0, 0x96a8) setsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000100)=0x9492, 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x205080, 0x0) ioctl$CAPI_GET_FLAGS(r2, 0x80044323, &(0x7f0000000380)) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f00000011c0)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x841000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r4, @ANYRES64=r3], 0x3}, 0x1, 0x0, 0x0, 0x8000084}, 0x4000000) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r4, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xcf}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x1) ioctl$ASHMEM_SET_NAME(r3, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') inotify_init() ioctl$ASHMEM_SET_NAME(r3, 0x40087707, &(0x7f0000000080)='nodev\x00') [ 196.111515] IPVS: ftp: loaded support on port[0] = 21 [ 196.976725] chnl_net:caif_netlink_parms(): no params data found [ 196.985523] IPVS: ftp: loaded support on port[0] = 21 [ 197.022070] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.028626] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.036257] device bridge_slave_0 entered promiscuous mode [ 197.055739] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.062613] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.069837] device bridge_slave_1 entered promiscuous mode [ 197.095585] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.107921] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.137334] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 197.144500] team0: Port device team_slave_0 added [ 197.150274] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 197.157428] team0: Port device team_slave_1 added [ 197.163422] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 197.170829] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 197.222920] device hsr_slave_0 entered promiscuous mode [ 197.260496] device hsr_slave_1 entered promiscuous mode [ 197.308127] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 197.317166] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 197.366010] chnl_net:caif_netlink_parms(): no params data found [ 197.385257] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.391885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.398489] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.404991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.433753] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.440598] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.447563] device bridge_slave_0 entered promiscuous mode [ 197.454695] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.461193] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.468225] device bridge_slave_1 entered promiscuous mode [ 197.489074] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.498186] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.517333] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 197.524811] team0: Port device team_slave_0 added [ 197.530961] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 197.537996] team0: Port device team_slave_1 added [ 197.546673] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 197.554597] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 197.612318] device hsr_slave_0 entered promiscuous mode [ 197.670456] device hsr_slave_1 entered promiscuous mode [ 197.710844] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 197.718491] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 197.740855] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.747374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.754023] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.760416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.772806] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 197.779099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.788708] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.798450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.805523] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.812748] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.820344] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.826979] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.836208] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 197.842892] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.852938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.860660] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.866996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.883643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.891951] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.898300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.905645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.921453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.928431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.936089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.946357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.957472] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 197.963930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.981882] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 197.989252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.002159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.009315] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 198.022844] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 198.032849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.044776] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.054213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.061774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.071699] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 198.077793] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.087495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 198.094964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.103259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.111144] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.117621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.126566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 198.136473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.145129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.153516] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.159969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.169243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 198.184512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.201915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 22:51:56 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x0, 0x9, @mcast1}, @in={0x2, 0x0, @multicast1}], 0x3c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) dup2(r1, r0) creat(&(0x7f0000000000)='./bus\x00', 0x0) getpid() socket(0x10, 0x2, 0xc) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000040)={0x2, '_V'}, 0x3) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r2, r3, 0x0, 0x96a8) ioctl$IMSETDEVNAME(r3, 0x80184947, &(0x7f0000000080)={0x9, 'syz1\x00'}) r4 = syz_open_procfs(0x0, 0x0) close(r4) io_submit(0x0, 0x0, 0x0) 22:51:56 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @enum={0x6}]}, {0x0, [0x0]}}, &(0x7f0000000340)=""/4096, 0x37, 0x1000, 0x1}, 0x20) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000013c0)=""/2) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r2, r3, 0x0, 0x96a8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000280)={0x200, 0x2, 'client1\x00', 0x1, "4f87908ef7c6c3dc", "27e7493fcf17bd60242bfd6886ac33e9b4f8ef8cfdd1e6e1c8ff00a5c0e3bcd2", 0x401, 0x2}) 22:51:56 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000440), 0x4) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r3 = msgget(0x2, 0xc10) msgsnd(r3, &(0x7f0000000280)={0x0, "6fc28039fab098cdf9de89b4edf06945438f776dc601c98587652ea999bd4c4593deba7fc94f646d4f661c9f0c1160a1c7950c3b4b327f3a16608f70062ab339a4d4cceeecf9dad7cc6b352fbfa99cb24464b93b0e5410882b36e526e0a53f995f4df0e4"}, 0x6c, 0x800) openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x50000, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000540)) msgsnd(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a"], 0x1, 0x0) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[]], 0x1, 0x0) msgrcv(r4, &(0x7f0000000040), 0x8, 0x0, 0x0) msgsnd(r4, &(0x7f0000000300)={0x0, "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"}, 0x102, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:56 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000440), 0x4) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r3 = msgget(0x2, 0xc10) msgsnd(r3, &(0x7f0000000280)={0x0, "6fc28039fab098cdf9de89b4edf06945438f776dc601c98587652ea999bd4c4593deba7fc94f646d4f661c9f0c1160a1c7950c3b4b327f3a16608f70062ab339a4d4cceeecf9dad7cc6b352fbfa99cb24464b93b0e5410882b36e526e0a53f995f4df0e4"}, 0x6c, 0x800) openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x50000, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000540)) msgsnd(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a"], 0x1, 0x0) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[]], 0x1, 0x0) msgrcv(r4, &(0x7f0000000040), 0x8, 0x0, 0x0) msgsnd(r4, &(0x7f0000000300)={0x0, "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"}, 0x102, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:56 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000440), 0x4) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r3 = msgget(0x2, 0xc10) msgsnd(r3, &(0x7f0000000280)={0x0, "6fc28039fab098cdf9de89b4edf06945438f776dc601c98587652ea999bd4c4593deba7fc94f646d4f661c9f0c1160a1c7950c3b4b327f3a16608f70062ab339a4d4cceeecf9dad7cc6b352fbfa99cb24464b93b0e5410882b36e526e0a53f995f4df0e4"}, 0x6c, 0x800) openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x50000, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000540)) msgsnd(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a"], 0x1, 0x0) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[]], 0x1, 0x0) msgrcv(r4, &(0x7f0000000040), 0x8, 0x0, 0x0) msgsnd(r4, &(0x7f0000000300)={0x0, "ebc1d322fb59c9b4e5565eafc086d536f3378fe4309151d47bfeca3e07ae82099ae753fbcada60f337b15ad26298cd672de2691cb1e286e369086f9b93080a9b7e57559bcfe8f3ba0022d117d66c6d11d14d7ac87a235ae4b4f7c12d7e94a641aee2f11201b13a8325366743cb535b1f3b797909dbaa96169a597f9d7d7cc2f79c76327c051a09a850b645b53b5563f28ef54305d3f6e280212f9db4fec3ab1b84c0a9a9a145da8e724d6875cc8fc7b58c6b2312b5dd188c04a84fcc22239f5dbc07ab3ae91f4fd65ba047d5369d8c0789daa7e4a025829ac93855b21fdf17f7f0f7fa08f56ff9cea7e2e568bb4f3326179ebc0769214f352b23"}, 0x102, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 198.211547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.221520] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 198.228418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.237548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.248245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 198.256040] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 22:51:56 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x100000b, 0x810, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 198.268817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.294886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.308337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 198.327327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.337576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.347610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 198.358806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.368257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.386754] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 198.394805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.407622] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 198.417958] 8021q: adding VLAN 0 to HW filter on device batadv0 22:51:58 executing program 0: socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r0, r1, 0x0, 0x96a8) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000240), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r2, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x100000) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000800000004464431303000000c319309e079cb76101d22baf3b7b9bfc154875f9a4d50e500c3fadd0a9b23a523b4e4ea38e50603fe00e79dd6e6a3a39fe5a67038c8127ee81320fa817b0dd36b6bdb8cbbd27d352bc1e549b47ed9b44fbeb3ee3f95b71a7d2c3cd2e7c888dbe26e0f236d7c71bb9cef99602e65dfd534c112198fc5d808a217508bd9624848b8edd81"]) fcntl$dupfd(r4, 0x0, r4) ioctl$int_in(r4, 0x5421, &(0x7f0000000200)=0x1ff) r6 = fcntl$dupfd(r3, 0x0, r3) msgget(0x1, 0x1ad) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000180), 0x4) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x53) ioctl$KVM_GET_PIT(r7, 0xc048ae65, &(0x7f0000000340)) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000000c0)="4952d79b978eac134e087471493b6852be16077b6847eb0fe0c71702aa9266594fed32dda2076c7fa53f867a5f248b93cc5619821879166fe1f6e981c6ed91f969c4111d3a8a677553d00c989cdd217347664886f3b15e320419c3bfe8211b68d00b46ab3d642caddd09ad5e4ae9dad00f5d6c72ea83beff30cb526effb67b0afcaa217383f00fa474a3761df7bdefb352319d", 0x93) 22:51:58 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000340)=0x3) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$rds(r4, &(0x7f0000001840)={&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000016c0)=[{&(0x7f00000003c0)=""/43, 0x2b}, {&(0x7f0000000400)=""/50, 0x32}, {&(0x7f0000000440)=""/147, 0x93}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/207, 0xcf}], 0x6, &(0x7f00000017c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x9, 0xfffffffc}, {&(0x7f0000001740)=""/55, 0x37}, &(0x7f0000001780), 0x0, 0x38, 0x9}}], 0x48, 0x10000050}, 0x1000) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000000280)=""/130) 22:51:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='stat\x00') prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f00000004c0)) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0W_\xb6\xe4\x8d\xba\xee\b\xeb\x8e\xd8[T|i$\x88\x04\t\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8040006}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r4, 0x800, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}}, 0x4000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x261240f4c029056e}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x9a7c2fab06511386}, 0x4040800) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@empty}}, 0x0) getrusage(0xffffffffffffffff, &(0x7f00000003c0)) rmdir(0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 22:51:58 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x12}, &(0x7f0000044000)) r0 = gettid() r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$inet_dccp_int(r4, 0x21, 0xc, &(0x7f0000000040)=0x5, 0x4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x13) read$FUSE(r2, &(0x7f0000007380), 0x1000) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x40000, 0x0) setsockopt$llc_int(r5, 0x10c, 0x4, &(0x7f0000000180), 0x4) 22:51:58 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000440), 0x4) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r3 = msgget(0x2, 0xc10) msgsnd(r3, &(0x7f0000000280)={0x0, "6fc28039fab098cdf9de89b4edf06945438f776dc601c98587652ea999bd4c4593deba7fc94f646d4f661c9f0c1160a1c7950c3b4b327f3a16608f70062ab339a4d4cceeecf9dad7cc6b352fbfa99cb24464b93b0e5410882b36e526e0a53f995f4df0e4"}, 0x6c, 0x800) openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x50000, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000540)) msgsnd(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a"], 0x1, 0x0) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[]], 0x1, 0x0) msgrcv(r4, &(0x7f0000000040), 0x8, 0x0, 0x0) msgsnd(r4, &(0x7f0000000300)={0x0, "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"}, 0x102, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:58 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x40, 0x100) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x40000000000a132, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r3, 0x101, 0xc, &(0x7f0000003680), &(0x7f0000000280)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000)=0x1f, 0x4) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r6, r7, 0x0, 0x96a8) ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f0000000080)={0x4, 0x80, 0x7, 0xc}) write$capi20(0xffffffffffffffff, 0x0, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000180)) connect$vsock_dgram(r5, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) [ 199.492717] audit: type=1804 audit(1570229518.066:54): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir376326040/syzkaller.BfJfjc/36/file0" dev="sda1" ino=16681 res=1 22:51:58 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r3, r4, 0x0, 0x96a8) syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x6, 0x2) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000180)={0x80000000, 0x3, 0xec, 0x3a19, 0x9, 0x7f}) sendfile(r1, r2, 0x0, 0x96a8) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @bt={0xffffffff, 0x7, 0x2494, 0x14000000, 0x0, 0x2, 0x0, 0xba087f2b34c367cb}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x8, 0x110, r6, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000400)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(t=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a\x11ltJ\xc1t\x03\xb1,V \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='stat\x00') 22:51:58 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000000)={0x0, 0x1, 0x0, [0x0, 0x800000000000000], &(0x7f0000000080)={0x98f90a, 0x800d408, [], @p_u16=0x0}}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:58 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', 0x0, 0x0, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) clone(0x1000000a0160101, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f0000000400)=""/4096, &(0x7f0000001400)=0x1000) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xfdef) write$selinux_load(r0, 0x0, 0x0) 22:51:58 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) time(&(0x7f0000000000)) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:51:58 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000002c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x1c) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0xfc17ae6a20b28f0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x1208, 0x5, 0xfffff53d, 0x3, 0x0, 0xffffffff}, 0x0, 0x20000000, 0xffffffffffffffff, 0x2) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000100)=0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@remote, 0x0, 0x4, 0x0, 0x1}}, 0xe8) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r3, r4, 0x0, 0x96a8) ioctl$VIDIOC_S_AUDIO(r4, 0x40345622, &(0x7f0000000180)={0x100, "753d42d2dae659ccbd38e35967e06594a7a99ffa155e93c60bdc47d3d7c68bb8", 0xc754675fc3429851}) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000200)=""/15, 0xf}], 0x1) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) 22:51:58 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000000) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000280)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 199.899529] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 199.932980] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 199.970569] CPU: 0 PID: 8031 Comm: syz-executor.4 Not tainted 4.14.146 #0 [ 199.977554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.986921] Call Trace: [ 199.989528] dump_stack+0x138/0x197 [ 199.993196] warn_alloc.cold+0x96/0x1af [ 199.997186] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 200.002247] ? lock_downgrade+0x6e0/0x6e0 [ 200.006419] ? avc_has_perm+0x2df/0x4b0 [ 200.010468] __vmalloc_node_range+0x3c3/0x6a0 [ 200.014981] ? retint_kernel+0x2d/0x2d [ 200.018884] ? trace_hardirqs_on_caller+0x400/0x590 [ 200.023919] vmalloc+0x46/0x50 [ 200.027127] ? sel_write_load+0x1a0/0x1050 [ 200.031376] sel_write_load+0x1a0/0x1050 [ 200.035465] ? sel_read_bool+0x240/0x240 [ 200.039574] ? mark_held_locks+0xb1/0x100 [ 200.043740] __vfs_write+0x105/0x6b0 [ 200.047474] ? trace_hardirqs_on_caller+0x400/0x590 [ 200.052511] ? sel_read_bool+0x240/0x240 [ 200.056596] ? kernel_read+0x120/0x120 [ 200.060518] ? check_preemption_disabled+0x3c/0x250 [ 200.065565] ? retint_kernel+0x2d/0x2d [ 200.069492] vfs_write+0x198/0x500 [ 200.073052] SyS_write+0xfd/0x230 [ 200.076613] ? SyS_read+0x230/0x230 [ 200.080262] ? do_syscall_64+0x53/0x640 [ 200.084256] ? SyS_read+0x230/0x230 [ 200.087899] do_syscall_64+0x1e8/0x640 [ 200.091799] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 200.096660] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 200.101880] RIP: 0033:0x459a59 [ 200.105074] RSP: 002b:00007fafa792ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 200.112866] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 200.120142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 200.127511] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 200.135260] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fafa792b6d4 [ 200.142546] R13: 00000000004c9f81 R14: 00000000004e1c10 R15: 00000000ffffffff [ 200.169038] Mem-Info: [ 200.172054] active_anon:118752 inactive_anon:185 isolated_anon:0 [ 200.172054] active_file:12759 inactive_file:10922 isolated_file:0 [ 200.172054] unevictable:0 dirty:425 writeback:0 unstable:0 [ 200.172054] slab_reclaimable:11949 slab_unreclaimable:107971 [ 200.172054] mapped:50345 shmem:242 pagetables:1001 bounce:0 [ 200.172054] free:1282873 free_pcp:310 free_cma:0 [ 200.208847] Node 0 active_anon:475008kB inactive_anon:740kB active_file:50896kB inactive_file:43688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:201380kB dirty:1700kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 45056kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 200.263772] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 200.331587] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.398777] lowmem_reserve[]: 0 2580 2580 2580 [ 200.409492] Node 0 DMA32 free:1327720kB min:36468kB low:45584kB high:54700kB active_anon:476240kB inactive_anon:740kB active_file:50896kB inactive_file:43688kB unevictable:0kB writepending:1700kB present:3129332kB managed:2644888kB mlocked:0kB kernel_stack:7168kB pagetables:4004kB bounce:0kB free_pcp:1020kB local_pcp:516kB free_cma:0kB [ 200.474004] lowmem_reserve[]: 0 0 0 0 [ 200.482709] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.541358] lowmem_reserve[]: 0 0 0 0 [ 200.552071] Node 1 Normal free:3786164kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.581476] lowmem_reserve[]: 0 0 0 0 [ 200.585603] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 200.601108] Node 0 DMA32: 12950*4kB (UME) 3221*8kB (UME) 1278*16kB (UME) 1421*32kB (UME) 302*64kB (UME) 54*128kB (M) 21*256kB (UME) 4*512kB (UM) 2*1024kB (UE) 9*2048kB (UME) 276*4096kB (M) = 1328128kB [ 200.620881] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 200.632278] Node 1 Normal: 61*4kB (UE) 350*8kB (UME) 267*16kB (UME) 59*32kB (UME) 17*64kB (UM) 7*128kB (U) 8*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3786164kB [ 200.651962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 200.660993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 200.669763] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 200.678792] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 200.687579] 23923 total pagecache pages [ 200.691877] 0 pages in swap cache [ 200.695397] Swap cache stats: add 0, delete 0, find 0/0 [ 200.700946] Free swap = 0kB [ 200.704101] Total swap = 0kB [ 200.707328] 1965979 pages RAM [ 200.711472] 0 pages HighMem/MovableOnly [ 200.715500] 333228 pages reserved [ 200.718958] 0 pages cma reserved [ 201.991032] IPVS: ftp: loaded support on port[0] = 21 [ 202.954248] chnl_net:caif_netlink_parms(): no params data found [ 202.994881] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.001420] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.008373] device bridge_slave_0 entered promiscuous mode [ 203.015765] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.022619] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.029644] device bridge_slave_1 entered promiscuous mode [ 203.049681] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 203.058978] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 203.079769] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 203.087545] team0: Port device team_slave_0 added [ 203.093474] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 203.100872] team0: Port device team_slave_1 added [ 203.106139] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 203.114532] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 203.174252] device hsr_slave_0 entered promiscuous mode [ 203.210397] device hsr_slave_1 entered promiscuous mode [ 203.250693] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 203.257730] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 203.273035] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.279502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.286179] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.292587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.325426] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 203.331846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.340842] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 203.349439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.358720] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.366768] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.377168] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 203.383895] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.393764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.403281] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.409617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.419741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.427810] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.434374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.451990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.460527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.469626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.486182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.496824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.509174] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 203.516380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.525340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.534026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.547025] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 203.557940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.940791] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 22:52:04 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000440), 0x4) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r3 = msgget(0x2, 0xc10) msgsnd(r3, &(0x7f0000000280)={0x0, "6fc28039fab098cdf9de89b4edf06945438f776dc601c98587652ea999bd4c4593deba7fc94f646d4f661c9f0c1160a1c7950c3b4b327f3a16608f70062ab339a4d4cceeecf9dad7cc6b352fbfa99cb24464b93b0e5410882b36e526e0a53f995f4df0e4"}, 0x6c, 0x800) openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x50000, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000540)) msgsnd(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a"], 0x1, 0x0) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[]], 0x1, 0x0) msgrcv(r4, &(0x7f0000000040), 0x8, 0x0, 0x0) msgsnd(r4, &(0x7f0000000300)={0x0, "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"}, 0x102, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:04 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x16, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x155, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f00000009c0)=0xfffffccd) getegid() r3 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r3, @ANYRESHEX=r3, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r4, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) fstat(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB="2c02"]) write$P9_RSTATu(r1, &(0x7f0000000580)={0x157, 0x7d, 0x1, {{0x0, 0x142, 0x9, 0x10000, {0x2, 0x4, 0x4}, 0x80400000, 0xfffffffe, 0x1, 0x100000000, 0x102, 'mem\x00\x00\x00\x00\x00\x00\a\x13', 0xa, ')]\xfdcgroup#', 0x0, '', 0x3, 'lp\x00'}, 0x0, '', r4, r6, r2}}, 0x157) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='lp\x00', 0x3) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x1}, 0x8) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, 0x0, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) getpgrp(0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x26) 22:52:04 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x40, 0x100) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x40000000000a132, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r3, 0x101, 0xc, &(0x7f0000003680), &(0x7f0000000280)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000)=0x1f, 0x4) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r6, r7, 0x0, 0x96a8) ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f0000000080)={0x4, 0x80, 0x7, 0xc}) write$capi20(0xffffffffffffffff, 0x0, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000180)) connect$vsock_dgram(r5, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:52:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x107f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001580), 0x2ab, 0x10000, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) accept4(r0, &(0x7f00000001c0)=@tipc, &(0x7f00000000c0)=0x80, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x404402, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000240)={0x1e47, {{0xa, 0x4e20, 0x62d0, @local, 0x5}}}, 0x88) sysinfo(&(0x7f0000000000)=""/22) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000100)) socket$vsock_dgram(0x28, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x03\x00', @ifru_flags}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000300)=@dstopts={0x62, 0xd, [], [@generic={0x1}, @generic={0x9, 0x5e, "a835dbaeb2d32af94c860c015a1d3f1f1026c49f5b60db45394b8515e9bdfca1bed691899b5df91aeaf95588b4c03c7fcfa48bb3837317ca9ffb5b03350fddf1460c36808f90062a1082b18be23c99f416f6176828bee3503eb01eeb4ca3"}, @jumbo={0xc2, 0x4, 0x600000}]}, 0x70) 22:52:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001006272662b0b3e780e3a0802ce6964676500000c00020008001b0001060000006275879841e9c7821d2538d41825a36ecf9754edca0ee4d33a92e2323f675013bb441c7c6e0f9fc11fbc0e9ad9f74b6fed6beeeb2858dca973caeed11478042bc821cf84e3c7947b"], 0x3}, 0x1, 0x0, 0x0, 0x2000800}, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r2 = syz_open_dev$amidi(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r3, r4, 0x0, 0x96a8) getsockname$netrom(r4, &(0x7f0000000400)={{}, [@null, @default, @rose, @default, @netrom, @rose, @default, @null]}, &(0x7f00000002c0)=0x48) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYBLOB="e83b390fad880a73fe19822262e907d3eac8315c1909f4590c80f17d0696e29953915386b4b9bdba06633429856e9fd26d4a0bac2fd9482e580601cea708fa6cc3c309e665a38304480a977e4dc2aa78bd14e935d0e377418373cb5c1d01e4b3346ed4a8e363"]) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e20, 0x200, @mcast2, 0x20}, {0xa, 0x4e22, 0xa, @ipv4={[], [], @broadcast}, 0x1}, 0x7, [0x6, 0xfffffff9, 0x8, 0x9, 0xfffff784, 0x3ff, 0x7, 0x3]}, 0x5c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xffffffffffffffa9) setreuid(r5, 0x0) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r5}) 22:52:05 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ash\x81em\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') exit_group(0x4) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/\x7fq\xdeet\x00', 0x2, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r2 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f00000002c0)=0x1) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) 22:52:05 executing program 0: syz_open_dev$loop(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x46001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000140)={0x1f, 0x800}) write$evdev(0xffffffffffffffff, 0x0, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, r5+10000000}, 0x0, 0x0) 22:52:05 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:05 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r0, r1, 0x0, 0x96a8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) prlimit64(r2, 0x0, &(0x7f0000000280)={0x9, 0x8f}, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x2) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x9af40000, @dev={0xfe, 0x80, [], 0x12}, 0x9}}}, 0x90) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xfffffffffffffd9f, 0x2, 0x1, 0x2894, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x1, 0x0) r10 = socket(0x1000000010, 0x400000400080803, 0x0) dup(r10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r11, 0x0, r11) fcntl$notify(r11, 0x402, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) dup(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r8, 0x89a0, &(0x7f00000003c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffffbfffffff, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 22:52:05 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socket$bt_cmtp(0x1f, 0x3, 0x5) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r1 = socket$inet6(0xa, 0x4, 0x85) r2 = creat(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xdfd4e7600a885198) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) sendto$llc(r2, &(0x7f0000000600)="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", 0x128, 0x4008064, &(0x7f00000004c0)={0x1a, 0x323, 0x5, 0xfc, 0x2, 0x2e, @broadcast}, 0x10) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000100)={@rand_addr, 0x0}, &(0x7f00000002c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="640004000000000000007000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="ae00020b0c000200740dcdf69b27000008000800", @ANYRES32=r5, @ANYBLOB="14000300bbf0ffff0080000002000000020000000800090001000000080006004e24000008f907853a6a8bac910e1d4b5974e3000100ac1414bb0800040007000000"], 0x64}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1f}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000003c0)={r6}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', r5}) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:05 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000000)={0x1, 0xdf0, 0x5, {}, 0x3, 0x80}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x1, &(0x7f0000000180), 0x10000000000000a2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 206.911759] audit: type=1400 audit(1570229525.486:55): avc: denied { map } for pid=8110 comm="syz-executor.3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=30439 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 22:52:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = dup(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$fou(0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000001c0)=0x4) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4000001) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e0000000000000000006100acdf4eeb3194a95220d30217a63b020000000000000066922ab9e9d64ebe5702bd33457577d2e583d6bc7d805c2d652765dacef86160113722c2ebfff39607fc7b8b04ba6049e53e0f51728726806b1745d4847a4d3c693f85008a64ed87bfdf31"], 0x6d) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000000c0)="e0", 0xffd4, 0x0, 0x0, 0x0) 22:52:05 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x9, 0x0, [], [{0x5, 0x2, 0x9, 0x2, 0x8000, 0x7}, {0x1, 0x7fff, 0x4, 0x5, 0xfffffffffffffff7, 0x5}], [[], [], [], [], [], [], [], [], []]}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x3, 0x0) r4 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000580)=""/60, &(0x7f00000005c0)=0x3c) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x44) 22:52:05 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000000)={0x1, 0xdf0, 0x5, {}, 0x3, 0x80}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x1, &(0x7f0000000180), 0x10000000000000a2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:52:05 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000280)='securytykeyring-@-se|inux{\x00') 22:52:05 executing program 1: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000400)) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000600)=@HCI_EVENT_PKT={0x4, "dd458a15298f7c2dbe89d97814324a99c59779ada57f5aeada793b011261766a0aef8edf70fdc1a0a6a0aeadb499e33cdfd11355813704a417638754bb9f68f48502f2f3a8a9b68fb65aaa3fca604bd2d903e16b2a50cc33dab9a3fa81185a4a401a6f7e50d2d870565e32f7aa2c99c843a028a3ee0e3ad14f3771ae40eaf2ee31199b0866b0bed49a6c15a63f5fb98b52dbca9eca442d749cec5f26e3ff061017"}, 0xa2) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.r=./file1\x00'/49]) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) timerfd_settime(r4, 0x0, 0x0, &(0x7f00000001c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$DRM_IOCTL_CONTROL(r6, 0x40086414, &(0x7f0000000480)={0x1, 0x3ff}) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') readv(r1, &(0x7f0000000300)=[{&(0x7f0000000100)=""/252, 0xfc}, {&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000080)=""/56, 0x38}, {&(0x7f0000000200)=""/249, 0xf9}], 0x4) 22:52:06 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = accept(0xffffffffffffffff, &(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, &(0x7f0000000000)=0x80) setsockopt$inet6_opts(r1, 0x29, 0xd, &(0x7f00000003c0)=@dstopts={0x90, 0x23, [], [@jumbo={0xc2, 0x4, 0x2}, @generic={0x2, 0x9b, "26100276de0c37568ef856767ab6240fce8182b94ed63041de68f3b5daa5bdebd1bf5e9a7b86702197f7245a7d4000d27c56d90bf45f92467c4555009aeb97127fe783922a02f65d841e1b5b42927d0dee73cdb3598808889b5cdf6ae677cbe2e05807bde5263adfdcc51d96a51dd5f087c00f4ddd5c358ef9f40800fc5cd2e9574e36a7c291616dbd2c3d2607584320dcc6df8478075e43bb9e1b"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn, @calipso={0x7, 0x38, {0xfffff1c1, 0xc, 0x80, 0x9, [0x1ff, 0x4, 0x10000, 0x3ff, 0x2, 0x0]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0x1, 0x2, [0xac, 0x8, 0x7fffffff, 0x8, 0x161]}}]}, 0x128) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x800008, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x8) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket(0x11, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) mount(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="ff5b7213f6012f66b000000000e00200ffffffff816f00000000d7e81ad4710214"], 0x21) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 22:52:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net//yz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x21ffc, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000280)=0x3, 0x4) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000240)={0x13, 0x6, 0x3}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'dummy0\x00', 0x8000}) openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) close(0xffffffffffffffff) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) [ 207.457700] overlayfs: missing 'workdir' 22:52:06 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000080)=""/109) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d0652b", 0x14, 0x6, 0x0, @ipv4={[], [], @broadcast}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 22:52:06 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000000000205000000005f616161612e00"/44], &(0x7f0000000280)=""/120, 0x2c, 0x78}, 0x20) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:06 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r2) socket$netlink(0x10, 0x3, 0x4) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x21}, 0x21) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r6, r7, 0x0, 0x96a8) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xb) splice(r0, 0x0, r2, 0x0, 0x20000000010002, 0x0) 22:52:06 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'caif0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r3, r4, 0x0, 0x96a8) write$binfmt_elf32(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/697], 0x2b9) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='\b\x7f\x00', 0x40040, 0x0) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000140)) open(&(0x7f00000000c0)='./file0\x00', 0x40c5, 0x0) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000280)="600b42e006000a0090040300001af5c97f13", 0x12, 0x400}], 0x0, 0x0) 22:52:06 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) recvmsg(r1, &(0x7f00000017c0)={&(0x7f0000000280)=@generic, 0x80, &(0x7f0000001740)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/132, 0x84}, {&(0x7f00000013c0)=""/79, 0x4f}, {&(0x7f0000001440)=""/176, 0xb0}, {&(0x7f0000001500)=""/144, 0x90}, {&(0x7f00000015c0)=""/107, 0x6b}, {&(0x7f0000001640)=""/219, 0xdb}], 0x7, &(0x7f0000000000)=""/61, 0x3d}, 0x20000020) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x6, &(0x7f0000000580)=[{&(0x7f00000000c0)="8662b0acefa4b6f6e5f0f8f4b3315bb32d", 0x11, 0x7}, {&(0x7f0000000100)="f83e08884778bd169bf1b50732f0dd84edb27e963bd4e0083644bb44d8b376303994a28c132304b36d86ade3b6b083", 0x2f, 0x5}, {&(0x7f0000000240)="d6aeafcea4c893faea94e906a731d28a4bd7f7777f9a9929c46a440b6f448ee2e47a79ae78399f02e3d616263faf16e4cb38d98fd6567efac961d841ffa1dce758c0182ae9f76e5787ddc7790b22bc138d2131d9c2eba8c19050dbbcbc7e34e2005ea7c33a5371f585c886073dd6cc054509178821876ee690138322c83adaebde0bdfcc3daeeca46c56581407cb900a6c5676b65c767996baa8863a0704ddcab6941711f418acd2eafe13c94b72bb7c6ae63ce4df48", 0xb6, 0x9}, {&(0x7f0000000300)="6ae713030e49e68a689fc2a0eed197ea17f54725f8d8d21d775da890dd5c62f486f312ae8560ba866d8741051d7fb6ac7a06fd1d4b568fdc6ba2cfe21f3683939301fcdd921c2d8df91b30bcef4c873f8c2e20aa6e28847ecaa4e1ea5c1417", 0x5f, 0x4}, {&(0x7f0000000380)="12945928590f9897a9563b8aa25c55edae84738acafc7a48c0ff922b0bedf2d38c1153cfbe148fa6d405cc4e1b64de060b5315424bfc7c41f77b60b1280cd5e7edbd702a6ece9b98a9ce76a14ba6076cd00caac5e19f606f7de0816f0de9a63ad6618edaae9fa8ef6565bbef694e3aaa77328bbf4be9fea3c3388495fc57eefcadbf26ee7ee3bffcc1ad367eda557cc61bc48ecfd6431c4c9f4fa084210170705ee55137693654ecf5ccd3e5cb5dc4c7f7bdb0953ca4ad91cff68d665bd1846aa6f433", 0xc3, 0x7ff}, {&(0x7f0000000480)="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", 0xfffffffffffffedf, 0xb87}], 0x400000, &(0x7f0000000640)=ANY=[@ANYBLOB="6469736361ceab07175587", @ANYRESHEX=0x0, @ANYBLOB=',resizequota,uid<\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',smackfstransmute=vmnet1proc*proceth1,\x00']) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r2, r3, 0x0, 0x96a8) lstat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r5, @ANYRESHEX=r5, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r6, 0x0) getgroups(0x5, &(0x7f0000000d00)=[0xee01, 0xee00, 0x0, 0xee01, 0x0]) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000e00)='./file0/../file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000a40)='hfsplus\x00', &(0x7f0000000a80)='.\x00', 0x101, 0x2, &(0x7f0000000c00)=[{&(0x7f0000000ac0)="c3b44cb735afc02a7c194c39bad6982d8583a5dd720ac554bda1aa02aefe73ad53a499f9b5fd94d639c3ef5c3248cdb9760efc46c278e554b16ec99ec34b0fa919f223ee55464595cd673742ee99896ae4cd1daa075dac176395756bb08945b3e0b040d3ebf4b34667de2e8f744b21dbdf9c1d1c76838fb465878da2d4962e93adf28192b9226ee2c02893c57b43ad19943768d3fa759cc474608895", 0x9c, 0x9}, {&(0x7f0000000b80)="82371d9ac4364280b0d16771f69486f99d925041b8838115d8613f2a10011465f4036a6c72135cefe2c63b0283361bf971c21bfdb5637c32bb7015ebb11fc7fc9d9a5195efc02c4e5195e336cb6bbb2bc3dbd225b18ce2437339", 0x5a, 0xffffffff}], 0x1940010, &(0x7f0000000ec0)={[{@type={'type', 0x3d, "7aa6e591"}}, {@gid={'gid', 0x3d, r4}}, {@barrier='barrier'}, {@part={'part', 0x3d, 0x80000001}}, {@uid={'uid', 0x3d, r6}}, {@gid={'gid', 0x3d, r7}}, {@nodecompose='nodecompose'}, {@gid={'gid', 0x3d, r8}}, {@gid={'gid', 0x3d, r9}}], [{@seclabel='seclabel'}, {@smackfsroot={'smackfsroot'}}, {@fsmagic={'fsmagic'}}, {@smackfshat={'smackfshat', 0x3d, '.system[eth0,em0vboxnet1mime_typeGPL/(*\'}'}}, {@appraise_type='appraise_type=imasig'}]}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) mount$9p_xen(&(0x7f0000000040)='+trusted^!\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,access=user,access=user,mmap,debug=0x0000000000000007,cache=loose,uid=', @ANYRESDEC=r10, @ANYBLOB=',smackfsQoot={loem1ppp1,fsname=,obj_role=uid<,appraise_type=imasig,mask=^MAY_APPEND,smackfstransmute=resize,euid<', @ANYRESDEC=r11, @ANYBLOB=',obj_role=smackfstransmute,\x00']) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000a00)=0x7) fcntl$dupfd(r0, 0x605, 0xffffffffffffffff) [ 207.635885] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=8171 comm=syz-executor.5 [ 207.672393] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 207.688215] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=8171 comm=syz-executor.5 22:52:06 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492565, 0x0) chdir(&(0x7f0000000200)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x3, 0x3) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x1c1) write$P9_RRENAMEAT(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, 0x0, 0x0) r9 = request_key(&(0x7f0000000340)='big_key\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='!*system\x00', 0xfffffffffffffffb) r10 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r10, r10}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000400)='.dead\x00', &(0x7f0000000440)=@keyring={'key_or_keyring:', r10}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0400002400070500"/20, @ANYRES32=0x0, @ANYBLOB="00000000ffffffff000000000800010063627100300402000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800010025030000000000000000000000000000000000001000050022000000000000007f000000"], 0x45c}}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 22:52:06 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5}, 0x2) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 207.753609] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=8171 comm=syz-executor.5 [ 207.780453] minix_free_inode: bit 1 already cleared [ 207.833197] device nr0 entered promiscuous mode [ 207.851307] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=8171 comm=syz-executor.5 22:52:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000580)={0x8, "c0c814a55b6300d28afc61ac7dd1ffb869b761e8e53ee36e4be89e9fea175523e4468dec44bf8b5473c7a5062b4ede67dcb24cb9484ccfff2b3a70befc56e8ab2eee3483f5bf78c16beac035b700eb84e2216f268d02b717d2046c273814475b412437f7dc08a13a55d3c02132999dfd9fe80b750eff4d7c1da975b3835602728ae09e72527fcee19377e29c6c19e1ccce0f75e0e54001e3e83e473fa3d37eca8be1b3de565571e0e84f310c11fa8616068113b038aaa5c69967699fc2aa41c6f26fc22cf68e3577242c9b4ca20fab9de5885e0648fbd7af089b05f38f152d2f8144461608733c567b6dc5d2a07022c3764565c85abcfd99dd7a85e58939278235d50e8b321be7dbaa5141e097c28364fad2f713d666ca94f4e429687fcabb72aceeaf8abe5b506d98dc393b6e97492d785ead0ca2953f92c4d2b2c9f616e3d98b36be55a923fc5892413f7a3b615cec89b52e0ecdcee0aa5af72bcbb91b4bade7435dd8b529feaf13f8b48fcaca5952235d2e909f8831d8ca05a0daa3f6c581f388e0c1879b41fe63ef3d122bd0c5acd4fb07b96797918791075ae7383bb1bbdea574b31301ff37ecc45671ee2e7fc55bf6244025d1fd82dca56a42a23aa826a0b1e102bd87893ddc05649304eb1866c796e46e0d57f552bd572891ef892918bb2e7f2c6bcf68f388ea0c50f48c06de1b46b1434cdf25ca1288ebabe2a33d1c6effb77f91ef75471e93952caeda8ac2b2677e46d62b8366922d093832bccb949e177b4417864812d22972d81d89158288b5318d017329d4e8f66273abf74c434f318ebf32c7629342a85336387231b1e579d57cff0b125bef9dddf0fc33f71cb59d5a8972cda06ba6bba4a89cb8d3b465492c431698984998b2979ea61fed3d99b049724f2bdda5a0700ccb28825da1343f41290e569a6d38d4ae3968147cf39b097efd78e058fc71523c12e724bf93dc4ecc02b5cb18d13b59ec8f85368ac1ea93ed0149c60c53569dc69cdb3f37470eab26ef010b03a7e651b9e8e9065da347660836eddb3988c9a0f394aad055f727310f646d6cb35131d02aaf24735792bfce250798bebf0d1a4495fca568b9449e81afef2937b50faf873257d7efa07d31759474d50ca2a7922e79ab47dd59b11dfd1ec43fef3551aed81d01ee4ab997c6cecc39013dcaa442aec803e4cebbc288b4f9e87b30613f0ec88ddc6f60f56787f4040897e6e6bdac317d74b27f97f2efadb031f03c61954fd0232373582b7fa315d3eb9f67053126d2ed0636f04d669c47bdeb078fbda177533902e20b5ce9d8f395ea4c0aaf2cae774fe99bc40105a9ca184bcb598ab2f49c1df62d32d1a6d73a26812cb47a2ccaf0e9b759df89ad1e18238d897b9fd658f6786a92a0c12bd0ee6dad8a430a67962363e5b9afb3329e4f1f6fcd7e63cb8f24872bcf5b8c349d9ce423666ca39f16884219dea338b388e40f4ad996419cb3858637364d8e5af67f846d77b2749115131a3642ef56681315e4a2cbca5e60febabf693570f515e09c2a8994a8e2be3cba28118ef429d4de781118182607dd2c2d5aaba621ea29c140338bd8f1787fd2a3f43bb7fa22a8ce053adb331a4c78eab569af317e14360a6bf1c8b7394f34bfc1a941ac88dab334d5a2d45fc83bee28884698fd82339c972a06efb369220049ca89727513bd4262ad6f94f55f659ec98b684b1d92e1b6a303548a196cc5316e9845baaf01e737ef047d3d1ac4fe13de618e8fd6471c225e688b73b866213f4765c1a1ecf041f66a11177b0425b0423c455dccfa35a34f3b1c4c9850267bd41dcc366f4f8fef6982699e9aee7f3edff90217c84f6865234676e65911e5e99739792161766e959d061d6e86797b595ae3cffc043da0929dce1b4bd27e04532800f14f69398a681d46f00197f547fa138e676a4c84e586e9a2037faad7d7342221c229ff13606688ab70305dc28d01270604fbcb2b5777541e637a10e7d6c2dfa76461b18c8b303234282f31b7ed8afd0cdcc3978c6520a182000ea312296c7d9df08c2a67b944bc519113822014a831c8d6a7f8d26a7a443666b6077bdc1c11cf47001bcbb484d163543445c77a02140191bbb813da818b4dc3ef1ca420f624e5cb67c48024aeb8691b549202750899938067a3ad49da19e9fffc6486b3525fba8b2ff991fb3b4c1a536818f2dad96f713ac264a22136c6a3a9eacb4f69ab08cfe2b971a7d916833c6a0370d4b0bc428db2e4b4013899668b73caf9c983e2f07e46b4b5b4f0d231edee8b1951e1d0e34c881d1fc5c6be05b92b13680398e7109bd18048f0bd980fceb24e59411873e7a8a7f95f4da2ba5c082fdda710361e163a213a3dbb82c08a69020545da4636c09a67cd962182a011cf5eb1c3d999abc7b834ee518bb53afe19941927ca190699abf79c334c52e206fc851deb7398947ad5bd125ef3f51349497142e921c85506c739f6319ae0eb8e3c551ceb7e16afc2d6aad36841ed8eb560ef984ee5e00f1ead2c646546b3c145e3700b07fc257551641cf3dcb76a8b3cc75994f2c3eb521cea22d64c8b72b2de506fde8185b70b4707b7f571668a5925ca21e605904d7c896a5d7290b9c4fc75ecc7ddbbd7f6f003a74f53d1a5432e0377a3efce1e7ac61e36dc13aeea57400d4d3986db3fccb6edaf83f86daeb42f416f58c502e74178e013b399d0b155e0df86b40b5f3f2ab0ad61c90870cee340c07977b55622699101e5372677dd4e208fa6b5d4834a2d6f37b2ead107218aa0e702d1f6a60bd4ad3a2e22807237129fdc02993ef1fffe3c285bd4f7b093b2da8d772ce2df7874bf9b7fd0893eb66a4931acc38129bfe4a8fc6b28ea83bcca1220b66c86d4d90914bb9e9a425fce618f11b66f93aa78515eac0f3956cb1e8b6f12d7f6f22c1ca5563e280b15c64732aec2a37d6010cee0fd2263ea3ea2011043153284b4a5fc87cc0dd8c36f084ce715a6e9ba3e8b2586726255d122f2b5677d6590405ae031df8f83840ef3011a7f5d18037407758270d980aa65d5a4aa26a35a61b65178b6183b282771e89a8fe47bd3ea5a23146b924a47c3cc2540a9c8d91d4a8924e010fb6d3e60457e0aa86749cc3444707fda055a0f489aecda68af7f0d7d31cf25641a10bcc0d00996cddf9059121639fa3ff2e5490bae6b702fcf226d8e50f27f0973e5e4cf543445524d0fe3bd55d3f215978bfabcba0d44c076f5b333b2095c70f6a5426338bf0c065ddce27f6730606d84d1ccef8cebcd15085fa8a5d0975dc47eeb09a4ab6da21d01916c97f4e266c4b01f2bfb3b6a08bb5a7cf834e56782d824e7c55b591cd883ed9e806a4f7033bbab49a2b8ab2cb0f6da9d76968208236b35a51f8eba3769a676ad60d69c475706a630f3a078ebaa6ba5bc25719867cb61d48cc3a381b261165c04f3c93f37d72fc15f43df1de34e24e80a46f5d15fb362e71cb4a5365dde04a53dc5e42745fbd601ff148db416244dd76ac16f24138ef9a02491eb5b48d731a8bdcd46040d0ff11a07c040b83db84bfd21ffb1d818203cb7d3f8fca47f1dc510afa8219ab031aaba2147aed7c50228930e895a72abf55ca6997131e231ea92e0059b680735548adf2d572c3540e096a644deb3750e3b341bbeffee70ff22e0b4e56142e4c1965c01a646dd9b5b0055f88f08987ad45adb844b9ffc84792073048c28bcb60f2666802052ee45dcd9a2950d55ecf0234a3dcf67e83cfa0bfb1285eb54e6292d8075c9e1b459e48556f416898557c9c864fc5de459feb53e33dd1a6860a2d1a836ab5ff6efaee123b3715a7137787ee4345efbce38074e262f363a8ff400345c8539d44a7286c7291246810bce063f0877db6585842380b530a4aaef6e36779a95fed220cef6c1fff2fdd5031f83987dc3282d432f322852cc9dc6d00c59d5ed83b386ff97c521e528e59f2df932467ac02d17f8818c2de26d69725f42cecaf186fab7b6e10b1ebd9a9a12ed83cd382d9a6f9a9bed2736cb0ec0260057f5ec704d2e1a64caad59e02ff2022174b23564cb0942e6769b12e0ae4d65dc4c5e6b6ceaf2667e085909c93a9768b7bfdac612801c0bc3848bad51e2367f788cbd1c5091ce0e9c567528c72003712e91247d87f1ff60d3865fc687a35886822079392f8d151b89e09469bef98e59139c460a53805a93245148cbb9a6a010dadc87e9b1a0e0a89e87e433ff1c0ad4b125760858c8badff4d82cbd31cf88f3e2e16a4e960e1e0b5825fc0f2b21d660cf60069d43fb6a8a96c44fa922164f02c9cd5ebb6fad848871224d157777b5a70dc6deb988506bd03aa4ce2200e9ce23641221784250c22d2c8635a3512f45d433cf66e158eb261f48a23d54f5ef4358df3487da471eb5775bdba565ee170be126b2300d0dad050212606f2d77a63fa2ab430e62670e852b89944e611509415bee36bf0961c8918bd8b0eb8af45b1a9d0420c7101a9c5f4a63efb9cc8de7897b5e2b02cb5885ad8d0d8ac7754ba8d4e9d37175e614e3f3a6a7b122bbc6dd9ce78f1b9a4e940a1160bb85650d8932fe1a82d0525630ba017be5129625a45c3cae66c7cdaa33ee704791db81ef2e11a2f528974fa388cd929c934dbdb21425e6117839ab33b2926b036457db3a43083c3ec17231aed4ee5b607a45a5735c9470c03a424b43efcea953c078717344aeb1449c0dfa3a3ec224b542c16cf735466bdaf26b522aef1db547b14f07ebd4f5da34426a46007757be47ed3f643c47f2c4467762cd049d6f4cf8a78d04f8318bdedcee80871e91c0330499d88254555c456d9bde8a892394267eac15c230cf7e7ba19ebc01b1905c80476de3cea8258f6d0820d159f4aa8a37fb378b2685da4e0e89d253187219869f1157bbe4a8a43eabf65e86a6d9b21e25d91c43c3036914427833ed87073886719069148e2e47219bb5da5d9664d64dc5c4ff71c0e808dadbb53a23e41e3c02fd0c9e0704490f3283d1864d15d795882e6522f31445556cab6832f273dac0c7aef4e3f8c09a34d1624fdb087d852f2e827fb2c3105f1afda54b9dc12cfde3cf7747daa5ac70904e82636a13155303f9a1198d6e7f9dc7be394ebc5db9e8380e290e6cae5f320caa56aa94490789fce2e2540b3de8865396f58e14d61d3cb122f7bd1af5a27c6fe733eba3cc39106efc906ea967fb833e2480aa80bd56ccd9e5c25304e2b8135f1453af70059e599cb67bc8eaaa38c39768e74d3da8aba0135f0192d7ddf0149ce62f353b0360251f1f88b272c6e85b4ee4e0563a6de80de83749af6e6aa4d80cab7031aff3f7e8d0c9114940549f828a62be9fd6a16db001369728b4b93d4ecf91563ae03def3ca4e9900a97657c4ff1e41c5742fb3329ba882ed61645aedb22f2543b83cd4007e5d228697a48064acc32ece41f2d5ead3f31a9689249e8b4bb57ac0b136b6c60ec531708235b94db823344aafbb9b79e21959635664b2193c3add0b28767906b7ba4118e6548e9a23b49e9181dc6f7dc7857425c9ab1b1451bc4572fd060190d0b5a76b8368b68e72a212bd0f89d0778d293b1d32f155f30c9aafe7215d2e746ea8f2c73a30bcd8c093a489519b60616b15afe69074ee77fb65caf5faf0aad49106057a91fdcd622a07ac21eb5c221f2e65323228af41b3eb894517c34c4f60ba20fb6f6c4309a7357884c0eeeb0a4874550107f2d0ffdc412f86bdf712f96183b3932cfb4da3f179cde1a288df9af09c243fae8c67b0d208d9cdb7adde8d5e548e0624b19da4818ef656b88280a", 0x1000}, 0x10000005c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$P9_RLCREATE(r1, 0x0, 0x20) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fadvise64(r1, 0xfffffffffffffffc, 0x0, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000001091902efff07000000068100025b0509000200010100ff3fff58", 0x1f}], 0x1) 22:52:06 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='qnx4\x00', 0x800, &(0x7f0000000140)='overlay\x00') mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) 22:52:06 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r3, r4, 0x0, 0x96a8) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 207.875196] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=8171 comm=syz-executor.5 [ 207.891649] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=8171 comm=syz-executor.5 [ 207.915943] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=8171 comm=syz-executor.5 [ 207.929133] devpts: called with bogus options [ 207.975499] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=8171 comm=syz-executor.5 [ 208.042376] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=8171 comm=syz-executor.5 [ 208.111605] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=8171 comm=syz-executor.5 22:52:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0x0, 0x80000000000005f, 0x0, 0x0, [{}]}) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x88, @dev={0xac, 0x14, 0x14, 0x16}, 0x4e23, 0x4, 'lc\x00', 0x9bc3ccab19ca3fdc, 0x6, 0x32}, 0x2c) 22:52:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r1 = semget(0x1, 0x4, 0x0) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f00000000c0)=""/200) 22:52:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) mremap(&(0x7f0000282000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000268000/0x2000)=nil) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d000000efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0x2fdf442dff3bb63, 0x401c005, 0x0, 0xffffffffffffff36) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = eventfd(0x0) fstatfs(r1, &(0x7f0000000580)=""/4096) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000540)='2', 0x1b}], 0x2000000000000020) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r2, &(0x7f00000000c0), 0x2000000000000246) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x101000, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x2d7e, @dev={0xfe, 0x80, [], 0x1f}, 0x800}, @in6={0xa, 0x4e24, 0x8, @ipv4={[], [], @local}, 0x3}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x4e20, @rand_addr=0x1}, @in6={0xa, 0x4e23, 0x3, @ipv4={[], [], @loopback}, 0x8}], 0x74) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket(0x9, 0x1, 0xda) 22:52:06 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f00006fe000/0x4000)=nil, 0x4000, 0x4, 0x863f7138a353c773, r1, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:06 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'ip6erspan0\x00', {0x2, 0x4e24, @remote}}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = dup2(r0, r1) read$usbmon(r2, &(0x7f0000000100)=""/225, 0xe1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{@nodiscard='nodiscard'}], [{@appraise_type='appraise_type=imasig'}]}) 22:52:06 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r3, r4, 0x0, 0x96a8) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000280)=0xfffffe18, 0x4) sendfile(r1, r2, 0x0, 0x96a8) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)={0xe, 0x2, 0x2}) 22:52:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000025c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}], @gre_common_policy=[@IFLA_GRE_OFLAGS={0x8}]]}}}]}, 0x40}}, 0x0) [ 208.461395] gfs2: invalid mount option: appraise_type=imasig [ 208.509510] gfs2: can't parse mount arguments 22:52:07 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x120000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0xfa0, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40002}, 0x10) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:07 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ptrace$setregs(0xd, r2, 0xff, &(0x7f0000000080)="6957ccc562fda662e06ae9a1") clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) 22:52:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0xa0, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}, @IFLA_GROUP={0x8}]}, 0xa0}}, 0x0) 22:52:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000580)={0x8, "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", 0x1000}, 0x10000005c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$P9_RLCREATE(r1, 0x0, 0x20) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fadvise64(r1, 0xfffffffffffffffc, 0x0, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000001091902efff07000000068100025b0509000200010100ff3fff58", 0x1f}], 0x1) 22:52:07 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r6 = fcntl$dupfd(r3, 0x203, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000044) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000280)=""/27) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x5, &(0x7f00000005c0)={0x0, 0x3e, 0x4, @thr={&(0x7f0000000500)="580a1db525b5eef806", &(0x7f0000000540)="6f67741dbc401e6ede2e4e0baa358ca67b44e075b00372c3a72b6894d0d1df87724e788cc4e3d4fe8e41bae7ac7fbb0f91ca0e2487328ac7f0af2195bf5b910193ee2f67356b6595bc68fbca14151423db570b49a0a7914c3f4903616e9d30cb9ed04d4f9e129963a54680f74e11cbdf459dc0b6191a433fbb"}}, &(0x7f0000000600)=0x0) timer_gettime(r7, &(0x7f0000000640)) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) read$rfkill(r2, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r8, r9, 0x0, 0x96a8) write$FUSE_STATFS(r9, &(0x7f0000000680)={0x60, 0x0, 0x6, {{0xfffffffffffffffb, 0xba, 0x7, 0xa86, 0x6, 0x9, 0x0, 0x7}}}, 0x60) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$key(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r11, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4002400}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:07 executing program 5: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x60) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r3, r4, 0x0, 0x96a8) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=r3], 0xfea4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) finit_module(r5, &(0x7f0000000040)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES16=0x0], 0x68) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000080)={r11, 0xfffc}, &(0x7f0000000280)=0x8) ioctl$PIO_UNIMAP(r10, 0x4b67, &(0x7f0000000480)={0x7, &(0x7f0000000440)=[{0x7ff, 0xff}, {0x7, 0x1}, {0x1, 0x3}, {0x7f, 0xb38}, {0x4, 0x3}, {0x0, 0x5}, {0x4, 0x1}]}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r12, 0x0, 0x2e051519251ea750}, 0xc) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="9b2bc74f3f9ee4ae7e4f1557b360655963ad835e9a42cdddc91aafd7252566cb44779a08b0273a7add15fb013a0b5000edb1812f961d76f44d7ede0cc0b45d137f14d4c13989b8e9493907fc17ab42bce35bc4a76c4986aa01d58e4c56112a4bf3f8c38ce27c94e02f3164c03236"], 0x1a000) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="e78f7f002e589403f950fe17fbd3a06c9879e9874ae7aa3f62f4a338d739bcf4900d4c111856ecccbf5f30922563618729cdac564a5f7bf9c75c925453cc0d68f2525a0e5854582c594fa097a3679cb77d44d06415b8d9cf2ccd128c2bdfcd00b1df60dfb380afca878ddb8b96b032fcb9b5ece6c06bf47a135b01b5fdc9a3bc5b57d5f2783029ac9434f595342dd6698e0e66bd55b61b2242e708f7661bbad0074da6f5a6a4eebaff89d677dc92bdf07ecfa537852729c19231ed1539a3863955244893a47d23dcef3ff1358b75c203277cc60a79563f68a382521cd487d2e95e46510d675a28a31150d3bf4f2fa6db"], 0x1) [ 208.817472] ptrace attach of "/root/syz-executor.0"[8057] was attempted by "\x09Ÿ ÷ 0 p €  ÿ Àÿ ðÿ ÿÿÿÿ iWÌÅbý¦bàjé¡   @ ="[8258] 22:52:07 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x15e}}, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xa0c8) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 208.927036] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:52:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0xa0, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}, @IFLA_GROUP={0x8}]}, 0xa0}}, 0x0) 22:52:07 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000300)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r3, r4, 0x0, 0x96a8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000400), &(0x7f00000003c0)=0xfffffffffffffdba) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 209.155092] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:52:07 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r6 = fcntl$dupfd(r3, 0x203, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000044) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000280)=""/27) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x5, &(0x7f00000005c0)={0x0, 0x3e, 0x4, @thr={&(0x7f0000000500)="580a1db525b5eef806", &(0x7f0000000540)="6f67741dbc401e6ede2e4e0baa358ca67b44e075b00372c3a72b6894d0d1df87724e788cc4e3d4fe8e41bae7ac7fbb0f91ca0e2487328ac7f0af2195bf5b910193ee2f67356b6595bc68fbca14151423db570b49a0a7914c3f4903616e9d30cb9ed04d4f9e129963a54680f74e11cbdf459dc0b6191a433fbb"}}, &(0x7f0000000600)=0x0) timer_gettime(r7, &(0x7f0000000640)) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) read$rfkill(r2, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r8, r9, 0x0, 0x96a8) write$FUSE_STATFS(r9, &(0x7f0000000680)={0x60, 0x0, 0x6, {{0xfffffffffffffffb, 0xba, 0x7, 0xa86, 0x6, 0x9, 0x0, 0x7}}}, 0x60) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$key(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r11, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4002400}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:07 executing program 4: syz_mount_image$hfs(&(0x7f0000001bc0)='hfs\x00', &(0x7f0000001c00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)={[{@quiet='quiet'}, {@file_umask={'file_umask'}}]}) 22:52:07 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000380)=""/135) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r3, r4, 0x0, 0x96a8) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r5, r6, 0x0, 0x96a8) r7 = fcntl$dupfd(r3, 0x406, r5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r8, r9, 0x0, 0x96a8) ioctl$EVIOCGPROP(r9, 0x80404509, &(0x7f0000000280)=""/191) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:07 executing program 0: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cr4], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0xfffffdb0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x18062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 22:52:08 executing program 3: perf_event_open(&(0x7f0000001d00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x4000) socketpair$unix(0x1, 0x2000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x2000089a2, &(0x7f0000000000)={'bridge0\x00\x00\f4\xbd\x19\n\x00', @ifru_addrs=@nl=@proc}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090069000007a2e407edab0080581000000046008107a277001419000a0010000000000003f5000000000000ef38bf461e59d7", 0x39}], 0x1) 22:52:08 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r6 = fcntl$dupfd(r3, 0x203, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000044) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000280)=""/27) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x5, &(0x7f00000005c0)={0x0, 0x3e, 0x4, @thr={&(0x7f0000000500)="580a1db525b5eef806", &(0x7f0000000540)="6f67741dbc401e6ede2e4e0baa358ca67b44e075b00372c3a72b6894d0d1df87724e788cc4e3d4fe8e41bae7ac7fbb0f91ca0e2487328ac7f0af2195bf5b910193ee2f67356b6595bc68fbca14151423db570b49a0a7914c3f4903616e9d30cb9ed04d4f9e129963a54680f74e11cbdf459dc0b6191a433fbb"}}, &(0x7f0000000600)=0x0) timer_gettime(r7, &(0x7f0000000640)) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) read$rfkill(r2, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r8, r9, 0x0, 0x96a8) write$FUSE_STATFS(r9, &(0x7f0000000680)={0x60, 0x0, 0x6, {{0xfffffffffffffffb, 0xba, 0x7, 0xa86, 0x6, 0x9, 0x0, 0x7}}}, 0x60) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$key(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r11, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4002400}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 209.482420] hfs: can't find a HFS filesystem on dev loop4 [ 209.563736] bridge0: port 3(team0) entered blocking state [ 209.581545] hfs: can't find a HFS filesystem on dev loop4 [ 209.591583] bridge0: port 3(team0) entered disabled state [ 209.612633] device team0 entered promiscuous mode [ 209.626334] device team_slave_0 entered promiscuous mode [ 209.638779] device team_slave_1 entered promiscuous mode [ 209.649334] bridge0: port 3(team0) entered blocking state [ 209.655127] bridge0: port 3(team0) entered forwarding state [ 209.672146] device team0 left promiscuous mode [ 209.677024] device team_slave_0 left promiscuous mode [ 209.702098] device team_slave_1 left promiscuous mode [ 209.756222] bridge0: port 3(team0) entered disabled state [ 209.813523] team0: Cannot enslave team device to itself 22:52:08 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000240)=""/141) syz_open_dev$vcsa(0x0, 0x0, 0x0) 22:52:08 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfff, 0x39d0, 0x80000000, 0x9, 0x2000000000000004, 0x8001, 0xfff, 0x9, 0x100000000, 0x10000, 0xffffffffffff8b21, 0x80000000000469, 0x0, 0x3, 0x3, 0x5], 0x10000, 0x10000}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='c\x00\x92D\xff\xf6\xcet\xee') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087707, &(0x7f00000002c0)='/dev/ashmem\x00') socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r5, r6, 0x0, 0x96a8) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000080)) 22:52:08 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r6 = fcntl$dupfd(r3, 0x203, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000044) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000280)=""/27) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x5, &(0x7f00000005c0)={0x0, 0x3e, 0x4, @thr={&(0x7f0000000500)="580a1db525b5eef806", &(0x7f0000000540)="6f67741dbc401e6ede2e4e0baa358ca67b44e075b00372c3a72b6894d0d1df87724e788cc4e3d4fe8e41bae7ac7fbb0f91ca0e2487328ac7f0af2195bf5b910193ee2f67356b6595bc68fbca14151423db570b49a0a7914c3f4903616e9d30cb9ed04d4f9e129963a54680f74e11cbdf459dc0b6191a433fbb"}}, &(0x7f0000000600)=0x0) timer_gettime(r7, &(0x7f0000000640)) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) read$rfkill(r2, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r8, r9, 0x0, 0x96a8) write$FUSE_STATFS(r9, &(0x7f0000000680)={0x60, 0x0, 0x6, {{0xfffffffffffffffb, 0xba, 0x7, 0xa86, 0x6, 0x9, 0x0, 0x7}}}, 0x60) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$key(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r11, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4002400}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:08 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="62c5ee9c"], 0x4) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 209.920344] bridge0: port 3(team0) entered blocking state [ 209.926020] bridge0: port 3(team0) entered disabled state [ 209.932577] device team0 entered promiscuous mode [ 209.937448] device team_slave_0 entered promiscuous mode 22:52:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setpriority(0x0, 0x0, 0x81) [ 210.018505] device team_slave_1 entered promiscuous mode [ 210.053865] bridge0: port 3(team0) entered blocking state [ 210.059508] bridge0: port 3(team0) entered forwarding state [ 210.119186] device team0 left promiscuous mode [ 210.124936] device team_slave_0 left promiscuous mode [ 210.141096] device team_slave_1 left promiscuous mode [ 210.160559] bridge0: port 3(team0) entered disabled state 22:52:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) [ 210.214415] team0: Cannot enslave team device to itself 22:52:08 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x2000) write$P9_RLOCK(r0, &(0x7f0000000280)={0x8, 0x35, 0x2, 0x5}, 0x8) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:08 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4d, 0x0, 0x0) 22:52:08 executing program 3: perf_event_open(&(0x7f0000001d00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x4000) socketpair$unix(0x1, 0x2000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x2000089a2, &(0x7f0000000000)={'bridge0\x00\x00\f4\xbd\x19\n\x00', @ifru_addrs=@nl=@proc}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090069000007a2e407edab0080581000000046008107a277001419000a0010000000000003f5000000000000ef38bf461e59d7", 0x39}], 0x1) 22:52:08 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x8200}]) 22:52:08 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newaddr={0x18, 0x14, 0xd0b}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x3ded5adb) splice(r0, 0x0, r2, 0x0, 0x20000001100a, 0x0) 22:52:08 executing program 0: fchdir(0xffffffffffffffff) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd, 0x64}}) 22:52:09 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x300081, 0x0) write$eventfd(r1, &(0x7f00000002c0), 0x8) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000280)=0x2) 22:52:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd}}) [ 210.452688] bridge0: port 3(team0) entered blocking state [ 210.458952] bridge0: port 3(team0) entered disabled state [ 210.490645] device team0 entered promiscuous mode 22:52:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd, 0x64}}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) 22:52:09 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x61, [], 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000300)=""/97}, &(0x7f0000000000)=0x78) [ 210.506829] device team_slave_0 entered promiscuous mode [ 210.523903] device team_slave_1 entered promiscuous mode [ 210.537899] bridge0: port 3(team0) entered blocking state [ 210.543896] bridge0: port 3(team0) entered forwarding state 22:52:09 executing program 4: 22:52:09 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8afafc401f6a72bf90cba5701c0f05f6b7ae11ff4b92d979184dfab9ce8c9352ca52edb5b8e16385579f2b142c3c46606f", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:52:09 executing program 1: [ 210.591127] device team0 left promiscuous mode [ 210.596164] device team_slave_0 left promiscuous mode [ 210.609358] device team_slave_1 left promiscuous mode [ 210.623094] bridge0: port 3(team0) entered disabled state 22:52:09 executing program 1: [ 210.681200] team0: Cannot enslave team device to itself 22:52:09 executing program 3: 22:52:09 executing program 4: [ 210.723283] ptrace attach of "/root/syz-executor.0"[8384] was attempted by "/root/syz-executor.0"[8387] 22:52:09 executing program 5: 22:52:09 executing program 1: 22:52:09 executing program 0: 22:52:09 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)=0x3a2) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:09 executing program 3: 22:52:09 executing program 4: 22:52:09 executing program 5: 22:52:09 executing program 0: 22:52:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000300)="585ccbc4ed83b836c1a64749b66147f9cb451c91690000000042e3d75228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb748c4ec93c2db8eae321c7ccda650bd6a6129c2ee45cc9b3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcf8a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000"/192, 0xc0, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={'s\x99z', 0x1}, &(0x7f00000001c0)='\x00', 0x1, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)='\b', 0x1, r3) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r4}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000400)={&(0x7f0000000580)={'sm3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}) syz_open_dev$loop(0x0, 0x0, 0x0) 22:52:09 executing program 4: 22:52:09 executing program 3: 22:52:09 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x101000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0xffffffff, 0x7f, 0x7, 0x7, 0x101}, 0x14) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000340)=0x9a) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f0000000280)={0x6, 0x81, [{0x1ff, 0x0, 0x10000}, {0x8, 0x0, 0x2195}, {0x1, 0x0, 0x20}, {0x0, 0x0, 0x3}, {}, {0x2, 0x0, 0x5}]}) 22:52:09 executing program 3: 22:52:09 executing program 5: 22:52:10 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r1 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="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", 0x1000, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000012c0)={r1, 0x93, 0x3e}, 0x0, &(0x7f0000001300)="1f0dfc11d0c0ee814698a100fb53786691b14176d05ca8f4d919de163be030ececac8081a796bdfd8efd62903e85cc857ac7413eba89c6c8edd60b652b03cfe7bc687a265226c9cb7378f195e8e64d0d90b26257673993d63440bb3a72fd121ad8bb2f770a2dd1f45f27e38c80ec06aa6447330827683a0ff128eb4d232280e9ec30a86380a54b51f390d774ecffc5750e3c22", &(0x7f00000013c0)=""/62) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:10 executing program 4: 22:52:10 executing program 0: 22:52:10 executing program 5: 22:52:10 executing program 3: 22:52:10 executing program 4: [ 211.560859] could not allocate digest TFM handle sm3 22:52:10 executing program 1: 22:52:10 executing program 0: 22:52:10 executing program 5: 22:52:10 executing program 3: 22:52:10 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r5, r6, 0x0, 0x96a8) ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f0000000380)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x7, 0x80, 0x4, 0x1, 0x1, 0x3, 0x81, 0x6, 0x4, 0x0, 0x81, 0x1f, 0x8, 0x81, 0x20, 0x5}}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:10 executing program 4: 22:52:10 executing program 0: [ 211.634508] could not allocate digest TFM handle sm3 22:52:10 executing program 5: 22:52:10 executing program 4: 22:52:10 executing program 1: 22:52:10 executing program 3: 22:52:10 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) fcntl$setsig(r2, 0xa, 0x1b) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:10 executing program 0: 22:52:10 executing program 5: 22:52:10 executing program 4: 22:52:10 executing program 1: 22:52:10 executing program 3: 22:52:10 executing program 0: 22:52:10 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0x6, 0x4) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:10 executing program 4: 22:52:10 executing program 5: 22:52:10 executing program 1: 22:52:10 executing program 3: 22:52:10 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$vhci(r1, &(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, "96ccf6458e95b2f8a0049b604f1a7cfa8b34279d69694004364deaa261125b94d93988822a920b91ee91334689e7d6ba8e53f1d970f4f657398bdbbaed28951b2c808e42bc2a390575ff1f7356a753b289f1fbdfdfcfd761"}, 0x59) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:10 executing program 4: 22:52:10 executing program 3: 22:52:10 executing program 5: 22:52:10 executing program 0: 22:52:10 executing program 1: 22:52:10 executing program 5: 22:52:10 executing program 3: 22:52:10 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x0) poll(&(0x7f0000000280), 0x0, 0x8) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:10 executing program 4: 22:52:10 executing program 1: 22:52:10 executing program 5: 22:52:10 executing program 0: 22:52:10 executing program 1: 22:52:10 executing program 4: 22:52:10 executing program 3: 22:52:10 executing program 0: 22:52:10 executing program 5: 22:52:10 executing program 1: 22:52:10 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x3, @rand_addr="f660e227116075864051ba6af0e2de3f", 0x2}], 0x2c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r8, 0x1, 0x9}, &(0x7f0000000280)=0x8) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:10 executing program 4: 22:52:10 executing program 5: 22:52:10 executing program 1: 22:52:10 executing program 3: 22:52:11 executing program 0: 22:52:11 executing program 4: 22:52:11 executing program 5: 22:52:11 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) mmap$usbmon(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x2000003, 0x20010, r2, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:11 executing program 3: 22:52:11 executing program 1: 22:52:11 executing program 0: 22:52:11 executing program 5: 22:52:11 executing program 0: 22:52:11 executing program 4: 22:52:11 executing program 5: 22:52:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000300)="585ccbc4ed83b836c1a64749b66147f9cb451c91690000000042e3d75228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb748c4ec93c2db8eae321c7ccda650bd6a6129c2ee45cc9b3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcf8a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000"/192, 0xc0, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={'s\x99z', 0x1}, &(0x7f00000001c0)='\x00', 0x1, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)='\b', 0x1, r3) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r4}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000400)={&(0x7f0000000580)={'sm3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\x00'}}) 22:52:11 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x48010) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sysfs$1(0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 212.577587] audit: type=1400 audit(1570229531.146:56): avc: denied { map } for pid=8538 comm="syz-executor.2" path="/proc/8538/stat" dev="proc" ino=32240 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 22:52:11 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20000, 0x0) accept4$vsock_stream(r1, &(0x7f0000000340)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x800) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r2, r3, 0x0, 0x96a8) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000280)=""/189) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:11 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0xe0) 22:52:11 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) 22:52:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}}, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x400002, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000100)={0xfff, 0x1, 0xaa, 0x7, 0x7fff}, 0xc) 22:52:11 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000000)={0x10001}) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r8, r9, 0x0, 0x96a8) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 22:52:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}}) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendfile(r2, r5, 0x0, 0x96a8) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000040)={0x261, 0x0, 0x7}, 0xc) syz_mount_image$btrfs(&(0x7f0000000180)='btrfs\x00', &(0x7f0000000200)='./file0\x00', 0x80000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000000240)="6c74810b813bbfe6deac0b974a5ec81546", 0x11}], 0x80000, &(0x7f0000000340)={[{@degraded='degraded'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/net/tun\x00'}}]}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x18) r7 = dup3(r0, r1, 0x0) write$USERIO_CMD_REGISTER(r7, &(0x7f0000000100)={0x0, 0x4}, 0x2) 22:52:11 executing program 4: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2400000000000) r0 = memfd_create(&(0x7f0000000140)='user,wlan1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000040)={0x2, 0xfe00, 0x8, 0x7, 0x3f, 0x5b, 0x4}, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r5, r6, 0x0, 0x96a8) r7 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @null}, [@null, @bcast, @rose, @rose, @rose, @rose, @rose, @null]}, &(0x7f0000000080)=0x48, 0x80800) write$binfmt_elf64(r7, &(0x7f0000000440)=ANY=[], 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 212.867846] could not allocate digest TFM handle sm3 22:52:11 executing program 2: syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000280)='./file0\x00', 0x7f0c280, 0x3, &(0x7f0000000500)=[{&(0x7f00000002c0)="65d8dba4f6b27d618af75078589a92a49a9263b29c22df7c7bf1faec3e237286386cddf19da3e1641035bc1716b7785a44ff5aafbecdd9878151c172f86b93389d9979111f4a99a962711c8bd2650aa7678a02b7c4b9f465743c83107381881e7feee1b70f6f2977b479be37894c9d9e9fdb46fd6e497c153711fa7bb10d89aa1e4b4358547f693946cc0da20e55d2136ce63edb3a2394465b321d4c95b5bf34c5244bf719a8bf05708ebc15bff789393d7fc03ffb1057851a20e7bfc07c2578b63662045c73519d64bf2fb3780e32634945d90f2a6469d7f1c6728d4f1880bec4101874ad22b60b0980782e5ec151a3369fef9f", 0xf4, 0x1f}, {&(0x7f00000003c0)="a0fc88cf074174fc23bc838101e7e868497c056394021c4f02f9f467bd8dd9d83ad413dc1a9c203f3725534d5272a45b32fffa63e73d703bc380c3ea", 0x3c, 0x400}, {&(0x7f0000000400)="16d8b10bac54305c015904dc388c06115690f7173f6b96b2092bbfab83d83c484101b8acd39a074f67e525c6d25cd13c5f70d455c77b71abe1d16e1ef86ea0664e10970ba5a2957617dd8925bee18782233ea5a1d1d39bf7dc40bf4ace63b609eda21feff1ead291e26df985484b0391522754f531aa741028caeed9c83ed5edbcd3066bfceb7ab8b346e89f0574eb0fa9f5dbccd0d998b784fbc32a919e3be9361ee65c06886587b253c1d2f7a27cbdca27c7e14f663558eb67fb101973affa19eec62b4770989fb96c0714f427ff09596c5e713ea28ecc140ebdaed24fac1d0cc6ff683069142ce5b82fbc60", 0xed, 0x100000000}], 0x4, &(0x7f0000000580)='vboxnet0#\x00') r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 212.939526] could not allocate digest TFM handle sm3 22:52:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x9a440500ce35d440, 0x4) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x2}, [{0x2, 0x4, r4}, {0x2, 0x2, 0xee00}], {0x4, 0x2}, [], {0x10, 0x6}}, 0x34, 0x1) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x11a) sendfile(r2, r3, 0x0, 0x20000102000007) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r5, 0x80089203, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = shmget(0x2, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000140)=""/47) 22:52:11 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000140)={0xffffff38, 0x8, 0x8001, 0x7, 0x5, 0x1}) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@shortname_mixed='shortname=mixed'}]}) 22:52:11 executing program 1: chdir(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000580)={0x2, &(0x7f0000000a00)=[{}, {}]}) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000200)=0xfffffffc, 0x4) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000005c0)) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) getdents64(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="16aa38556cca81a3f171ad659f7d7f2989ced4fb412171dc3aafc6c2c16210d63e443ee90f5550a79247877e69c2479a7a61b520126567382f580c855c7ae3548459cd7da205892ba4365a8b197ae5f64c14dd02cb089af4a345a929c66d8e7435a2e41e13267d6eea9e6f19f2", 0x6d, 0x4000, &(0x7f00000002c0)={0x2, 0x4e23, @multicast2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000640), 0x0, 0x4}}, 0x20) chdir(&(0x7f0000000180)='./file0\x00') openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000b00)={0x0, 0x1, 0x30, 0x40, 0xe5}, &(0x7f0000000b40)=0x18) pivot_root(&(0x7f0000000340)='./file2\x00', 0x0) mount$9p_virtio(&(0x7f0000000300)='/de\x10\x19\xbdm\x9d\xd3~>\x02\x00\x00\x00\x00\x00\x00\x00#\x00', &(0x7f0000000500)='./file1/file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="7472616e733d76697274696f2c7072695b706f72742c6163636573733d75732808910e27e38a3f1af165722c6163636573733d636c69656e742c636f6e746578743d73746166665f752c646f6e745f6d6561737572652c646f6e745f686173682c7365636c6162656c2c61707072616973655f747970653d696d617369672c646f6e745f61707072616973652c61707072617e325fcf747970"]) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000d80)={0xff9ffff, 0x0, 0x0, [], &(0x7f0000000d00)={0xa30001, 0xfffffffe, [], @p_u16=0x0}}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000680)) recvmmsg(0xffffffffffffffff, &(0x7f0000008880)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f00000003c0)=""/115, 0x73}}, {{&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000a40)=""/148, 0x94}], 0x2}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/90, 0x5a}, {&(0x7f0000000cc0)=""/38, 0x26}], 0x3, &(0x7f0000002e00)=""/178, 0xb2}, 0x3}, {{0x0, 0x0, 0x0}, 0xfffffffffffffffd}, {{0x0, 0x0, &(0x7f0000007040)=[{0x0}, {&(0x7f0000006f40)=""/255, 0xff}], 0x2, &(0x7f0000007080)=""/57, 0x39}}, {{&(0x7f00000070c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000007500)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x4}, {{0x0, 0x0, 0x0}, 0x2}], 0x7, 0x1, &(0x7f0000008b40)) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') [ 213.175172] NFS: bad mount option value specified: vboxnet0# 22:52:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000000)={0x7, 0x4b, 0x1}, 0x7) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r3, r4, 0x0, 0x96a8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e24, 0x4e, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}, 0x0, 0x7, 0x0, "250f3fa780d15e10660c9e0979473ee0d5652b5a359e2d844150acbed555fd84177ae862f63c1e2b188550e07016bdb5a6d3211fb1381f606bc0efa777336b255a4e8af938a9e9794fed7823b03324dc"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f0000000040)={{0x80000001, 0x1000}, 0x2}, 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000180)={0x2, "d073"}, 0x3) [ 213.251500] FAT-fs (loop4): bogus number of reserved sectors [ 213.278615] FAT-fs (loop4): Can't find a valid FAT filesystem [ 213.323054] NFS: bad mount option value specified: vboxnet0# 22:52:11 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/ip_tables_targets\x00') epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) 22:52:12 executing program 5: syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000280)='./file0\x00', 0x7f0c280, 0x3, &(0x7f0000000500)=[{&(0x7f00000002c0)="65d8dba4f6b27d618af75078589a92a49a9263b29c22df7c7bf1faec3e237286386cddf19da3e1641035bc1716b7785a44ff5aafbecdd9878151c172f86b93389d9979111f4a99a962711c8bd2650aa7678a02b7c4b9f465743c83107381881e7feee1b70f6f2977b479be37894c9d9e9fdb46fd6e497c153711fa7bb10d89aa1e4b4358547f693946cc0da20e55d2136ce63edb3a2394465b321d4c95b5bf34c5244bf719a8bf05708ebc15bff789393d7fc03ffb1057851a20e7bfc07c2578b63662045c73519d64bf2fb3780e32634945d90f2a6469d7f1c6728d4f1880bec4101874ad22b60b0980782e5ec151a3369fef9f", 0xf4, 0x1f}, {&(0x7f00000003c0)="a0fc88cf074174fc23bc838101e7e868497c056394021c4f02f9f467bd8dd9d83ad413dc1a9c203f3725534d5272a45b32fffa63e73d703bc380c3ea", 0x3c, 0x400}, {&(0x7f0000000400)="16d8b10bac54305c015904dc388c06115690f7173f6b96b2092bbfab83d83c484101b8acd39a074f67e525c6d25cd13c5f70d455c77b71abe1d16e1ef86ea0664e10970ba5a2957617dd8925bee18782233ea5a1d1d39bf7dc40bf4ace63b609eda21feff1ead291e26df985484b0391522754f531aa741028caeed9c83ed5edbcd3066bfceb7ab8b346e89f0574eb0fa9f5dbccd0d998b784fbc32a919e3be9361ee65c06886587b253c1d2f7a27cbdca27c7e14f663558eb67fb101973affa19eec62b4770989fb96c0714f427ff09596c5e713ea28ecc140ebdaed24fac1d0cc6ff683069142ce5b82fbc60", 0xed, 0x100000000}], 0x4, &(0x7f0000000580)='vboxnet0#\x00') r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 213.379806] FAT-fs (loop4): bogus number of reserved sectors 22:52:12 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x8000, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000200)='/dev/kvm\x00', 0x9) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') socket$vsock_stream(0x28, 0x1, 0x0) sendfile(r2, r3, 0x0, 0x96a8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000340)=0x10000, 0x4) ioctl$TIOCLINUX2(r5, 0x541c, &(0x7f0000000080)={0x2, 0xb46, 0x5, 0x5, 0x68, 0x40}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r8) getsockopt$inet6_tcp_buf(r8, 0x6, 0x1a, &(0x7f0000000240)=""/23, &(0x7f0000000280)=0x17) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) connect$netrom(r7, &(0x7f0000000000)={{0x3, @bcast, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f00000003c0)=0x6) [ 213.435218] FAT-fs (loop4): Can't find a valid FAT filesystem 22:52:12 executing program 5: syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000280)='./file0\x00', 0x7f0c280, 0x3, &(0x7f0000000500)=[{&(0x7f00000002c0)="65d8dba4f6b27d618af75078589a92a49a9263b29c22df7c7bf1faec3e237286386cddf19da3e1641035bc1716b7785a44ff5aafbecdd9878151c172f86b93389d9979111f4a99a962711c8bd2650aa7678a02b7c4b9f465743c83107381881e7feee1b70f6f2977b479be37894c9d9e9fdb46fd6e497c153711fa7bb10d89aa1e4b4358547f693946cc0da20e55d2136ce63edb3a2394465b321d4c95b5bf34c5244bf719a8bf05708ebc15bff789393d7fc03ffb1057851a20e7bfc07c2578b63662045c73519d64bf2fb3780e32634945d90f2a6469d7f1c6728d4f1880bec4101874ad22b60b0980782e5ec151a3369fef9f", 0xf4, 0x1f}, {&(0x7f00000003c0)="a0fc88cf074174fc23bc838101e7e868497c056394021c4f02f9f467bd8dd9d83ad413dc1a9c203f3725534d5272a45b32fffa63e73d703bc380c3ea", 0x3c, 0x400}, {&(0x7f0000000400)="16d8b10bac54305c015904dc388c06115690f7173f6b96b2092bbfab83d83c484101b8acd39a074f67e525c6d25cd13c5f70d455c77b71abe1d16e1ef86ea0664e10970ba5a2957617dd8925bee18782233ea5a1d1d39bf7dc40bf4ace63b609eda21feff1ead291e26df985484b0391522754f531aa741028caeed9c83ed5edbcd3066bfceb7ab8b346e89f0574eb0fa9f5dbccd0d998b784fbc32a919e3be9361ee65c06886587b253c1d2f7a27cbdca27c7e14f663558eb67fb101973affa19eec62b4770989fb96c0714f427ff09596c5e713ea28ecc140ebdaed24fac1d0cc6ff683069142ce5b82fbc60", 0xed, 0x100000000}], 0x4, &(0x7f0000000580)='vboxnet0#\x00') r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 213.511493] mmap: syz-executor.0 (8634) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 22:52:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r8, r9, 0x0, 0x96a8) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 22:52:12 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r3, r4, 0x0, 0x96a8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r7, r8, 0x0, 0x96a8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$key(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x6369d01b0185b115, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r11, r12, 0x0, 0x96a8) ioctl$ASHMEM_SET_SIZE(r12, 0x40087703, 0x1f) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@mcast1, 0x15, r3}) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x7f, 0x4) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "2b07df2fd0846bc0964f4ffde3d917e302"}], 0x28}}], 0x1, 0x0) 22:52:12 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x8000) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) memfd_create(0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x8000) ioctl$void(r1, 0x5451) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x0, &(0x7f0000000180), 0x10000000000000a2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x4) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) 22:52:12 executing program 5: syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000280)='./file0\x00', 0x7f0c280, 0x3, &(0x7f0000000500)=[{&(0x7f00000002c0)="65d8dba4f6b27d618af75078589a92a49a9263b29c22df7c7bf1faec3e237286386cddf19da3e1641035bc1716b7785a44ff5aafbecdd9878151c172f86b93389d9979111f4a99a962711c8bd2650aa7678a02b7c4b9f465743c83107381881e7feee1b70f6f2977b479be37894c9d9e9fdb46fd6e497c153711fa7bb10d89aa1e4b4358547f693946cc0da20e55d2136ce63edb3a2394465b321d4c95b5bf34c5244bf719a8bf05708ebc15bff789393d7fc03ffb1057851a20e7bfc07c2578b63662045c73519d64bf2fb3780e32634945d90f2a6469d7f1c6728d4f1880bec4101874ad22b60b0980782e5ec151a3369fef9f", 0xf4, 0x1f}, {&(0x7f00000003c0)="a0fc88cf074174fc23bc838101e7e868497c056394021c4f02f9f467bd8dd9d83ad413dc1a9c203f3725534d5272a45b32fffa63e73d703bc380c3ea", 0x3c, 0x400}, {&(0x7f0000000400)="16d8b10bac54305c015904dc388c06115690f7173f6b96b2092bbfab83d83c484101b8acd39a074f67e525c6d25cd13c5f70d455c77b71abe1d16e1ef86ea0664e10970ba5a2957617dd8925bee18782233ea5a1d1d39bf7dc40bf4ace63b609eda21feff1ead291e26df985484b0391522754f531aa741028caeed9c83ed5edbcd3066bfceb7ab8b346e89f0574eb0fa9f5dbccd0d998b784fbc32a919e3be9361ee65c06886587b253c1d2f7a27cbdca27c7e14f663558eb67fb101973affa19eec62b4770989fb96c0714f427ff09596c5e713ea28ecc140ebdaed24fac1d0cc6ff683069142ce5b82fbc60", 0xed, 0x100000000}], 0x4, &(0x7f0000000580)='vboxnet0#\x00') r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:12 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x8000, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000200)='/dev/kvm\x00', 0x9) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') socket$vsock_stream(0x28, 0x1, 0x0) sendfile(r2, r3, 0x0, 0x96a8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000340)=0x10000, 0x4) ioctl$TIOCLINUX2(r5, 0x541c, &(0x7f0000000080)={0x2, 0xb46, 0x5, 0x5, 0x68, 0x40}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r8) getsockopt$inet6_tcp_buf(r8, 0x6, 0x1a, &(0x7f0000000240)=""/23, &(0x7f0000000280)=0x17) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) connect$netrom(r7, &(0x7f0000000000)={{0x3, @bcast, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f00000003c0)=0x6) 22:52:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r8, r9, 0x0, 0x96a8) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 22:52:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r8, r9, 0x0, 0x96a8) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 22:52:12 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) sysfs$3(0x3) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:12 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) ioctl$TIOCCBRK(r2, 0x5428) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:13 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x7000006, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') prctl$PR_CAPBSET_READ(0x17, 0x1f) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x4002, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000300)=0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20800, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x800, @mcast2, 0x8}, 0x1c) 22:52:13 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x8000, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000200)='/dev/kvm\x00', 0x9) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') socket$vsock_stream(0x28, 0x1, 0x0) sendfile(r2, r3, 0x0, 0x96a8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000340)=0x10000, 0x4) ioctl$TIOCLINUX2(r5, 0x541c, &(0x7f0000000080)={0x2, 0xb46, 0x5, 0x5, 0x68, 0x40}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r8) getsockopt$inet6_tcp_buf(r8, 0x6, 0x1a, &(0x7f0000000240)=""/23, &(0x7f0000000280)=0x17) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) connect$netrom(r7, &(0x7f0000000000)={{0x3, @bcast, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f00000003c0)=0x6) 22:52:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r8, r9, 0x0, 0x96a8) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 22:52:13 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) sendfile(r0, r2, &(0x7f0000000000), 0x3) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000b40)={&(0x7f0000000840), 0xc, &(0x7f0000000b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="41020000", @ANYRES16=r3, @ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x8000}, 0x14048890) sendmsg$inet(r1, &(0x7f0000000800)={&(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000340)="19a061bdaf5925e4d329f837b287854ccf91a81991005a3b6e1619623a04018a8808a4514471765ac6528996ff8c4fe6c6de2bdd436c2de583ed1088cd6f", 0x3e}, {&(0x7f0000000380)="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", 0xfe}, {&(0x7f0000000480)="998519baec7e1b1ed980947f070b943961065d87e8104e09a2fd3bc17a00bdd7ebde6e1bbf17d3c3774261d1e77001234bbdca520cd597a73ae3fa2b23123c64672ae87afc64d319b0c420916d59c21de64ce278058a2737873f03ced9893beef2cdec45790e8bd0d6f54d634ab03b0bf47c4d5c693654e10f4818ae04e425bacd5809a0969c688d9a09e16a947838d36e5671f7d0a5b5088423f316b7ffbf4ba7acdc6c5ad93232b6f785b527bfeff37866f3340b24d09712b548216292e04e010447c761e3637f49a185353c41ac8686362e9fac7aae97b871470f561eead6b6b3bfa4c05e0ba0031436863e6c423c03f63d585a89d115aa806a", 0xfb}, {&(0x7f0000000580)="13b9d6850fb1181448acfe5f2dfd79e27a0f68755697bd4e387fd67aff33e2dcacf5f6115f836bbc3a46415485c00d489166f17cdefe062d2ded26b247625b6f78a674902f41acd327203d39", 0x4c}, {&(0x7f0000000b80)="cc22d2c264b2e9f16741ab97165f7f52e459cb4563d6ff4b81d6b40dd308c36b50142b1b2a1fb02f87add26a19968afb53396075f5918d", 0x37}, {&(0x7f0000000640)="2271ca01", 0x4}, {&(0x7f0000000680)="33662978033407cee349693075", 0xd}, {&(0x7f00000006c0)="a845d3529a2f7d5d12ca2a96dff547ff4c0299289a87bde094833900c17fa5c26e7782610d3911b4730d36564e41411044bc8de9a7daeadc365b94734d58a69a121d029ad63b0d9f", 0x48}], 0x8, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}, 0x4) 22:52:13 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @rand_addr="f27f78db0d98dc745210d6c95d25bd4b", 0x8000}, {0xa, 0x4e22, 0x1f, @dev={0xfe, 0x80, [], 0x15}, 0x1}, r2, 0x7fffffff}}, 0x48) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:13 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000007c0)='\x00\x00\x03\x00\x00\x00\x00\x05\x00\xf8\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\x86\xc2\xcfW\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci\x01\x00\x00\x00\x00\x00\x00\x00\xafdd\t\xdbjE\x01\xd1s\xe93\x01\xc9hP1\xdc-\'\xd0\x9e}\x89\xff&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00\xe9\xc8hK\xfe\xb1\xc5Ce3\x7f\t\xf9\x8c|\xfc\xa6\xcd\xbbff\x12nW\xb5>\xa2\xa0\x12\x83\x80A\xdc\xfaIg\xb7\xdda\xc2\x8e\x1d\xa9\xf9\x03ff\xacQ/G$=\x88[\xfat{\xeeoU\x19\x16\xaa\xa4\xc1m\xccZ\x8dz\xce\x87X\xeb\xa2|\x8d\xd6.\x18\xabj\xb9>\x98\x04\xb0\xefv\b~lo\xd8)\xec\x90\x1d~\xf8\x8eE\xb1\\\xd2h\xcaa\xcf%a\xe8a\xcf\xe4\xd7\xf3\xa4\xeet\x00\x00\x00\x00\x00\x00\xb6\x10\x19#\'\x87\x1akDJ\xfd\xd4\xf2\xfe\xb8\x1ed\xc0B\xbaA\x8cDo\xb7=\x90To\xf9\xe7\xd0ro3\x83v\'\x976/\xd0L\v\xac8\xb8\xfaq\xa9+\xb6?1\xf7\xca\x9c+\xb84\xd0\x0ezE\x94\x13\xf9\xa2Z\xa4\\1\xfe\xff\r[S\x19\xb8\xc3\fta\x11\xfb\x94\x12`\xfb\x1bV\xe4py r\xc6\xa5\xc2\xab\xb7\xd3\xed\x91g\rw\x00O\x85N]jQ\xb8\xc1\xa2\xd3\xa6z$8m\xc0qX!Z48\xd5\xe1\xcaJ\x17\xa65B2oti\xda\x92X\x11!\x05\x81\x1f\xf6\xcc?\x00\x00\x00\x00\x00\x00\x00\xc5\xcf\\\xe6)\x17\xd6\xe7\x9f+d\x82\xc7') setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@local, 0x2, 0x1, 0x1, 0x4, 0x78e1, 0x8001}, 0x20) 22:52:13 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) ioctl$TIOCCBRK(r2, 0x5428) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r8, r9, 0x0, 0x96a8) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 22:52:13 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x8000, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000200)='/dev/kvm\x00', 0x9) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') socket$vsock_stream(0x28, 0x1, 0x0) sendfile(r2, r3, 0x0, 0x96a8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000340)=0x10000, 0x4) ioctl$TIOCLINUX2(r5, 0x541c, &(0x7f0000000080)={0x2, 0xb46, 0x5, 0x5, 0x68, 0x40}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r8) getsockopt$inet6_tcp_buf(r8, 0x6, 0x1a, &(0x7f0000000240)=""/23, &(0x7f0000000280)=0x17) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) connect$netrom(r7, &(0x7f0000000000)={{0x3, @bcast, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f00000003c0)=0x6) 22:52:13 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x8000) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) memfd_create(0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x8000) ioctl$void(r1, 0x5451) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x0, &(0x7f0000000180), 0x10000000000000a2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x4) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) 22:52:13 executing program 4: setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180)=@gcm_128={{}, "463a92342d73f68f", "e8ca4c858b16eda5c8a30fb9e980c03c", "d565ab1b", "3bd5a4956999b1f6"}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000], 0x0, 0x40104}) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) 22:52:13 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x8, 0x180000) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r0, 0xfffffffffffffffa) r1 = msgget(0x2, 0x0) msgctl$IPC_RMID(r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r2, r3, 0x0, 0x96a8) read$FUSE(r3, &(0x7f0000000280), 0x1000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') socket$kcm(0x29, 0x0, 0x0) 22:52:13 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) syz_mount_image$ceph(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)='./file0\x00', 0xb43, 0x5, &(0x7f0000000600)=[{&(0x7f0000000300)="f6ce1c096e760ae5710617cfbb2d5cfc1ec2e7c4236f4ad40dfacb816073b9497b50f6c3977b2d53344d15a286e6206f95d94c63e52eee9cee63cc07c3776f3329f2e7140a0efc266041ea3db1", 0x4d, 0x9}, {&(0x7f0000000380)="f05c25cc7e9349124ce0d6b886e9f6ecb8a55a2db8ff2f4579041fa3cafc8f2d0ea5b1a6a0f90bc97a875f01ba7e7d2855fd9f221c346bbe69f934b8cddc559191764f55f87a171a55dbc22ab85ed565f2985b29b14753ad70a65540485bc6c64a0cec1ddfb9a031bb64ab13fdf3453f1246a0252cf6a964daebb7ab65e3226aa65202a11623c57b0db548b9141633b3d7ea6eee775a1c073a3180834efd234688cbe744d0ae4f73", 0xa8, 0x3}, {&(0x7f0000000440)="7cd7af0c10a23ac9505d788885", 0xd, 0x7}, {&(0x7f0000000480)="4b4fb11b92dba565bf46943dc1d897f4b26f8901e22a7137bcb7a493f47740950b0d344f9f3aba7895c25325ad3afa49eb165bbd49b415345df65b61c593409f3de221b4d07cbd149f709924af28643eb00d15f399239beea8c75b17d927f70bfb4a4298748f07f58a93c45a485a47e296ec593434d2c40adeee743896faf5423112a5100e9dd5e2909bc78137de54e9e1b277a21b58e7cb23d58d6b5dc54d3e3b798437a8941ba6a8594336bb36aaf773f2b03ac62d319145f56db2e3906ab934ba955236460009f5488e79ae49201d318fe81dc8f224ffc130", 0xda, 0xfffffffffffff6fb}, {&(0x7f0000000580)="400b36bf12d4e4a9776b52098892de86bafa4e98d1615c287e85481890a94c4f559e56b506bb53541b64d422be3e38f8615c3462554d8106183897a0cc5bce59f73a41aa56c6bb6fbf72a3020c918f0de30070b5dc8bb9db96f283e3f70c4c3112e763", 0x63, 0x2}], 0x80, &(0x7f0000000680)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x402a80, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:14 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x8, 0x180000) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r0, 0xfffffffffffffffa) r1 = msgget(0x2, 0x0) msgctl$IPC_RMID(r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r2, r3, 0x0, 0x96a8) read$FUSE(r3, &(0x7f0000000280), 0x1000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') socket$kcm(0x29, 0x0, 0x0) 22:52:14 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x8, 0x180000) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r0, 0xfffffffffffffffa) r1 = msgget(0x2, 0x0) msgctl$IPC_RMID(r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r2, r3, 0x0, 0x96a8) read$FUSE(r3, &(0x7f0000000280), 0x1000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') socket$kcm(0x29, 0x0, 0x0) [ 215.457048] ceph: device name is missing path (no : separator in /dev/loop2) 22:52:14 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_procfs(r1, &(0x7f0000000000)='fd\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000080)='fuse.', 0xf8db34327b8f85f8, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="9000"]) read$FUSE(r0, &(0x7f0000001500), 0x1000) ustat(0x2, &(0x7f0000000000)) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000200)=""/165, 0xa5, 0x80, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 22:52:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r9, 0x0) r10 = syz_open_dev$amidi(0x0, 0x2, 0x40000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r10, @ANYRESHEX=r10, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r11, 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x88, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@nodevmap='nodevmap'}, {@access_client='access=client'}, {@msize={'msize', 0x3d, 0x10000}}, {@aname={'aname', 0x3d, 'ppp0(!{wlan1(-[cgroup'}}, {@cache_mmap='cache=mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}, {@noextend='noextend'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}, {@uid_gt={'uid>', r9}}, {@uid_lt={'uid<', r11}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@appraise='appraise'}]}}) r12 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:14 executing program 4: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x3f}, 0xc) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r0, r1, 0x0, 0x96a8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r5, 0x0, &(0x7f00000002c0)=""/39, 0x4}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xffffffffffffff80, 0x4000}, 0x402, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xd, 0xffffffffffffffff, 0x2) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x2710}}, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}}) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xa6, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x98) syz_genetlink_get_family_id$tipc(0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000500)={'sit0\x00\x00\x00\x00\x00\x00@\xd6\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'rose0\x00', 0x1000}) 22:52:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r8, r9, 0x0, 0x96a8) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 22:52:14 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ashmem\x00', 0x28a40, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:14 executing program 0: mkdir(0x0, 0x10) chdir(&(0x7f0000000280)='./file0\x00') add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) socket$can_bcm(0x1d, 0x2, 0x2) getgid() getresgid(&(0x7f00000004c0), 0x0, 0x0) r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000200)={@multicast2, @dev}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000840), &(0x7f0000000900)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240), 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x480080, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x7}, &(0x7f0000000100)=0x20) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='trusted.overlay.upper\x00', &(0x7f0000000500)={0x0, 0xfb, 0x79, 0x1, 0x80, "4ebe26852dbbfd038ed29d045d09f90f", "344f365f1467b274bf02095b15d448c41c93fc785d5816e2944cb81ee63234e315364ecabdec1f45f0db284f732717ed76d962cb33762392be1c8a8a46975a753346b53b2f71cd573142476884392b3974fc235e24dcd321d48459fd13bb6ec6ba1f3829"}, 0x79, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0xb8c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000300)=0x44) 22:52:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r9, 0x0) r10 = syz_open_dev$amidi(0x0, 0x2, 0x40000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r10, @ANYRESHEX=r10, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r11, 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x88, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@nodevmap='nodevmap'}, {@access_client='access=client'}, {@msize={'msize', 0x3d, 0x10000}}, {@aname={'aname', 0x3d, 'ppp0(!{wlan1(-[cgroup'}}, {@cache_mmap='cache=mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}, {@noextend='noextend'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}, {@uid_gt={'uid>', r9}}, {@uid_lt={'uid<', r11}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@appraise='appraise'}]}}) r12 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:14 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x8000) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) memfd_create(0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x8000) ioctl$void(r1, 0x5451) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x0, &(0x7f0000000180), 0x10000000000000a2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x4) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) 22:52:14 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x5, 0x8682) ioctl$TIOCSTI(r0, 0x5412, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffc) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'\x00', 0x1}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) add_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="16b69b6b2a", 0x5, 0xfffffffffffffffb) r4 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r5 = syz_open_dev$swradio(&(0x7f00000003c0)='/dev/swradio#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000800)={{0xa, 0x4, 0x1000, 0xfffffffd, 'syz1\x00', 0xc5}, 0x1, [0x8, 0x25b, 0xc5e, 0xd58, 0x7, 0x7fff, 0x8000, 0x9, 0x8, 0xfffffffffffffc01, 0x9, 0x401, 0x3f, 0x1, 0x100, 0x1, 0x4, 0x7fffffff, 0x7, 0x4d0, 0x9, 0x7fffffff, 0x4, 0x9, 0x5, 0x81, 0x14d, 0x4, 0x6, 0x4, 0x2, 0x8, 0x2, 0x3, 0xcb, 0x3, 0xffffffff, 0x4, 0x6, 0xffffffff, 0x400, 0x80000000, 0x5, 0x8, 0xfff, 0x3, 0x7fff, 0x8, 0x2, 0x0, 0xffffffff, 0x2, 0x9, 0x8001, 0x7ff, 0x80000001, 0x1, 0x9, 0x6, 0x200, 0x1c9, 0x6, 0x39b, 0x6, 0x0, 0x6, 0x2, 0xffffffff, 0x6, 0x3, 0x20, 0x5, 0x20, 0x7ff, 0x80000000, 0x1, 0x2, 0x5, 0x7fff, 0xfffffffffffffff9, 0x1ff, 0xffffffff80000001, 0x7f, 0x9, 0x7, 0x1000, 0x6, 0x7d0, 0x5, 0x8, 0x0, 0x40, 0x100, 0x2, 0x5, 0x9, 0x10001, 0x4, 0x425, 0x0, 0x9, 0x9, 0x40, 0x9, 0x6, 0x8, 0x4, 0x2, 0x1ff, 0x80000000, 0x6, 0x80000001, 0x80000001, 0x81, 0xfffffffffffffff8, 0x80000000, 0x4, 0x99ee, 0x5, 0x3800000000000000, 0x1, 0x3, 0x5a73, 0x0, 0x0, 0x8001, 0x6, 0x5], {r6, r7+30000000}}) keyctl$update(0x2, r4, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r8 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r8, r4, r8}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) keyctl$update(0x2, r8, &(0x7f0000000200)="4e234c44d5c82d477f41cee12f02918274680897dd2953eb6a62616c15cb37694e348f4b37ff9bf760c489a9b1f6c67e03", 0x31) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r9, r10, 0x0, 0x96a8) ioctl$sock_inet_tcp_SIOCOUTQ(r10, 0x5411, &(0x7f0000000500)) r11 = dup(r1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r11, 0xc0945662, &(0x7f0000000240)={0x100, 0x0, [], {0x0, @reserved}}) 22:52:14 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) fsetxattr(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="6f73782e73656c665b73656c666370757365740070827f6e606af2e9c8c5e2e525a0244c7389652a3c6b977d142d694c8eb2158732ec838b90d5f229f49bcdfb0f31d32e37245c86d8ed3476da9b9e133321275000efb99ddc7a56030a9770869460a7fc4a63a4b11888293aa0c6b463910084e77d80735054de8ad57de64f8ffc7300096d8e888934a76b4221ccd65fdc46dd42bd1eb959a4b11a427b5deb8fd866e38ad8ceaf323eed48a2a71fd21e874e59038e38a387d60309c8fa2c2131d9e23da1609f880366884874d475bb853f0dad79f6de"], &(0x7f0000000280)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00', 0xc6, 0xf551360822b98c4e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r4, 0x408c563e, &(0x7f0000000380)={0x1000, 0xa, 0x31, "ff3c1aabeb3c3c840e771ddc4164d48dbef9213410bb09f548dd01e5ef3a0da7552e564764cbf42e439240801f68526d8a45ba5db0c78f82532921a3", 0x12, "e47ba6c9a7c49465ad446a585c6d978684d3dfb5953479ae21fd17cf481f2d42d6ffaad5683387a7b5cc94bc4b1b3bcd750ddde5d268f797c13711c0", 0x20}) 22:52:14 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000280)=""/4096) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:14 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20040080) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') modify_ldt$read(0x0, &(0x7f0000000340)=""/137, 0x89) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r9, 0x0) r10 = syz_open_dev$amidi(0x0, 0x2, 0x40000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r10, @ANYRESHEX=r10, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r11, 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x88, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@nodevmap='nodevmap'}, {@access_client='access=client'}, {@msize={'msize', 0x3d, 0x10000}}, {@aname={'aname', 0x3d, 'ppp0(!{wlan1(-[cgroup'}}, {@cache_mmap='cache=mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}, {@noextend='noextend'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}, {@uid_gt={'uid>', r9}}, {@uid_lt={'uid<', r11}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@appraise='appraise'}]}}) r12 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:15 executing program 0: chdir(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{}, {}]}) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000640), 0x0, 0x4}}, 0x20) chdir(&(0x7f0000000180)='./file0\x00') r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x72bdf1e6a0acecc1) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000100)) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r5, 0x2}, 0x8) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) pivot_root(0x0, &(0x7f0000000440)='./file1/file0\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000008880)=[{{&(0x7f00000000c0)=@generic, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/71, 0x47}}, {{&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000a40)=""/148, 0x94}], 0x2}, 0x10001}, {{0x0, 0x0, &(0x7f0000002d80), 0x0, &(0x7f0000002e00)=""/178, 0xb2}, 0x3}, {{0x0, 0x0, &(0x7f00000043c0)=[{0x0}, {&(0x7f0000003040)=""/30, 0x1e}, {&(0x7f0000003200)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000004440)=""/2, 0x2}}, {{&(0x7f0000006940)=@alg, 0x80, 0x0}, 0xfffffffffffffffd}, {{0x0, 0x0, 0x0}}], 0x7, 0x1, &(0x7f0000008b40)) chdir(0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 22:52:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r9, 0x0) r10 = syz_open_dev$amidi(0x0, 0x2, 0x40000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r10, @ANYRESHEX=r10, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r11, 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x88, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@nodevmap='nodevmap'}, {@access_client='access=client'}, {@msize={'msize', 0x3d, 0x10000}}, {@aname={'aname', 0x3d, 'ppp0(!{wlan1(-[cgroup'}}, {@cache_mmap='cache=mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}, {@noextend='noextend'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}, {@uid_gt={'uid>', r9}}, {@uid_lt={'uid<', r11}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@appraise='appraise'}]}}) r12 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:15 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200800, 0x0) getgroups(0x0, 0x0) setregid(0x0, 0x0) sched_setattr(0x0, 0x0, 0x5447d0e40dee964e) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="850000009c2c39087852b5217d4e9b500ff5b111cfcb0e0f0cb0ffa7ff8ceaf590cdc9632f1322fe1d8249006d670c8ea2244104078c31d20d1741301ccd465d1078612a1a6843b273e6300b53d664b33e9d43323e400c7ab4582f46b7487eeed7078172c0bd9ce568a39948314151e494a4c123c6c6a8de2a39d5acefb5f5e09db49ee85ba36f2a1a"], &(0x7f0000000040)=0x8d) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xcc, 0x880) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180)=0x3e4, 0x4) pkey_free(0xffffffffffffffff) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x10004, 0x0) ioctl$CAPI_CLR_FLAGS(r3, 0x80044325, &(0x7f0000000400)) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f00000001c0), 0x0, 0x5f, 0x0) seccomp(0x3, 0xce65ecf9d36feb7b, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0xffff, 0x20, 0x6, 0x7}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) setxattr$security_smack_transmute(0x0, &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x1) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000008000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x8, 0x15]}}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000280)={0x0, {0x77359400}, 0xffffffffffff8000}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) 22:52:15 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000280)={0x8, 0x8}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$pptp(r0, &(0x7f0000001900)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r5, 0x301, 0x70bd2a}, 0x14}, 0x1, 0x0, 0x0, 0xc060000}, 0xd5e0cf87bb342320) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001940)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000001840)=0xe8) syz_mount_image$msdos(&(0x7f00000004c0)='msdos\x00', &(0x7f0000000500)='./file0\x00', 0xffffffff, 0x5, &(0x7f00000016c0)=[{&(0x7f0000000540)="69dd06d73f3871deb8703c0be06864ff8bf3f5f1aed5e2554d1fb060bb809453e43f88e7163e2441e0e008a5d48554254bdba6ec94d8239d70a07bfcad051319d061ca8936fa5346014df763b8fa4b298b23850819f1387bc4dcdcfb915e912cc630c53955a33e4fc11f39aa71386b4e49988593631f5f1392fd62eaf57609a0993c278f283ecac7a050b93080487e16c8d036d778bee2e8410c193c2b7227adf55f87428911516ed4c84326ab0ae1b4b9d65a8e735a114ad3a2565ff1db0d6e08744bf6c170bbfb347273bf66a03b00cb5833d1671e3ddbbd68ffec52c9d81cc159a630f9e01e041e442be4763246951262809fefdfeb56f31f3e2a7d53dfdd0c5f9c1f8b4fa89c58bfd8e77b6a4b215121d28ed38214999a84521df68afc071468713fc20c93491cd08d34b1e270985f295f8702e7ea54691f2af5747ccb2482de908b53d32a7945ed086e0d6e33e5ee2db0ba8830fbc5197c44d5badfd5f366a8d7fa9a517cd05780085b99fd33f64da9ed41ba5ceea42383881ab8eac4df2073f409a1b10bad29edaa246a005e79f23da61280189edd5eac75c4133d2b6722312e6702256c7368cecdca45280ec529d76cc3ed548513366edad6892221dc0e38ed8fcdd4808b943080b9d06cefc031e148f278d0e86567d580a1bc6a13096d9edf515f5fe811bd49b0878b2658ae7d403c453b025757e9c7920700bb9d2282037af73471fa7768a9f3cd28b0db1a81260c9544018e6b02b0dbfe7f4943943950940b09f1cf8de93ebef4c36e2af0c8ffe6458edc016175eae7b0d4c27be59abe52e52aa2a2bd95eb8c51c45947e88157b12fb2fed1d6fef6e1f83c3af89cc3f504f0f3fa0eb4355687253e1fdf60e75b9985d07ca6c9f008e0c3dc2d501736d591047fdf9ece842b285c9f0c0f10bbc75f88e1c44f7c4ea5e9582a7e192edbbdc7dc0dd35ea02b55102ebf5e66b78ba73947583ba1304f44c95f28d654d5f5ee11c1662ca4463370194c0ef4716a7494cb51af2de71388f61a762fda0d88fc58717031439888b5200601ea3b80dcdaa476580f41482a1ed686dbfab3d44d0e0482c6578c712b202cee3d11e17057f9dc92ee5146bccd19be08e5a9351ee48fcc1cce06fffcc3de756f419eba4a0fed6d21fc2946cc8df5e92a10be9c8aeb4a6e30e026ade020a6a0ce5de21a588e481b5d42c515f995ddd4150aa5a33654481e763d7f5a9b2a95d7de5c63875b4abe9583d7720793a93888747eb03a27f3c9589a5c9264c6c2997e3c91a64dc5b041965d93ec693407eeaf209dd96b3191ee4c52b35c0c3d95695713f7c75d63085b8c77500d0899781c6f2bcb0e9451cc5f62a2d498d50cf8b158a0635c5ccda17fe22fcb1e54d0c7c9bb8ad137d2d492dd699d6d03badb1100331b84778d53ffc6a26bf188d020f6352be5193e15a3a20e090b797d7bb5b1f8eba0cb030978fd257ac8701adca0a79afb03785f33bd7e8fe76c60c2d1d250fd9a77d85199f550c6d7bf959fef6563985f162cabb2c4b8adccbe805b125889d6a571b637164a072b86b46be37d05c9e838a7cf19803dda92c21292b3bf8c613fd0a23dba80beb77a54b4ba3e0ec69dda70d65ea6a61c959a53a18dc942947de7f67c37ecda2beff3b09e293893c63bad812e11542232606e937c87368e27c9f27b00e4f62054b3e9a07b05b22de23c8b4a4f4f31c0fa27fd607c6a4a1cbdcfcfa49569eaedf53928f9e773503f9ffc01911b7c90ac74037710e7afabbc2355f2f2182add46e290593df27f31523629b6ea8c450291bc2fbc8e7f78c5e7714c4c455aa477a4cd2e4a485064b41eac04f6c24ac9a257df6dec363c2e9cbf23d418b348126cd19d32125b381b8daae45b471710a7b35f21f1a93747f0d837771b849e6001682b8f9f5c2324cdc2a43c77605c816c690c64580cae4c0bf754a925f6d676b9b189d837b725b063d9708ca52048b54b73d9644d849723baba3ad1a4134ab27519f0b50903bc4fcad495cf8a6612073bd377c5755e2390c4d619b36ddb7cdf112cacb07a7bccd5419d2f24049e0785a5882d749cd15fddfb5f4d57781469a7b3d78d0ab8bd8138ef71dec5f557432345a311e0be91c35579d71702397a3e23c1c9565cb599d5a4d319dfc312041390f1960fd8d1dcacf14e8b6fe8a080c9e154a3669917bb33de8c815f608dbb77106838c9712d90ec1ce93ac0175d5c9625a6256ff95e501c025b836c86ed8fa3857fe441647b9bb0c83bd668bbe58f629c8835065ee8941429d0c0f92dad4669b79e170bce9da8689ca2497755356201288575e10989d3d41e67e898fc4320f94ed6ec6e08681e24857334acc18940982007e4692a2b25442cc2a91f9d6a042a775d27dda863d6c13cabdc2d1fa52fd8c83e521e7ef1fb128e7341dbe39ba5834bf8916a87433d8d5f89002a9063d54045402647e5eff1861a1b0926eb32e8eac74e5af323a40b5e0e0131055badecd47a101fcf01d36f30ec8e0d9e53b0baa94f77e3fcb7cb48155dda6240a9b58d05f88611ebc2c17158b1a37c6eac73ebd01813149e8d9677389d29a93e2e2f3251e0fb552d029a26785f6d29d9bc18ee7812b6539a72716e37cbad17a7c179dfa8cd63c6c7d2bdb98e2ffa8e0c9271cf1ba79e19f1361a76138defb8314579f3a10d2f43e43918e6f8cc50c1f57c4cf8adcacadd544ef6c01003bb260b6c14f7680bbba78aa11bc35640131d190708a15040d366065bd3626d3504fa213a2208642bdf89b77d0486fb8fff4f19a47f02b144314ab6778ba0481e86c8ea01d9721b3dfc8269a13f69edf139f98dd0b1ab8b8bb81a8b9469871441d455dbcaff7c9b5fe03e10fd26605b28e296008fc2bff30f4e87e5445ff7fff4c3a7c00b2f2c99ba7b24947733981d56fa09864547bd12ab80b4868894214f5411f1d3e6c1dd9284efa01e564a17af270f076e3386725696840d36ec945d7bf137842c123756123adc0db04f0c46120be48ddab9c68c6f9964729e99ae6aaadcbb6a76ad123bb06f4b05b209f14e559f0e4e18bf01f0030946f8b411ca0402e20610d852d9e21e54f03ad6b29e12c36b8728adf8fcb77ce7f0fd0b063dcb8c92167bd8fe966a3dd975dac5eeefe88b3df5fe27cf818cc00342ea5855256c239dd877a54f07802b36b91254404b5fbfb0061fc42e21d3c0f12a6b8bd1c063ee6026e5ba161049cc93702244b6b9aeb4d7eaf4f345cf29f4f987bee773d3e79d060510b6a6bf9a8731616c05d740728673369f8a5cb1b278924ce5abd8b4c1f7a657249aea1a870353d1c89976791a3c6a5d37dd06cfaca5e0dee3c3c362a926b05915631c205aed66b6530e0a5bc4490afed5d7dccce1a6891dd8c47b9722a3ed6d25369047cb84f6ab4f34600b071b4e582917e998e354c384e99249812aec7e494d7c47f252d1fe5f74fb4e3742646f0ce0cdf14151f5d5a78bad4721d6dd70832eea26d7a485dfadb8cfc9c0cbfa8720230d4acdb212dbf26710e06502767af52743a1c2229af0462724703b1e39735fcef3f148b54bf6130e604a005b637ad6118bd9258adf7c99b50da69517a3017e3fecc2b86189a0fa767d171826e3b9d10c2e164e3354d3833f3bebf9cf779d561fb435a970deb97c18e3917789900c3b21a064cecdf07514b687eb41a2b230a0e4f54c96a613bc6d5d5c03fe8e5b10c03902dc836b0b861feee0e924bdd209475aa525dc136a3bed9b986e015bb90db1bfe10709669b21aeb24ff813b5799ef7f46b7d4e597605aa32d7c8825a5c2d3f2c10d8c72b674464a240dd613151fb86b88102ba48e8550b956090acb3339bf438f20547538bd2e258dab98d34e1c2fd5ee8b0b2473ee9514c527e336ba8b5f296d020857e215ee1a571022ebba285c80de74492c52ce0e9fb38ee753e0040843721cdd466093c30e9c1ff5dc3c7eaa383098790a171d079a5bc4b7222a9ba7d563e832df53aff7bbf656c00a464d9b7f9dcafa20f3697bddb9461581c6d4f14fb6fbcb5d5a698cbd0582ef03639962c004fc1388fbf1ae1a087474e2f03d8155afb0595623983deb11316b1b2664605b37ed105776493440661b4d1c2c4d719fd0064bf6445cca8f373d8e087cff0ac3c1b92ba81f8e7075a8a04b90b5cd0c392de860451ad48cd44a951e2bec4ba641c32e0846c0c45272766a38787e2aa11e9d4a15da8ae9fa91aa0bc54f6bd3271cc15bfe6eddda9aaa7d472db31224fe833ee2f7c373ee93985ad5d864fb900df09806903d941a54774eef32c1a39ebd24555da9663c48b54e4497030daad0d205228631fca3cb1c7dd31e3d53a344a198daae12c15811f89486e7c166daac9dd8aa00b3540d12d678c9fcb6e761f5a00fa9b9ed23cff7cbee24ccf7f9290cc1e08edb77101cbbaa62c1b598a53b10fa8b7d9754b180c58cfee471d5ff2318118021db3661f0333fa5bc92c3d946b385333cacc045a4ae7d280f25b83485f1af7ce33aad59e1dc1e48c84ea6271940a124ca0ea60aaf70d9d8e45cba66b3cfcb5b8de742c170d1aa52a47a7df3ecf85f366f8b64b90f22b3308118a6159902904b60eb0b5c8e49c3a4188a1180e036ff253d31e25810f8b5bfaa0e72754cf194353b03c89f23ce91c114e2fb7e27cf92df0e147946b1da64888514f247e16c0a3534810227fb9d021b574f6246475a245135770b6aa9c1e09a197bf17b7fd32a8013d5c296affd26cdbc6a2e8be229c60aeab258a579eb2d2d98fce8611fbe868e83e2e64fe1ce977f7d0c20d80d214033fd6c21d7b3dfca3682c781c513e5493b23f6916bde885fe8b39b94008acaed756854ba8a11f7ff360c7cad1a26d22312fe36cdb3bf208c266e24b77f0987416668ae87f7c36e9923dba75219b08c00a610dd97a1fc4d8ad25d694fba9445257b0bd73d7669bebccb941f85a4684d4397137fe2daf23373295bce24c2531aa27051bce14fa948c8fae1a6929e7ffafab0de68da01d6916e6e6fe59f3842593ab22d9b58e363a0a2dc66331ee7c9ce1165fd065b4a0b045ceae2bd8d7062927a977f5a6b8d11e62eac171c9ece297e76e5ad23d5e945446c6dd1373f03907e5659731ba94675439581a384cf2a1bf02a5e117aeffccfde626c1ccbce8c0fccd2dbdc2d592288971cdc168019cbb8df3662ca2f58c592c04d9d54b02b3519c57e13d936b7f97dd72ce6d085026ead28a397862bb8b7ace870b932c3640f0fc6e1dcdcdb5a9dbb8b1eb0f3661dd08bcb67d031dfce94a36dd16ad9645c8d3abb078e4d759f1867894c7f44335862c2a5c5475642493da99954695e57f8dc67ed708033e3c597896f6b824f03f2bac4028785baff06d31bc781813987cdbbef211fc4cf84638972a07a52bb1a4c52f81db4b899606cc9b51e035746e436fbe018f470f151cf6a6cce44ddf398c3267302eddb828aa6e9d6d58a3736289d8ef51893a4279f7bf6d20af4166c53bc8c0534a3916d4baacd151704ba64aef2f6f9becf28728ac1a1c72456e7810f03aff819f2176cee5544bf9ab2642b88c66125ed306be9d599f287836a5719463b9b08345591f9abdd57f6a494d950ff00f49863238e59dec12292ca0609a61b3473cd864565bfb31b4c5c430a8bcd144e1b01dc0f553c53b772747da454226b39707273f62b74eee16da0c762001ae833e33db02b2dac00dc5b2598df60e5fb721fbe8b006ec6f1a784b80595d9a6f6830c320568f03442f6ca41b4eb5d388ba18e47ffd730a267365fd70d82d7cbfac4e", 0x1000, 0x8}, {&(0x7f0000001540)="6c68861d99766dc889f3923a017f0d43cb1adefe7909c286b263125833f8873ca4022afc07bedd8c71d79ffd9720d01914298406953fc0b9c0ed53fe6d13cb62f1e7db7e36aed8386ccb50b14cc3ecdc4cca6140f49951e8f763262b17161d87b672aee46c970ca46ffef9cd2dd8", 0x6e}, {&(0x7f00000015c0)="b9e4849dc196e9dd8ad92e252ab9c26486e20292", 0x14, 0xff}, {&(0x7f0000001600)="0f52622d564973440a062219308e5a", 0xf, 0x2}, {&(0x7f0000001640)="006fa483ed98485295a42b20af9144d904335e097df622ce86f44cdae32852d56d10bd157a15954b87933965202245a0a71d69067dd4a219f530fc6c6894fb4d70ec799e5aacff2d7aa28131fc4c18518dc395f7e14a6317f9de9138cd70b246d97965d64ef02d904905fecdb2", 0x6d, 0x4}], 0x2000000, &(0x7f0000001880)={[{@dots='dots'}, {@dots='dots'}, {@fat=@uid={'uid', 0x3d, r6}}, {@nodots='nodots'}], [{@dont_hash='dont_hash'}]}) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8100201}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x9c, r5, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x49b, 0x6, 0x6, 0x8000]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x46}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x27}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5, 0x2, 0x3]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24005) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$key(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) write$cgroup_int(r9, &(0x7f00000018c0)=0x73b, 0x12) fcntl$dupfd(r7, 0x0, r7) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r7) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r9, 0x0) r10 = syz_open_dev$amidi(0x0, 0x2, 0x40000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r10, @ANYRESHEX=r10, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r11, 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x88, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@nodevmap='nodevmap'}, {@access_client='access=client'}, {@msize={'msize', 0x3d, 0x10000}}, {@aname={'aname', 0x3d, 'ppp0(!{wlan1(-[cgroup'}}, {@cache_mmap='cache=mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}, {@noextend='noextend'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}, {@uid_gt={'uid>', r9}}, {@uid_lt={'uid<', r11}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@appraise='appraise'}]}}) fcntl$dupfd(r7, 0x0, r6) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:15 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = gettid() r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x632480, 0x0) recvfrom$rxrpc(r2, &(0x7f0000000300)=""/148, 0x94, 0x8161, &(0x7f00000003c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x24) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sched_getparam(r1, &(0x7f0000000000)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000280)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:15 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000040)='\x00\x00\x00\x00stem_r0-p\xb1\x9e\xbf\x88\xe8j\x9a023\x00\x16n\x9f\x83\xa7:\xea]\xe9\xb0/]P\xa7gq\xaf\xf0\xe1HC\xd3\x1b\xc5\xa1a\xafL\xe2\x95\xf2i\xbe\xa3b*\xa6FW\x06\xd8\xf5\xf7]\xe2\xd1\xe9\xdd>\xb8\xa6i#\xeb\xf1\xd4V4PG\xe5\xa8QB\xe8\x98n\x1e\xe4\xa0)\xc5\x8f\xd6\x86\x12E\f\vE\x8c\x84\xa3mkQ\xd3\\', 0x70, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x24) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xffffffffffffffff) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r2, r3, 0x0, 0x96a8) write$P9_RSTAT(r3, &(0x7f0000000180)={0x6e, 0x7d, 0x1, {0x0, 0x67, 0x3, 0x9, {0xc4, 0x4, 0x5}, 0x40000, 0x5, 0x4, 0x400080000000, 0xd, 'procsecurity!', 0x10, '$[vmnet0vmnet0:.', 0x11, 'security.selinux\x00', 0x6, 'proc&-'}}, 0x6e) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r4, r5, 0x0, 0x96a8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x30, "7151cf6f2c711239ced84e86db29feff199c04a5901d9ddf2c7a6c79f7ed8b19d92341eee4dcc5664318990b5194f392"}, &(0x7f0000000240)=0x38) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={r6, 0x5}, &(0x7f0000000340)=0x8) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x10100, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x2000, 0x0) fsetxattr$trusted_overlay_upper(r7, &(0x7f0000001640)='trusted.over\xdf\xaby.upp%r\x00', &(0x7f0000000400)={0x0, 0xfb, 0x1015, 0x7, 0xc6, "051000000079000800", "9f45eafaef4fa284c854298a7844ff1089e1add4ac762f2ffe8e4336b6b937441d7f1d220b3966b3634a41d5213482cb720b2864b2903fbda9f66e6c80598c39829526c9ed9133bc08f4931bdc709187f09c4d81718d0a2b1218b7c779b0d00d96dc0c482990053499f98144885c329d964dc8f6e6d20c09db94c477c82dba81fdaefc80429ccaf693f21215d6183a3676a22e96344737c3c4670a3bdee8c5705ba25dfd461395fb14faa59ed1adda85bad36b1ec903f1dee3ad29f0066b29a7f6d382a92a0b751980dec380c1cedaddfeb49803b0e84eb6be74d72a0970f910ad3e80aefd27d88a8d1268549b7c2590b27806f68266ec6d61186c5ec0ea8f106de096794486236b203152152124a7cf0ec418671713911d3775a07a295d42892e732dd4da11bb748c65f67ca7237855603c5d4d1a837a2e51c4c62b11e62267023bcf84e7b24c661db880498033145d05ed68f31e78d25b35698aee32a87f4de86d0bd2bf289fa4dca6516e65203d99b47bf15d0f2374df865d317bdd44b2cbee3070fcc1b90cdf60103f636b7cbd6d0ad101b62b88fe592eb462912401120f51ace879487fe7f7a004c06c4cece8591b65f8df2bd17d60573adaf54d181d911b913f6226eb772a7d92030e05c81dfc8f8b00891bf2ec7ddf44cdaeb13220aa4d2b25ab3d7fc09c3c999dd62a230dfdb53d5b1e8e2aa2440384fff36e759f667e9655cc5dc67f8679b3ad60f0b2bbb694a12a13d9fe388960269d1af3b679a00ce267dc273a8b3fb0c5b39e58114f25fceb0ac0e092fbb9c3c41a773315d0d9708c9457cd87b1e160bd4ff7cd08937dc4ebb4a3efe85743c1fc9bb05ff4023232b8092e9541b748ef579e3220dd07279d655a18d29dfd9776d6d729c83352af600f25d71695238d0076b5d5cf7dc0bcf8b53f02319aef485f44064ec2cf3e01b58902ac9e2d5a0753aaf91057cc3a1d1cfa7e3627ad216f3106175ad87f625180b5b3dfe487263432f553be4109cc3cc0491aaa8b0b4225e6e8806ff159a3c6eb68974c7bc25af37442840447d57cbfef94689f133ba2312325b63fa823d1a049fa5a39eab51ecf4ea46333a2a3b3cb195ab289164b551f4e18b96824a75ee9cd937855a5e518c475f049b488efbd0f5121fc647d9a08e8b91d88cb2b19b5f41611f55b7e149d9b0c1806f5a091d6ba6880f974ed47cc3804cbdd804ae32ab82594fa78bb57ff6bd4de341050d91e6075bbe67c5b6a1cc80463e303289d852ba0f2c597751fb88012a4279cf0f44539d2c71260a69a7dd5d967936e5618fef4d156bb2d6b24b9671aba7a70d8b001e68102726fb871ed82a7f787a061c5315b5ab5affa2785bd44e3108d758c545ca6044ba4e450e049df41115564fea47448fa2d53ebab4137ca233f1734d1827da5d9fbb94334f40bdada6ce388c4b32168a748afcd97f26674af847df1199d70e9bddb16eb794cdb09467921f537b1a97be916e93d8a9f66480bcbf7fd35d258910977e0a47b50229784122ce3515f19e11c4ed73ac09b28328bfd200ccb1e872a937d8f8bb04a71631a9291baa2008289761f149b9f0120ca708e2b041d64d7e031c5a0dddf977f39f6138ff9c4ee322faf9bb7d2871c4aafc4bd27a81da08e066e826ae3b2aa3f6325eed85ab2c0cdb5c6661fdfe7577cdd93295e6176ea96c2e086f9ab15c3677a64b66bd964dbe2349f8a3007b16fb9ddda4529a87e69edcec0b5ce8198241d331abb3955a8df04bcb62922ba7a736e4955f7e725e2bf616dfe393085869b89960e298dd9041084332fdba758718efc5e85d47c3a55ffd13d63267fd77ab962977ac6de56707ceff09f71bafa739f810efe9a3862ff04ed69c504c07449ccc54d318c3be857d89943faa1c45c66d54497da081673b8cd1e097584eeea7563cc4b58413dc92f9cbfd025edb77a41ce1ac0077dc6345e56cc9ce328a82ae6f4206fe22af64fac7c4ea474aa1a45c3f75cf42940c818e982fe8350acff346c8f0503cc4c8953c1d394a41763dee9f750454c7b2ce378ec887b3635bfda0d27b48f81a970a9a944a0a2bb57dafeb502152f3b5999c7bbb3823b58ef86078c71cd38be41be48524503948dc1864c43a150a52fd742572a49ed18d684c88ac955f84848b0e9653e3ee0b333c3b9679ba93f03a4518899668a06f70635a14b60ca5f11a3560c75de00865a2bf31220a65d37fe45a8073b6aabcc23f43c43560adbbc7fc21f54fe3607744ce79719f06cb68096e88c48c10c6bd57e723fb4e4f85172b01f04bd91da27d936c551245286dddcd77ccfd6325667a0857cab3bd830c61dd861392973fde507d2b5b2cd6633ca4d3d2c3bd9282b22040e581c554e9596e58fe0065624197703631ad127e7c0d095c29001ec58557249fe2822a6ef8e3368b360de0de686796e11f2554a5b790e487e000fd475c70e1c80d481f7b8de4c824f254fe9928baae5b1ebf3a7598ea8bc7cfc7b686666f3d30903102b69ffeee1b3ca1eb09d0aea17a3de3ca3a77220d1d5dc710f4adb28d4a393b9bc657d5f11ba675abc62fe426d3a969066a9fcd0833cebe87fb5f347ed551ae1c194b8cb7a6b1901e15de449af89d91e5ffdd17e4906d5b90779e0f669e14a21c79e76074017a5121a22c51def08ae4ee70d56874dd035f381f8e6d9f91799ecd1fbcc3f3f745242ae2da3d2569125ee66364bd0482bd6fb718c7301d37197ba7342afff8f9a6eb976c27f04bb4809f9e1b1b56bda7d69e91dcadce7960cd89fc0125d239de11ad13fb687f231192315d921315c4e29bbdda44244dc450bf51afe75416e2fb7612a062421445cc0f57e9b3d7bd6a976796617017c0da8680297f3dcc51eadc0494905bb283988782066ee14604f332d2ff601288a92664dd89e17b0cf26b0537e4d1bb98f7bcb90fa6eb87167928e4d1301217815817ec52a1d98f21bca08427daa31d2faf6dc7b16a12e05350870aa425b580ba7d262860da1a82952c9c791b7bf1e45b8c1a99da404886348b60ae4692eac81adcc14f53e4f9947d7b599f02642685ff96d34250aab0c7858043d851d597e19d870f54ace6844711108500a4b2bf9a893e74eba09b0aadff830967826b77a832d55832e87bdded902271cf982277bf8f2b61d5b5efcf146f039fb19b1f104951d2878aec55fee09e74e35af62e451a2274caefbbdc281313f8fab5cf33a5232462652b4dd4acc31d36166897dcf8a31797f71c33a297fb4ac5be03dc235a15a2d7137b09ac7567d48c903930c3ddd88a2f9a458a323a5b06353c2e2c7abfc9f11f22697bee9e1b49dfd93ad22fa3269b9d176279ad74705bde51197c5cd00df8c420a2df317bc3bc9f3f963f6be7541c3b1491a49239fa303c609fa6e8c643d56616905c25970723f2590aac31a07aa86a5f996175bf285d8a6f75ca7e7c24e06cc40c443d36f5686feb7636388f9cf682d6516ef5b0e25c452a5da9ffdc899dcd14e20e738473c8a41d940a01d5e317c6ecb34614ff751ed032062d1ebcdb6482ff8be862fae4d5c5f1ea76874b99d9c2b963ada30790baad470c4a4fbbe46b530043031cf29191569fcda36026e5badbffb819daddfd0739a9a67180f8c4962fa3cdcd7493cfb0f01ec294d5f8b5bc573e887da96f2be71b07f2264e7049973a1983bffefcf06db6978e427236cf11dad2fa16d68605a1ab5fe10bbca623501acae3c454898904ec3a139d14d4521467a576b7c2744eb31cb1c83f65d0c4edfda621841f9761df01e809975391d5fac0fd3d19850a78473609da52c41e031c81f971461209d6f2f0979f1528362d9f034d175cdb47eb2b2df0a5e35c50e07701157b7dfb7ecc5e4e3985d9b489a6d9d653496d6f21db16a37c2870cb4139d8116b6a3eafa401e93566319cf0610d86254a751c3c3b5cba7da78f7175ebf8705e19da7422a3bc437a47d04acf2b6c8f65f10fd61c74750d090ed2a28b931f6198b99fea9b9a761f7ee928c1d366bea4654402c16d263eded13970951c50d50bbb47dd0d60f4655a3c353a76e13e2c25cf4d3d8caaa4c8537a1f9dbec8db94a3beadf0303d3f1de2aa5e677902c8d9d5f80605a9726865ac6f01ecfab08fee0e89cf7a0357fba50280e53be7c9ab6af71d96b222fe6aad971b201474472d92e52d2a692bb7a054481070ec0a05fab99033e4732eca8255b5540a13fbe5362ee1cfa61c58c89ef47a5ac42011daa06d1b9b92ca0db7e5af08ceedd07ea0086f1cf076bf7f047655cd7fbe186a1135f9a427aadcdfedc7f19c48bb20a00925416a4a219eb24321a3bca5e3ddb7f112d27b56af78d035050ff17dc7f1c02758b9299457ff735a903d291aad08d4786eaae64e5c0fa4ea00b946518506477eaedb31a3f12c65cc420bf4c0bba007d0b62a97c51ee58004f1af02a1487f7a22d5998f2602504a8f4c3622c3d01d2c178d68609376b7db0e2a46579c40cff871c76f0979b5c38a4d322955cb2196b2e3664c353d124d137273e2c01a730b7a58134295109156a11ffec8643e997286bb163f6dc817414fa1cd41ff98018ca8a0394ac46b17a8d7a8439741ef67a728c0474a9697466deecd1752112c12f385e29f9e6ab1bd16d9a529c4a0e0c88534107603200a2d8034897cbd9bd74a10dc7814527b9d98f0eed9c4bae233e7c058d636c454b7618e79fa3e5cd1bd5bd73a18d199d390c22d744ef1635e3af3a1a659de229f7cedc56e9535a6e095431dc425a236bc41a88aaf58ebf9feac831206a87c24f08c290d58a1190c79ac502d25e3c92678b19f931823b145295a71934ea58f550f7035d86cbef4494f21968298cf36eef12a236153758439b530c502935f207bd44d8c7720b08c10fa8f3bc6b313b862078d1a2fae07d7de1ef544f9fcb8843901d24e2df145ec12db4dfa8a1a243fb9fe0bb8477e8ebfaffc4e0f7a8f618a0f32da60c11b301df00653dc6257b8be45c4661149b5da7229d30657facd314d86ac0173e0154452c0dfd0f54cdc51a36b205a734937d4ddc4de0cb35416d731b4865000c7bb713f8a0efc47d3b58f052883fad3ba5718fea8a795dd6da1ea85fd35765adfd559ee0a224c1b7241beb8eb13062c6cc9e4eaf3169ebdbd3f0a2f465e672e8878674a8842a9dd232b2bf9e67f221adb408a54d5b26d8a182e48c6447d282a7fc82d33b2c2e14c41ba975ea8f9577fa932fcfc2d63fc2a7afb077a1d3d5d29d84b642eda8b3a471c71322a621fc579f24372bc70e1b63f33a7693e503726629a24afb6ea7f6774cf1cd242136f142288ad3d8c0ee6bb6b16a1978ca05d74c39355a8c5174c3d1df7fc46d09378e8adfb1e5d6963cb27ea8f45be04e382e6a334cc39bd32345611d252e073d2974d5814f0041cb6ff79438bf7e2910133379bb2eb0526dd6cdf896bf44011f61f9e08d8700f187179769370a40cc9abcfca58b2876e6b0fd4ca9963503178e0aee29d3474ff2e9eeafac14f82c7b1e8f5408660e646a276ca60af9a25436caae3f7580d523d223cbc2a6a260961e04e9dd0b084d57ee736830e34b420ffe2a9e54f45aebec98081fdc692f29b98c9ee25d72cee4e6893dcc2b709fea0ad4e366ee5d7d921375e1d771e5c4dc4fd672aee38c2d2936c8f362d41e36527609fb701d6c98acde5e4e034f10ab364ac37518394ec9f47a186db207d4e03d5d8868dca80d61708e9d27a48014fa1571cb2a4d0f56fceab9a7e63e306fead930e200c709d0641400"/4096}, 0x1015, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') r10 = syz_open_dev$sndpcmc(&(0x7f00000014c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x7257e86a4d973bba) ioctl$EVIOCGABS3F(r10, 0x8018457f, &(0x7f0000001500)=""/202) sendfile(r8, r9, 0x0, 0x96a8) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r11, r12, 0x0, 0x96a8) ioctl$UI_SET_PHYS(r12, 0x4008556c, &(0x7f0000001600)='syz1\x00') ioctl$VIDIOC_S_MODULATOR(r9, 0x40445637, &(0x7f0000001440)={0x9fe, "5ea7368e9ecedddef9d4dad84ad55913193b491121cd0d316abc4bdab43db74c", 0x80, 0x5, 0xd9, 0x4, 0x1}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) sendmsg$key(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$BLKTRACETEARDOWN(r14, 0x1276, 0x0) 22:52:15 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x226, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x7fffffff, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r3, &(0x7f0000000940)=[{0x0}], 0x1, 0x600) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000380)=""/55, 0x37, 0x2, &(0x7f00000003c0)={0x9, @remote={[], 0x1}}, 0x12) write$P9_RVERSION(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x15) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r4, r5, 0x0, 0x96a8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000200)=0xc) write$P9_RGETATTR(r2, &(0x7f0000000500)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) request_key(&(0x7f0000000400)='trusted\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xb) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x300, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x2174) [ 216.982509] audit: type=1400 audit(1570229535.556:57): avc: denied { mac_admin } for pid=8824 comm="syz-executor.4" capability=33 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 216.985395] SELinux: Context is not valid (left unmapped). [ 217.142322] audit: type=1804 audit(1570229535.636:58): pid=8829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir376326040/syzkaller.BfJfjc/71/file0" dev="sda1" ino=16753 res=1 22:52:15 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x4000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1c00, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000080)={0x3, 0xfb0, 0x7, 0x6, 0x6, 0x4}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000280)='/dev/\x00\x00\x00\x00\x00\x00\x00?oy\xbd\x96[+\xa3\x1a\xef\x9e\x99;tg\xdd\xa6\x94I\x80\xa5y\x97\x9e\xdfc\xbcY\xfb,\x96X>h\x95\re \x9e\x13\x8f\xe1s\x1a\xb0\x11M\xd7\xe1\xa7\xe4:\t\x00\x00\x00v\xc6CL\x96\x80Z\xe0') openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000000c0)=0xb51) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x0, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xfff, 0xfffffffffffffffd, 0x1) 22:52:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r9, 0x0) r10 = syz_open_dev$amidi(0x0, 0x2, 0x40000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r10, @ANYRESHEX=r10, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r11, 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x88, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@nodevmap='nodevmap'}, {@access_client='access=client'}, {@msize={'msize', 0x3d, 0x10000}}, {@aname={'aname', 0x3d, 'ppp0(!{wlan1(-[cgroup'}}, {@cache_mmap='cache=mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}, {@noextend='noextend'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}, {@uid_gt={'uid>', r9}}, {@uid_lt={'uid<', r11}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@appraise='appraise'}]}}) fcntl$dupfd(r7, 0x0, r6) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={[], [], @dev}, @in=@dev, 0x0, 0x4000}, {@in=@local, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x6c, 0x2, {{'cbc(twofish)\x00'}, 0x108, "f819fcf56e0501c5982889b2200400000000000000641877c49d2d21d7ed58ed99"}}]}, 0x15c}}, 0x0) 22:52:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000011000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 22:52:15 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x226, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x7fffffff, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r3, &(0x7f0000000940)=[{0x0}], 0x1, 0x600) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000380)=""/55, 0x37, 0x2, &(0x7f00000003c0)={0x9, @remote={[], 0x1}}, 0x12) write$P9_RVERSION(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x15) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r4, r5, 0x0, 0x96a8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000200)=0xc) write$P9_RGETATTR(r2, &(0x7f0000000500)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) request_key(&(0x7f0000000400)='trusted\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xb) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x300, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x2174) 22:52:15 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000080)=0x7, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r4, r5, 0x0, 0x96a8) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000000)={0x2b, 0x3, 0x0, {0x5, 0xa, 0x0, 'eth0ppp0*\\'}}, 0x2b) fcntl$dupfd(r3, 0x0, r3) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r6, r7, 0x0, 0x96a8) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) 22:52:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1000000000001e, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x3ffe, 0x4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x1}, 0x8) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r2, r3, 0x0, 0x96a8) bind$ax25(r3, &(0x7f00000003c0)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) dup2(r1, r1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="680000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6], 0x68}}, 0x0) 22:52:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r9, 0x0) r10 = syz_open_dev$amidi(0x0, 0x2, 0x40000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r10, @ANYRESHEX=r10, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r11, 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x88, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@nodevmap='nodevmap'}, {@access_client='access=client'}, {@msize={'msize', 0x3d, 0x10000}}, {@aname={'aname', 0x3d, 'ppp0(!{wlan1(-[cgroup'}}, {@cache_mmap='cache=mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}, {@noextend='noextend'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}, {@uid_gt={'uid>', r9}}, {@uid_lt={'uid<', r11}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@appraise='appraise'}]}}) fcntl$dupfd(r7, 0x0, r6) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xfff, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10001, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r5, r6, 0x0, 0x96a8) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="0100008085b529e3f078c93815997dfec91e8cfb24f1e57be2bb8e5c776142c4dac8bccfd97e838b00fad9d56c0000000000000051b640f119e7f88796362000e0ff", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000240)={r10, @in6={{0xa, 0x4e22, 0x4, @empty, 0x3}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000100)={r11, 0x5398}, &(0x7f0000000180)=0x8) r12 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = syz_open_procfs(0x0, &(0x7f0000000380)='stat\x00') sendfile(r13, r14, 0x0, 0x96a8) fcntl$dupfd(r4, 0x0, r13) 22:52:16 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x226, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x7fffffff, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r3, &(0x7f0000000940)=[{0x0}], 0x1, 0x600) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000380)=""/55, 0x37, 0x2, &(0x7f00000003c0)={0x9, @remote={[], 0x1}}, 0x12) write$P9_RVERSION(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x15) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r4, r5, 0x0, 0x96a8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000200)=0xc) write$P9_RGETATTR(r2, &(0x7f0000000500)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) request_key(&(0x7f0000000400)='trusted\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xb) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x300, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x2174) 22:52:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r6 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r6, @ANYRESHEX=r6, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r7, 0x0) r8 = syz_open_dev$amidi(0x0, 0x2, 0x40000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r9, 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x88, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@nodevmap='nodevmap'}, {@access_client='access=client'}, {@msize={'msize', 0x3d, 0x10000}}, {@aname={'aname', 0x3d, 'ppp0(!{wlan1(-[cgroup'}}, {@cache_mmap='cache=mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}, {@noextend='noextend'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}, {@uid_gt={'uid>', r7}}, {@uid_lt={'uid<', r9}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@appraise='appraise'}]}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) [ 217.750259] net_ratelimit: 2 callbacks suppressed [ 217.750264] protocol 88fb is buggy, dev hsr_slave_0 [ 217.760255] protocol 88fb is buggy, dev hsr_slave_1 [ 217.770942] batman_adv: Cannot find parent device 22:52:16 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x4000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1c00, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000080)={0x3, 0xfb0, 0x7, 0x6, 0x6, 0x4}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000280)='/dev/\x00\x00\x00\x00\x00\x00\x00?oy\xbd\x96[+\xa3\x1a\xef\x9e\x99;tg\xdd\xa6\x94I\x80\xa5y\x97\x9e\xdfc\xbcY\xfb,\x96X>h\x95\re \x9e\x13\x8f\xe1s\x1a\xb0\x11M\xd7\xe1\xa7\xe4:\t\x00\x00\x00v\xc6CL\x96\x80Z\xe0') openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000000c0)=0xb51) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x0, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xfff, 0xfffffffffffffffd, 0x1) 22:52:16 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x226, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x7fffffff, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r3, &(0x7f0000000940)=[{0x0}], 0x1, 0x600) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000380)=""/55, 0x37, 0x2, &(0x7f00000003c0)={0x9, @remote={[], 0x1}}, 0x12) write$P9_RVERSION(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x15) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r4, r5, 0x0, 0x96a8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000200)=0xc) write$P9_RGETATTR(r2, &(0x7f0000000500)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) request_key(&(0x7f0000000400)='trusted\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xb) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x300, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x2174) 22:52:16 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) fcntl$dupfd(r1, 0x605, r0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r2 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000840)={r3}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000280)={r3, 0x2}) 22:52:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r6 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r6, @ANYRESHEX=r6, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r7, 0x0) r8 = syz_open_dev$amidi(0x0, 0x2, 0x40000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r9, 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x88, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@nodevmap='nodevmap'}, {@access_client='access=client'}, {@msize={'msize', 0x3d, 0x10000}}, {@aname={'aname', 0x3d, 'ppp0(!{wlan1(-[cgroup'}}, {@cache_mmap='cache=mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}, {@noextend='noextend'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}, {@uid_gt={'uid>', r7}}, {@uid_lt={'uid<', r9}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@appraise='appraise'}]}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:16 executing program 2: msgget$private(0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x1, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x800000fffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) socket(0x0, 0x800, 0x8) syz_open_dev$vcsn(0x0, 0x7, 0x0) dup(0xffffffffffffffff) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="ff5b00a59079830600c736a69007f8fffffbff8100000000000003ffd4110214b1b5b3bb0000000000f7ff0000000000000180000001000000d746e6601dc20bb32706c5a920220059a754331412a59ca7559636f89df6826466fe6a1a30185d42b76e6893ce8002306e68fbc7722621524fe3cd8b4271a86839639fc4d6393a32c8b36a9aa98670a8e5eef192ebbd5398ee773028cd684b16e6f46feb53a0f0d326b61889ebae946b2c545f4e421b992fc631c629c862e9c82c199d89f09fdc309f6b1381f61cc3f105a6c04686a9b78103431f70a4cf46cc6b74dff4fee44cef9a6f276e30"], 0x25) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 22:52:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r6 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r6, @ANYRESHEX=r6, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r7, 0x0) r8 = syz_open_dev$amidi(0x0, 0x2, 0x40000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r9, 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x88, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@nodevmap='nodevmap'}, {@access_client='access=client'}, {@msize={'msize', 0x3d, 0x10000}}, {@aname={'aname', 0x3d, 'ppp0(!{wlan1(-[cgroup'}}, {@cache_mmap='cache=mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}, {@noextend='noextend'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}, {@uid_gt={'uid>', r7}}, {@uid_lt={'uid<', r9}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@appraise='appraise'}]}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:16 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:16 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="017c45ef231249c5c7d38dae45db0f6f341d2caf776cb790470235b2c982"], 0x1e) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) writev(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f00000002c0)='./file1\x00', r2}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$MON_IOCQ_URB_LEN(r4, 0x9201) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) sendto(0xffffffffffffffff, &(0x7f00000001c0)="1ff883ddad4f9fe3602169b3752453ec226af62dda9d53497064537ab55f4102d50fb564e478b46031004fb819c3f66635ceda4a022e4474a826b109344f2b0eb334b299", 0x44, 0x810, &(0x7f0000000480)=@xdp={0x2c, 0xc6ab9771c735a790, r5, 0x5}, 0x80) 22:52:16 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffff) getpgrp(0xffffffffffffffff) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x24000, 0x0) connect$x25(r2, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) stat(0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x80, 0x0) getresuid(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0xceff, 0x2, 0x7, 0x6, 0x10}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="610000000df21bc85b7dac04a788261dbe9745c3b2752d0ed7b5489b0f666507d5f456d3aff264904c6f43576b311b61294892a67d6f6a0735f602bca0844ea341efd94e322680ea71e47d7199fd1a6a78ffa0284390742e1b8341a7e1f05711be7ea114bd"], &(0x7f0000000040)=0x69) gettid() getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000006780)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(r5) 22:52:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r2, r3, 0x0, 0x96a8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000008}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="6e7a1a44a6a4d52046b5928871fe7939c8faf3e32239edeb9b57baed4400c5b3542e3c2d90b6bb5ce28831c65b881d0c48f584929474a231ea294eb913e9352f4a6266c39431a5c52bf18db224924752d437323fe90569138a6c5f1b2d52432c2136e0f0db6207e3e2ce4abc0af777d8cb23e7a1c5", @ANYRES16=r3, @ANYBLOB="0200ff7f0000380001000800090044000000080005000000000008000800ff01000008000b0073697000fc000500040000000c0007004000000020000000"], 0x3}, 0x1, 0x0, 0x0, 0x4800}, 0x14) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612697463915e38802a9d8aea872943afd87e23598b47da7316270146d0e02f8e63ba8863cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7573726a71756f74613d2c005ff333f60770b29b6aef9739de96a354eb0be77e503bee6b100d2313f57a265a93075fb85a2830fd46fd33f47dded65579b16b5a"]) 22:52:16 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000380)={0x3, 0x5, 0x6, 0x9, 0x6, 0x3}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x7fff, 0x4) ioctl$KVM_NMI(r2, 0xae9a) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000280), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x2) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:16 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="017c45ef231249c5c7d38dae45db0f6f341d2caf776cb790470235b2c982"], 0x1e) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) writev(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f00000002c0)='./file1\x00', r2}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$MON_IOCQ_URB_LEN(r4, 0x9201) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) sendto(0xffffffffffffffff, &(0x7f00000001c0)="1ff883ddad4f9fe3602169b3752453ec226af62dda9d53497064537ab55f4102d50fb564e478b46031004fb819c3f66635ceda4a022e4474a826b109344f2b0eb334b299", 0x44, 0x810, &(0x7f0000000480)=@xdp={0x2c, 0xc6ab9771c735a790, r5, 0x5}, 0x80) 22:52:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r9, 0x0) r10 = syz_open_dev$amidi(0x0, 0x2, 0x40000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r10, @ANYRESHEX=r10, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r11, 0x0) r12 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:17 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x8, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x221000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000280)={0x3, 0x18, 0x7ff, 0x6, "a88a7ad17cfdbd35a20dc937bc7c1c49bd75af63773706acc85604b57e209e23"}) [ 218.451026] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (1923657432 log_block_size) 22:52:17 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r3, r4, 0x0, 0x96a8) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x5) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) pread64(r0, &(0x7f0000000280)=""/236, 0xec, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r9, 0x0) r10 = syz_open_dev$amidi(0x0, 0x2, 0x40000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r10, @ANYRESHEX=r10, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) r11 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:17 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) mlock2(&(0x7f0000a51000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 22:52:17 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280), 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 22:52:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000200)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="727b73697a653d3078303030413030303f303030303030303030644e595c6e12b8f60760879f2169e0c220d162669aacd10862a0829180bcadab2f857ae6fd257ce7877183f03db3cf510fc6b3e11204235990aed98d0f2d8ba61b91911302000000a8f125f1834b85fcd64acd3aac78c1ff2a814e15451995e9bd3681f5bea18f1a461eb5665b594075d9eea3ec3c6ed2dd27d66f1d64f57337b6ea7b2ca9e65592ac5ebe2125f366bd9752e490afbd731cfd"]) 22:52:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}, 0x45c) r3 = dup(r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) fsetxattr$security_evm(r4, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0004c302997f588895"], 0x9, 0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) write$selinux_context(r6, &(0x7f0000000080)='system_u:object_r:userio_device_t:s0\x00', 0x25) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$uinput_user_dev(r3, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}, 0x45c) 22:52:17 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000002c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e34945b25cbef5018900", @ANYRES16=0x0, @ANYBLOB="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"], 0x178}}, 0x80) 22:52:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r9, 0x0) r10 = syz_open_dev$amidi(0x0, 0x2, 0x40000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r10, @ANYRESHEX=r10, @ANYBLOB]) r11 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) [ 218.794855] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "r{size=0x000A000?000000000dNY\n¸ö`‡Ÿ!ià Ñbfš¬Ñb ‚‘€¼­«/…zæý%|ç‡qƒð=³ÏQƳá#Y®Ù-‹¦‘‘" 22:52:17 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.stat\x00', 0x0, 0x0) mmap(&(0x7f0000703000/0x2000)=nil, 0x2000, 0xad00262a20a83700, 0x100010, r1, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r2, r3, 0x0, 0x96a8) openat$cgroup_ro(r3, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) msync(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$SIOCNRDECOBS(r5, 0x89e2) fcntl$setsig(0xffffffffffffffff, 0xa, 0x4) 22:52:17 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x4, 0x400) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r3, r4, 0x0, 0x96a8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x18) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000000)={0xffffe4f0, 0xfffffffb, @value=0xfff}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) [ 218.963052] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "r{size=0x000A000?000000000dNY\n¸ö`‡Ÿ!ià Ñbfš¬Ñb ‚‘€¼­«/…zæý%|ç‡qƒð=³ÏQƳá#Y®Ù-‹¦‘‘" 22:52:17 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="250600ea121f8039ce71897efed6294ddb16ae2ddfe22cb2d8"]) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='tracefs\x00', 0x0, &(0x7f00000000c0)) 22:52:17 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/s`ustat\xc5\xa3\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806) read(r0, &(0x7f0000000000)=""/30, 0x1000001cd) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff8f}, 0x14) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200, 0x0) 22:52:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x4000, 0x0) setsockopt$inet6_int(r3, 0x29, 0xc9, &(0x7f00000000c0)=0x9d4, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000040)="a2", 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0, 0x0}, 0x40) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:52:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/97, &(0x7f0000000000)=0x61) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb0, r4, 0xae1e4f218822a502, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r5, 0x10, 0x0, 0x4) fallocate(r1, 0x0, 0x0, 0x1f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$SIOCX25SCALLUSERDATA(r7, 0x89e5, &(0x7f00000001c0)={0x2, "bf3c42e4e786966724e97e17ced2442df31043ca883687de80bdb951513e156a4c457ad78e88890fb826cdd53a7b28b6f2119acaa1898fde76eb6930fad02b983be77329f4c3988613c0144fc3da76eb9abacbb7155fb9dcd5781819434f876c1347036894ab657258295103293066e0b86d134e585b5fd97650f8907cbaf4f9"}) 22:52:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r9, 0x0) syz_open_dev$amidi(0x0, 0x2, 0x40000) r10 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:17 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffffe7, 0x0}, 0x20008100) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000fc0)="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", 0x584}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000000)={'lo\x00', @ifru_hwaddr=@broadcast}) [ 219.154243] IPVS: length: 97 != 24 22:52:17 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x50804000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x32ea743f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000033c41d56b55bc62da90e8243b898e00a79f2d491d3c895d443248b0f46fc3ab6ec0fd949dcd14b1ecd98d83b3c2f4919a662492c1d07b2a8217aa3756e784fc8530e2f14acc1c72faaf4d8a462dfec4b2e17372de59ab415b9a3a781a765611765eddbe2091ec6f82c98e4e7d9441ee537d6b4202bc31bc3377be647e10acaa534631afa91e06b28bbafcd3395904bd29fdd89624f1fa8acdbd5f88ad1b7168f78bc687c087b249e658b822141ed55b1daf4dd558a27e2e4e7638df36d61ec63cad98af4d3a540a590df8c4fa64e327dbc89a95bb69cb66bcd7b536a2727", @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf25080000000800040005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x8030) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000280)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000140)=0x54) 22:52:17 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492565, 0x0) chdir(&(0x7f0000000200)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB="00000100f9ff0000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c04000024000705000000000000000000008000", @ANYRES32=r8, @ANYBLOB="0c000000ffffffff010000000800010063627100300402000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800010025030000000000000000000000000000000000001000050022000000000000007f000000"], 0x45c}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x7fffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="08bf01f225f8b4688843cd8f7a50204c8641144bf27fed95"], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) 22:52:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r9, 0x0) syz_open_dev$amidi(0x0, 0x2, 0x40000) r10 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) [ 219.307826] devpts: called with bogus options 22:52:17 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8002}, 0x1c) listen(r1, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x3, [@default, @null, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) mkdir(0x0, 0x120) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 22:52:17 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) ftruncate(r2, 0x8200) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x3) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 22:52:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r9, 0x0) r10 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) [ 219.634101] audit: type=1804 audit(1570229538.206:59): pid=9067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir249410657/syzkaller.VTzE6K/39/bus" dev="sda1" ino=16767 res=1 22:52:18 executing program 5: gettid() msgctl$MSG_INFO(0x0, 0xc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000140)='./file1/file0\x00') close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000280)={0xe, 0x7, 0x1f, 0x0, 0x12, "8eb5935c2940fd1ba4871d1031b533e02848"}, 0x1e) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000580)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) link(&(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000240)='./file2\x00') lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0/file1/file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000000180)={0x9, @null=' \x00'}, 0x12) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="6d657461636f70793d6f6e2c696e6465783d6f66662c64656661756c745f7065726d697333a356713d2773696f6e732c6e66735f6558706f72743d6f66662c6e4a735f6578706f72743d6f66662c706572a34a855bae04168b806d69745f646972586374696f2c6f626a6f7c515fe97c019a5f757365733d2f6465762f6c6f6f"]) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe30, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0x2}}, 0x297) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x10, 0xfa00, {&(0x7f0000000440)}}, 0x18) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r2, r3, 0x0, 0x96a8) read$usbfs(r3, &(0x7f0000000340)=""/178, 0xb2) syz_open_dev$sndpcmc(&(0x7f0000000840)='/dev/snd/pcmC#D#c\x00', 0x4, 0x8000) sendto$isdn(0xffffffffffffffff, &(0x7f0000000880)={0x1, 0x0, "dd8198f8cd3de958a6283bae3adeaba1146b5d5dc6607c45f330b64c96816236f29cc057866579d5a174f47446af9d4abed93da1ad4c1cdfb6579b28a13987d5dbb98439041acf05541e2d3083d9dfd653eed581a63dc13441adc03c8bfb5ea13c5a9d69fc9d1b7bc26f1bf69a0a551dfb2c724445423430614c4f9d76cbf8a1b4034cb4778ab5db0fd5a1fe2d4c6ceebf97704a9340b48938dce520a3c0f6f7a0b30276236f03c043f58ee51da4d72f18e579ae8f82675c38a23893147656505cca5d863a0fa74ac7fa52990c6d609cfd8f1a742730573c5e4daa5fb11554f083e74a031fb2cae4"}, 0xf0, 0x0, &(0x7f0000000980)={0x22, 0x1, 0x7, 0x1f, 0x5}, 0x6) openat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x80000, 0x2) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x38d00c92cff06ac5, &(0x7f0000000140)=""/170, 0x0) [ 219.708108] audit: type=1804 audit(1570229538.236:60): pid=9065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir249410657/syzkaller.VTzE6K/39/bus" dev="sda1" ino=16767 res=1 22:52:18 executing program 2: r0 = dup(0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='fuse\x00', 0x66f9bba01f2c198f, &(0x7f0000000500)=ANY=[@ANYBLOB="70873d62cd09d08285cf22bdfb6e8d7231af56fe245da2a968cd9a07a6795b936b20137c39f696b512dd107a27cd38048ff7aed43959b787a10d70fddfe6b8708658bbecaf9d6a80b0fe72597bcf2cbdeb7f66870d57a8", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303000000000303030302c757365725f0b64fa6f4e3bc8ec55c556b0b3f1666708e79b0cf6722a150c23fcae0861161a5e726e6c43b29b2ff1c3ab34ae9ce87e758e20787ccbc1a930cc9e45ef1db2664600000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB='<\x00']) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000280)={{0x1, 0x0, @identifier="a6b8244fbc755a4eb545cbfae0665026"}}) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/\a\x00\x00\x00im\x03m\x10\x00', 0x200000, 0x0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r3, r4, 0x0, 0x96a8) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000640)={{0x0, 0x3000, 0x0, 0x0, 0x0, 0x74, 0x80, 0x7b, 0x6, 0xf8, 0x3}, {0x10000, 0x1f000, 0x3, 0xf1, 0x7f, 0x1, 0x1b, 0x1, 0x2f, 0x9, 0x81, 0x1f}, {0x4000, 0x5000, 0x9, 0x2, 0x3, 0x1, 0x3, 0x4, 0x81, 0xe0, 0x0, 0x81}, {0x4000, 0x6000, 0x1f, 0x1, 0xb3, 0xd, 0x81, 0x8, 0x1, 0x7, 0x1, 0x1}, {0x0, 0x10000, 0x18, 0x3, 0xfd, 0x7, 0x27, 0x8, 0x6, 0x8, 0x8, 0x5}, {0x0, 0xd000, 0x4, 0x9, 0x9, 0x0, 0x1, 0x2c, 0xff, 0x3f, 0x0, 0x81}, {0x4, 0x2004, 0x0, 0x40, 0xff, 0x1, 0x0, 0x0, 0xff, 0x9, 0x5}, {0x3000, 0x0, 0x9, 0x6, 0x3f, 0x3f, 0x50, 0x0, 0xca, 0x5, 0x7}, {0xf000, 0x3000}, {0x6000, 0x5000}, 0x1, 0x0, 0x0, 0x100, 0xd, 0x800, 0x100000, [0x5, 0x0, 0x1f, 0x3b2]}) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000300)={0x3}) ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) 22:52:18 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) ftruncate(r2, 0x8200) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x3) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 22:52:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) r9 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) [ 219.791602] audit: type=1804 audit(1570229538.316:61): pid=9065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir249410657/syzkaller.VTzE6K/39/bus" dev="sda1" ino=16767 res=1 [ 219.929171] audit: type=1804 audit(1570229538.496:62): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir249410657/syzkaller.VTzE6K/40/bus" dev="sda1" ino=16773 res=1 22:52:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r8, @ANYRESHEX=r8, @ANYBLOB]) r9 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:18 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000280)) 22:52:18 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) ftruncate(r2, 0x8200) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x3) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 220.079500] devpts: called with bogus options 22:52:18 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492565, 0x0) chdir(&(0x7f0000000200)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB="00000100f9ff0000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c04000024000705000000000000000000008000", @ANYRES32=r8, @ANYBLOB="0c000000ffffffff010000000800010063627100300402000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800010025030000000000000000000000000000000000001000050022000000000000007f000000"], 0x45c}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x7fffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="08bf01f225f8b4688843cd8f7a50204c8641144bf27fed95"], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) 22:52:18 executing program 5: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) ftruncate(r2, 0x8200) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x3) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 220.123251] audit: type=1804 audit(1570229538.696:63): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir249410657/syzkaller.VTzE6K/41/bus" dev="sda1" ino=16767 res=1 [ 220.151679] selinux_nlmsg_perm: 3507 callbacks suppressed [ 220.151688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9068 comm=syz-executor.4 22:52:18 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/\\Xf/a\xfejm%m\x00', 0x351245, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20010002}, 0xc, &(0x7f0000000640)={&(0x7f0000000300)={0x33c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x73}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x1da}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa76b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff01}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f80000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf80000}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xfffffffffffffc68}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x26}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7ff, @dev={0xfe, 0x80, [], 0xa}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x230}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x26028002}, 0x8000080) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$amidi(0x0, 0x2, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:18 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x5f1543, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:18 executing program 0: setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)='hybla\x00', 0xfffffffffffffce0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x0, 0x105200) r1 = dup2(r0, r0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r1, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x2, 0x4, 0x1020, {0x0, 0x7530}, {0x1, 0x0, 0x0, 0x0, 0x6, 0x0, "855c8c70"}, 0x6, 0x0, @fd, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000440)={{0x3, 0x2, 0xc9ee, 0x7fff}, 0x1, [0x10000, 0x1, 0x81, 0x4, 0x3ff, 0x80, 0x98, 0x100000001, 0x1, 0x4, 0x10001, 0x10001, 0x5, 0x1000, 0x6, 0x9, 0x1, 0x4, 0x7ff, 0x185, 0x9, 0x2, 0x4000000000000, 0x4, 0x2, 0xf0e5, 0x401, 0x0, 0x100000000, 0x0, 0x6, 0x2, 0x7, 0x67f1, 0x5, 0x71, 0x3f, 0x7f, 0x0, 0x9f, 0x0, 0x7, 0x0, 0x1, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x2, 0xfff, 0x100, 0x9, 0x8, 0x80000001, 0xffffffffffffffc1, 0xffffffff, 0x20, 0x3f, 0xb24, 0x9, 0x0, 0xffffffff, 0x5, 0x40, 0x1, 0x87d, 0x0, 0x2, 0x5, 0x0, 0x3, 0x1, 0x101, 0x0, 0xffffffff, 0x1, 0x1ff, 0x1, 0x7, 0xfff, 0x5, 0x6, 0x8, 0x0, 0x0, 0x4, 0x5, 0xfffffffffffffffc, 0x2, 0x7, 0xffffffffffffffff, 0x0, 0x9, 0x1000, 0x3f, 0x7, 0xdad, 0x6, 0x2, 0x8, 0x0, 0x2, 0x1f, 0x7fffffff, 0xfffffffffffffffd, 0x3, 0x4, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x101, 0xfff, 0x0, 0x6, 0x0, 0x0, 0x2, 0x6, 0xfff, 0x6, 0xd4, 0x1000, 0x100000000], {0x0, 0x989680}}) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000200)=""/219) [ 220.229279] devpts: called with bogus options [ 220.237647] audit: type=1804 audit(1570229538.806:64): pid=9105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir316097572/syzkaller.XowDm5/105/bus" dev="sda1" ino=16770 res=1 22:52:19 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x100000488) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000140)={{0x1, 0x0, @descriptor="1619a4b2a3f3e81a"}, 0x88, [], "bd5ad25e01222ed07815e19f6f9c2fb18c51a9d078f474950fc0dd919bef754ffd4c0e7704bbdaa5543db2a5f7361f88691e6bc37057d6869187cd696c781628fe334bed1e9b12974c99683f721b8338efadcaccee2bfb56c34844bb434c5d5968271d3d5f8214443f5ee7efb3259e024a4ac9f43758b83ddf291b3ba3dd6798db146ef6f51aead3"}) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x65, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 220.357998] audit: type=1400 audit(1570229538.926:65): avc: denied { map } for pid=9114 comm="syz-executor.0" path="socket:[34979]" dev="sockfs" ino=34979 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=packet_socket permissive=1 22:52:19 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x800, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000740)=@ax25={{0x3, @bcast}, [@remote, @netrom, @bcast, @remote, @null, @default, @bcast, @default]}, 0x80, &(0x7f0000000340)=[{&(0x7f00000007c0)=""/53, 0x35}], 0x1, &(0x7f0000000280)=""/150, 0x96}, 0x12042) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) openat$vhci(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhci\x00', 0x800) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x8010, r2, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000380)=""/119) [ 220.550147] protocol 88fb is buggy, dev hsr_slave_0 [ 220.555386] protocol 88fb is buggy, dev hsr_slave_1 22:52:19 executing program 0: setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)='hybla\x00', 0xfffffffffffffce0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x0, 0x105200) r1 = dup2(r0, r0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r1, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x2, 0x4, 0x1020, {0x0, 0x7530}, {0x1, 0x0, 0x0, 0x0, 0x6, 0x0, "855c8c70"}, 0x6, 0x0, @fd, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000440)={{0x3, 0x2, 0xc9ee, 0x7fff}, 0x1, [0x10000, 0x1, 0x81, 0x4, 0x3ff, 0x80, 0x98, 0x100000001, 0x1, 0x4, 0x10001, 0x10001, 0x5, 0x1000, 0x6, 0x9, 0x1, 0x4, 0x7ff, 0x185, 0x9, 0x2, 0x4000000000000, 0x4, 0x2, 0xf0e5, 0x401, 0x0, 0x100000000, 0x0, 0x6, 0x2, 0x7, 0x67f1, 0x5, 0x71, 0x3f, 0x7f, 0x0, 0x9f, 0x0, 0x7, 0x0, 0x1, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x2, 0xfff, 0x100, 0x9, 0x8, 0x80000001, 0xffffffffffffffc1, 0xffffffff, 0x20, 0x3f, 0xb24, 0x9, 0x0, 0xffffffff, 0x5, 0x40, 0x1, 0x87d, 0x0, 0x2, 0x5, 0x0, 0x3, 0x1, 0x101, 0x0, 0xffffffff, 0x1, 0x1ff, 0x1, 0x7, 0xfff, 0x5, 0x6, 0x8, 0x0, 0x0, 0x4, 0x5, 0xfffffffffffffffc, 0x2, 0x7, 0xffffffffffffffff, 0x0, 0x9, 0x1000, 0x3f, 0x7, 0xdad, 0x6, 0x2, 0x8, 0x0, 0x2, 0x1f, 0x7fffffff, 0xfffffffffffffffd, 0x3, 0x4, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x101, 0xfff, 0x0, 0x6, 0x0, 0x0, 0x2, 0x6, 0xfff, 0x6, 0xd4, 0x1000, 0x100000000], {0x0, 0x989680}}) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000200)=""/219) 22:52:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) [ 220.636714] audit: type=1400 audit(1570229539.206:66): avc: denied { map } for pid=9126 comm="syz-executor.2" path="socket:[34997]" dev="sockfs" ino=34997 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tcp_socket permissive=1 22:52:19 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x4180, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x8, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000440)=0x4e, 0x4) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r3, &(0x7f0000000380)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1, &(0x7f0000000340)=""/50, 0x32}, 0x121) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:19 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xfa, 0x101100) write$ppp(r2, &(0x7f00000001c0)="609692ddeeeb909c4fcdb4c6c59d720c102e57670dfd338e73087285649bb02aabaeb0c8bd3a63c82e3db6a98979ddd826cc5719169827caaded60ad1fa07221ab03dc6b91fceea15da3e5588b6a70645063a1a9a56db229e067291cb05492e62d32a769d92190148d82162b64878546474f139568a624ad999693c0c9ae30697f3db77c06713d9122d27f47ba574d2fdff634b586828ab28680195a2e0fcefd940465a98c6e9d3ddbffbf62e8ddb898895953b2d4f2b816d63dde058bca617ac9ff969bb24ba110792932aad01fbe745bd33ff15f2f3a9c2161", 0xda) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x949, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x8001}}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 22:52:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1}}, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x61883bea5100b932, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xf17) unshare(0x40040400) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x7, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x4, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x4}, 0x0, 0x5e, 0xeb67, 0x0, 0x0, 0x5, 0x6}, 0x0, 0x9, r3, 0xc) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x4200) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200e80, 0x14) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x810040, 0x0) r4 = fanotify_init(0x0, 0x0) fanotify_mark(r4, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREAD(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x153) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) close(0xffffffffffffffff) move_pages(0x0, 0x2, &(0x7f00000006c0)=[&(0x7f0000000000/0x2000)=nil, &(0x7f0000004000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1], &(0x7f0000000180), 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) r5 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) getpeername(r3, 0x0, &(0x7f0000000100)=0xffffffffffffff59) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x9f7, 0x63, &(0x7f0000000040)="afadd26e7504c5f39e22000b0b9b81136075d19d7e724c84e17330c2b77f599eaa454d42859a1b4ae09d7840cc7d1abca1fb636017f91eca69b09982011b18b41ab97877596225a1c1143898b8b5175ccf09dd7b3854112c49ecc0548ee15a0d70237e", 0x9439, 0x4, 0x6, 0x8, 0xfe00, 0x0, 0x3, 'syz9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe3\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009[JB\xf7\xda\x8f\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x0, 0x0, 0x0, 0xb, 0x3, 0x401, 0x3}}) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000380)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 22:52:19 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffff) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000280)=0x4) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') 22:52:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:19 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x9, 0x2010, r0, 0xfffffffffffffffc) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') [ 221.120954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9155 comm=syz-executor.4 22:52:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) [ 221.198470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9155 comm=syz-executor.4 [ 221.215503] IPVS: ftp: loaded support on port[0] = 21 [ 221.265657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9155 comm=syz-executor.4 [ 221.347192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9155 comm=syz-executor.4 [ 221.389086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9155 comm=syz-executor.4 22:52:20 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000280)={0x4, 0x70, 0x6d, 0xf9, 0x97, 0xff, 0x0, 0xff, 0x80204, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x6}, 0x6100, 0xfff, 0x25, 0x8, 0x9, 0x1000, 0xb2f8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0xdf, 0x80, 0x3f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x7}, 0x8, 0x5, 0x0, 0x5, 0x0, 0x800, 0x7fff}, 0x0, 0x10, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, 0x0, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x9) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 22:52:20 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000280)=0x10, 0x80000) sendto(r1, &(0x7f00000002c0)="801ce519fdb2f0fe949e49bc592d34593498c5a1445b8272ace3d92b89d826858a08cf3050d56f67a3b0862c91a38061507f50bb24c8a833a769f24c1bf9cff72f3e7a0cd6df14ebd14aa0b734361f0bb19911f9955cc19b617551bf7a4bfe26b00c02aa4d3a1ad62d69559c1da6a428bc6d14ea700fed08a0b6cf589c1a9415329c8ab2b93acfd49a8c1eac62b0c066e5079c297cba0b", 0x97, 0xc00, &(0x7f0000000380)=@isdn={0x22, 0x0, 0x7f, 0x9, 0x15}, 0x80) mmap(&(0x7f0000706000/0x4000)=nil, 0x4000, 0x800002, 0x30, r0, 0x20000000000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00') r2 = syz_open_dev$cec(&(0x7f0000000400)='/dev/cec#\x00', 0x2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x1ff, 0x81}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="97000000e25ff4aba8a95deb19db2b95b5fb2ff8a0fd7f5fc3e8140ff69b16659c9dcd0c42beb65eb09b4b2c17ff69df056620c10f163623fbffffffffffffffc6eb4c4de3060d43a7cbaf6aeea53bf80f40b7b75b8bfdd1eb1149813861b8c2caf2f27720312097a03f142ed484a68cff64ed8458bc74525a6bbaec3236dad1e1c5a6aaec4281f8b8761a2dfe278a8e7854753e3d76cc542cfe8b"], &(0x7f0000000580)=0x9f) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000005c0)=@sack_info={r6, 0x200, 0x10001}, 0xc) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x1, 0x7fff, 0x40, 0x0, 0x3}) 22:52:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) [ 221.435587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9155 comm=syz-executor.4 [ 221.496628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9155 comm=syz-executor.4 22:52:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0xf3eae937f6c46e7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup(r0, &(0x7f0000000380)='syz0\x00', 0x1ff) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x23133, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4397}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000000000000000eb7b4efc8a0b15f1000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5f4be9", 0x34e}], 0x1}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) 22:52:20 executing program 2: setxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:udev_tbl_t:s0\x00', 0x20, 0x1) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c9f67c0000010028d3c03df510da"]) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000100)) [ 221.545428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9155 comm=syz-executor.4 22:52:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) [ 221.612611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9155 comm=syz-executor.4 [ 221.649854] FAT-fs (loop2): Unrecognized mount option "Éö|" or missing value 22:52:20 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x3f, {0xfb6a, 0xfffff229, 0x250, 0x7, 0x100}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB='[d::],0::6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 22:52:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={[], 0xcfe5, 0x3ff, 0x5, 0x3, 0x401, r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x2000000000000087, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000003000000bfa30000000620000000000000feffff7a0af0fff80010ff79a4f0ffab910000b7000000ffffff04e4ff000000000404000015007d60b70e0000000000006a0a00fe000000000000b70000000000000095000000000000003bec322cd82bc1092d4b97fb889fbc0cabff202f74c77e7121c383b98cc9bf09a2203a5c160ba102cffc910f8da85c50b1ce58b35dce620ab171391aa48c54d74ae19d30d83e45effbc76d2513b299b7f26218dac03d1c0eb6d6b2dc45c3ab8e4d0975a3b7700d9b6a54d2f68b8794552e0dcc01854b8c0a119bd8b61df7cc09"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd01000005a4004000ffa377fbac1414e0e9", 0x0, 0x100}, 0x28) 22:52:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x1, 0x0) getsockopt(r2, 0x800010f, 0x81, &(0x7f00004ad000), &(0x7f0000a3c000)) 22:52:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(cast6))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x40400) r2 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000180)) write$9p(r2, &(0x7f0000000800)="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", 0x600) getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000380)=""/135, &(0x7f0000000240)=0x87) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x200000, 0x0) ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f0000000480)={0x7}) sendfile(r2, r3, 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0xff, 0x4604, 0x20, 0x0, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x3}, 0x8) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0xedae) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0xffffffffffffffb7, &(0x7f0000000140)=[{&(0x7f0000002780)=""/4096, 0x20001e80}], 0x1}}], 0x213, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(cast6))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r6, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x67, 0x1, 0xc8, "9c790aaa3a0f87c71eb645c8c73e501a", "2c00dbc5d7f8309b43503af7f8165e869e08483b98de217e358c7068dd05928777265dbcb05a02480cd00ab698ea5a1ce883f61cd4541b37c5d620388dd3bb30317857721ac212afa20e6b3c280c49e686f2"}, 0x67, 0x1) 22:52:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r3, 0x0) r4 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:20 executing program 0: accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x2) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0x2) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r6 = socket(0xa, 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xfffffffffffffe32) socket$inet6(0xa, 0x1, 0x40) r8 = creat(0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0xdfd4e7600a885198) getsockopt$inet6_mreq(r8, 0x29, 0x0, &(0x7f0000000100)={@rand_addr, 0x0}, &(0x7f00000002c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r11}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001d00040026bd7000fcdbdf2500000000", @ANYRES32=r10, @ANYBLOB="c200e5020b0c00021e740dcdf69b270000080008", @ANYRES32=r11, @ANYBLOB="14000300bbf0ffff0080000002000000020000000800090001000000080006004e24000008000100ac1414bb0800040007000000"], 0x64}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) sendmsg$key(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x191}}, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000a40)={@remote}, &(0x7f0000000a80)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'hsr0\x00', r7}) r15 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r15, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, 0x0, 0x4, 0x0, 0x4123b79bef9aec01, 0x1000000000, 0x20000, r14}) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000440)) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000002c0)={@remote, 0x7e}) dup(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000240)="240000001a0025f07e9451f68f2e9c920a0b49ffed000019806028000800100001000000", 0x24) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='\x01S\xb8\x00\x00', 0x152) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000003c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffffbfffffff, 0x42}) 22:52:20 executing program 5: syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5, 0x200000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='\x00', 0x2761, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xffffffffffffffb1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) 22:52:20 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_ib=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,blksize=0x0000000000000200,allow_other,max_read=0x0000000000000006,blksize=0x0000000000000200,default_permissions,\x00']) dup3(r0, r1, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)=@known='security.capability\x00\xc9\xbd0\x12\x98>\x02\x15Y`\x19j*\x84X_\x19\xc1\xc8&\x17)\x82\xa8\xde\x1c\xccL\xdci\x87\xff\xc9q\\\xef\"\xce\xe4\xc6s\xd48\x8d^V\x04\xa0\xb88\xaf\xb3[\xd3R\xe4\xc9\xeed\x9aw\x12\b0\x9c\xa46\xbf\x91\x9f\xd9ck\xfa%_\xf4\xb3\x1f@\xf8\x8e\xcc\x9c-\x81!q\xc4\x12bO\f\x14/\xc5Oe\xf4\x929\xf2v\x86\xc1}H\x9e\x92]\xa1\x9b\xf3\x1e0\xecu\xcd\x92#yWf\x1c\xe8\xa1V\x84\x18\xe6\xd3\xd4(\x17O\x89\xa1\x1c\xc8!\xfb\xf6A\"\xa3okA\x1c', 0x0, 0x0) [ 222.245831] audit: type=1800 audit(1570229540.816:67): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16777 res=0 22:52:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r3, 0x0) r4 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) [ 222.315472] audit: type=1804 audit(1570229540.856:68): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir376326040/syzkaller.BfJfjc/81/file0" dev="sda1" ino=16777 res=1 22:52:21 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x6, 0x1) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000002c0)={0xceb4d0ffe0f8bde3, 0x100000, 0x5, 0x7, 0x3}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000140)='sit0\x00') ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000200)) creat(&(0x7f00000001c0)='./file0\x00', 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000280)=0x100000001, 0x4) fcntl$dupfd(r4, 0x0, r4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000140)="5cdae8", 0x3) 22:52:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x6c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000000)=0xfffffffffffffd7b) r6 = dup2(r3, r5) dup3(r6, r4, 0x0) [ 222.594692] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:52:21 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x3f, {0xfb6a, 0xfffff229, 0x250, 0x7, 0x100}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB='[d::],0::6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 22:52:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r3, 0x0) r4 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:21 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$read(0x0, &(0x7f00000000c0)=""/196, 0xc4) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c, 0x0, 0x4c51a1c6}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) add_key$user(0x0, &(0x7f0000000080)={'syz'}, &(0x7f0000000140)="f7f1", 0x2, 0xfffffffffffffffd) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000001c0)=0x2623fc7e8b583667) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000200)={0x4, 0x7, 0x6c, 0x2, 0x3}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000740)=""/243, 0xf3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) connect(r5, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r6 = gettid() r7 = gettid() sendmmsg$unix(r5, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000000100008ff7a7265d8800a08af8068e8ec80001000000c37543935dd5b23cbe81364fded50330161cc76cd0198e137880010fdc084a21b0bb7b79e4db309ff93bad9d301421d1178fea3ef9a2551646682bab1cdf574a62e185185a0b57d9e30f090e169f6aed8be971b599d78a544ac392b5036ea37fa3f7465c14428ad6e4", @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000ef139b565daf6df660452339dcf5fbbc37ffa804f174b3d94f757e77f82b796f08c296901cfa3b75e4b22b1c3db877a5180804ef5d4d6ee7521602106195508871c342baa35cfad7073129e426ec65155917357aa341f35d771069ebff4ce9f8a9eaefcfe97574c4b1247ad43003bcce06c433bff0e5a490b0831d8212d5d8c0c72f6cc3374e5974eba9a664d9f8900f5e8163f99a481155ea9f73471a6ec80b05c850734283ad6e3b68a6", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r8 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) 22:52:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400100010003b0e00b53604070047cac1000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c000100626f6e64000000001400020008000b00", @ANYRES32=0x0, @ANYBLOB="0800010006000000"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@getneightbl={0x14, 0x42, 0x0, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10000000) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r1, r2, 0x0, 0x96a8) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r3, r4, 0x0, 0x96a8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, r5}}, 0x30) 22:52:21 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x6, 0x1) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000002c0)={0xceb4d0ffe0f8bde3, 0x100000, 0x5, 0x7, 0x3}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000140)='sit0\x00') ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000200)) creat(&(0x7f00000001c0)='./file0\x00', 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000280)=0x100000001, 0x4) fcntl$dupfd(r4, 0x0, r4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000140)="5cdae8", 0x3) 22:52:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="860f4c0e57c99ca0ad78349f5803fd3a1a6d5cb848ca6b3a3206a6bc000023b3483f5492d0616e6600df2b1e1a85f73de44b"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) process_vm_readv(0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8e) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:52:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) dup3(0xffffffffffffffff, r3, 0x0) r4 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) [ 223.031686] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:52:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) dup3(0xffffffffffffffff, r3, 0x0) r4 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) keyctl$unlink(0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) 22:52:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) dup3(0xffffffffffffffff, r3, 0x0) r4 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:22 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @mcast1}], 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x361, 0x40000) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000080)={0x4}) 22:52:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 22:52:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = syz_open_dev$amidi(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66ff2c726664", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) setreuid(r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x848026, &(0x7f0000000100)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9179}}], [{@measure='measure'}, {@euid_lt={'euid<', r1}}, {@dont_hash='dont_hash'}, {@fowner_eq={'fowner', 0x3d, r2}}], 0x700}) 22:52:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x277, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000080)="0097ea7f73cdf91794aee71358b82527ef850bf587f9b7b0db9152f51b801037211ec1f0d9113ef2a4277ab9453e92e78e87be7339f13718ec49", 0x3a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000740)=""/243, 0x336, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00'}}) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000040)='user\x00') socket$inet_udp(0x2, 0x2, 0x0) [ 223.884671] 9pnet: Could not find request transport: fÿ [ 224.035813] EXT4-fs (sda1): Unrecognized mount option "measure" or missing value [ 224.065716] EXT4-fs error (device sda1): ext4_xattr_set_entry:1605: inode #16505: comm syz-executor.0: corrupted xattr entries [ 224.146291] 9pnet: Could not find request transport: fÿ fatal error: integer divide by zero runtime stack: runtime.throw(0x8e1883, 0x16) /syzkaller/go/src/runtime/panic.go:616 +0x81 runtime.panicCheckMalloc(0x9e2f00, 0xc85ec0) /syzkaller/go/src/runtime/panic.go:20 +0x77 runtime.panicdivide() /syzkaller/go/src/runtime/panic.go:41 +0x39 runtime.(*mcentral).grow(0x180bdb0, 0x0) /syzkaller/go/src/runtime/mcentral.go:230 +0x118 runtime.(*mcentral).cacheSpan(0x180bdb0, 0x1fe) /syzkaller/go/src/runtime/mcentral.go:106 +0x2e4 runtime.(*mcache).refill(0x7fd06db60000, 0xc42002a065) /syzkaller/go/src/runtime/mcache.go:123 +0x9c runtime.(*mcache).nextFree.func1() /syzkaller/go/src/runtime/malloc.go:556 +0x32 runtime.systemstack(0x0) /syzkaller/go/src/runtime/asm_amd64.s:409 +0x79 runtime.mstart() /syzkaller/go/src/runtime/proc.go:1175 goroutine 10 [running]: runtime.systemstack_switch() /syzkaller/go/src/runtime/asm_amd64.s:363 fp=0xc420303c78 sp=0xc420303c70 pc=0x4571e0 runtime.(*mcache).nextFree(0x7fd06db60000, 0xc42fe89965, 0xc420303d48, 0xc420940eb0, 0xffffffffffffffff) /syzkaller/go/src/runtime/malloc.go:555 +0xa9 fp=0xc420303cd0 sp=0xc420303c78 pc=0x40fb49 runtime.mallocgc(0x2000, 0x0, 0xc442949800, 0x0) /syzkaller/go/src/runtime/malloc.go:710 +0x79f fp=0xc420303d70 sp=0xc420303cd0 pc=0x41049f runtime.growslice(0x7f6180, 0x1820d28, 0x0, 0x0, 0x74d, 0x7, 0x7fd069898540, 0x74d) /syzkaller/go/src/runtime/slice.go:172 +0x21d fp=0xc420303dd8 sp=0xc420303d70 pc=0x4415fd main.(*Proc).enqueueCallTriage(0xc43b50a340, 0xc4429ed340, 0x0, 0x7, 0x7, 0x7fd069898540, 0x74d, 0x74d, 0x7fd06989a274, 0x0, ...) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:268 +0x1ed fp=0xc420303e58 sp=0xc420303dd8 pc=0x7a5b7d main.(*Proc).execute(0xc43b50a340, 0xc4200985e0, 0xc4429ed340, 0x0, 0x1, 0x1) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:258 +0x11d fp=0xc420303ef8 sp=0xc420303e58 pc=0x7a58ad main.(*Proc).loop(0xc43b50a340) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:101 +0x516 fp=0xc420303fd8 sp=0xc420303ef8 pc=0x7a4576 runtime.goexit() /syzkaller/go/src/runtime/asm_amd64.s:2361 +0x1 fp=0xc420303fe0 sp=0xc420303fd8 pc=0x459bb1 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:258 +0x1046 goroutine 1 [select]: main.(*Fuzzer).pollLoop(0xc4203aa580) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:295 +0x15c main.main() /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:261 +0x11cc goroutine 19 [syscall, 3 minutes]: os/signal.signal_recv(0x0) /syzkaller/go/src/runtime/sigqueue.go:139 +0xa6 os/signal.loop() /syzkaller/go/src/os/signal/signal_unix.go:22 +0x22 created by os/signal.init.0 /syzkaller/go/src/os/signal/signal_unix.go:28 +0x41 goroutine 28 [chan receive, 3 minutes]: github.com/google/syzkaller/pkg/osutil.HandleInterrupts.func1(0xc420070120) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:74 +0xd0 created by github.com/google/syzkaller/pkg/osutil.HandleInterrupts /syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:71 +0x3f goroutine 5 [select, 3 minutes, locked to thread]: runtime.gopark(0x97cb10, 0x0, 0x8a608d, 0x6, 0x18, 0x1) /syzkaller/go/src/runtime/proc.go:291 +0x11a runtime.selectgo(0xc42003df50, 0xc420368060) /syzkaller/go/src/runtime/select.go:392 +0xe50 runtime.ensureSigM.func1() /syzkaller/go/src/runtime/signal_unix.go:549 +0x1f4 runtime.goexit() /syzkaller/go/src/runtime/asm_amd64.s:2361 +0x1 goroutine 29 [chan receive, 3 minutes]: main.main.func1(0xc420070120) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:137 +0x34 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:135 +0x504 goroutine 6 [IO wait]: internal/poll.runtime_pollWait(0x7fd06d979d78, 0x72, 0xc420301958) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc42014e418, 0x72, 0xffffffffffffff00, 0x9e2f40, 0xbc0060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0x9b internal/poll.(*pollDesc).waitRead(0xc42014e418, 0xc4202b8000, 0x1000, 0x1000) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc42014e400, 0xc4202b8000, 0x1000, 0x1000, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:157 +0x17d net.(*netFD).Read(0xc42014e400, 0xc4202b8000, 0x1000, 0x1000, 0x77e3f2, 0xc442df19c0, 0xc42000a2e0) /syzkaller/go/src/net/fd_unix.go:202 +0x4f net.(*conn).Read(0xc42000c038, 0xc4202b8000, 0x1000, 0x1000, 0x0, 0x0, 0x0) /syzkaller/go/src/net/net.go:176 +0x6a bufio.(*Reader).fill(0xc420090540) /syzkaller/go/src/bufio/bufio.go:100 +0x11e bufio.(*Reader).ReadByte(0xc420090540, 0xc420301b78, 0x429c0b, 0x9e1e40) /syzkaller/go/src/bufio/bufio.go:242 +0x39 compress/flate.(*decompressor).moreBits(0xc4201b4000, 0xf6, 0x9e9e60) /syzkaller/go/src/compress/flate/inflate.go:694 +0x37 compress/flate.(*decompressor).nextBlock(0xc4201b4000) /syzkaller/go/src/compress/flate/inflate.go:303 +0x39 compress/flate.(*decompressor).Read(0xc4201b4000, 0xc4202ce000, 0x1000, 0x1000, 0x429c0b, 0xc420301bc8, 0x77c0ae) /syzkaller/go/src/compress/flate/inflate.go:347 +0x72 github.com/google/syzkaller/pkg/rpctype.(*flateConn).Read(0xc42016f0b0, 0xc4202ce000, 0x1000, 0x1000, 0x3, 0xc42002a070, 0xc42002a000) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpctype/rpc.go:131 +0x51 bufio.(*Reader).Read(0xc4200905a0, 0xc4200201c0, 0x1, 0x9, 0xc420301c98, 0x10, 0x41113e) /syzkaller/go/src/bufio/bufio.go:216 +0x238 io.ReadAtLeast(0x9e1c00, 0xc4200905a0, 0xc4200201c0, 0x1, 0x9, 0x1, 0x412896, 0xc432787830, 0xc442d0c640) /syzkaller/go/src/io/io.go:309 +0x86 io.ReadFull(0x9e1c00, 0xc4200905a0, 0xc4200201c0, 0x1, 0x9, 0x76, 0xf6, 0xc420301d88) /syzkaller/go/src/io/io.go:327 +0x58 encoding/gob.decodeUintReader(0x9e1c00, 0xc4200905a0, 0xc4200201c0, 0x9, 0x9, 0x76, 0xf6, 0xc420301db8, 0x429579) /syzkaller/go/src/encoding/gob/decode.go:120 +0x63 encoding/gob.(*Decoder).recvMessage(0xc4202c2000, 0xf6) /syzkaller/go/src/encoding/gob/decoder.go:80 +0x57 encoding/gob.(*Decoder).decodeTypeSequence(0xc4202c2000, 0x97cc00, 0xc4202c2000) /syzkaller/go/src/encoding/gob/decoder.go:142 +0x136 encoding/gob.(*Decoder).DecodeValue(0xc4202c2000, 0x7e5ec0, 0xc42017e480, 0x16, 0x0, 0x0) /syzkaller/go/src/encoding/gob/decoder.go:210 +0xdc encoding/gob.(*Decoder).Decode(0xc4202c2000, 0x7e5ec0, 0xc42017e480, 0x30, 0x30) /syzkaller/go/src/encoding/gob/decoder.go:187 +0x14f net/rpc.(*gobClientCodec).ReadResponseHeader(0xc42016f650, 0xc42017e480, 0xc442cf55c0, 0x0) /syzkaller/go/src/net/rpc/client.go:223 +0x45 net/rpc.(*Client).input(0xc420090660) /syzkaller/go/src/net/rpc/client.go:109 +0xa7 created by net/rpc.NewClientWithCodec /syzkaller/go/src/net/rpc/client.go:201 +0x92 goroutine 9 [runnable]: github.com/google/syzkaller/prog.clone(0x9e6020, 0xc425e7c1c0, 0xc43566d2b0, 0xc442f2cde0, 0x3) /syzkaller/gopath/src/github.com/google/syzkaller/prog/clone.go:70 +0x737 github.com/google/syzkaller/prog.(*Prog).Clone(0xc4265b3c40, 0x8c06ff) /syzkaller/gopath/src/github.com/google/syzkaller/prog/clone.go:20 +0x19d github.com/google/syzkaller/prog.resourceCentric(0xf507a0, 0xc43c92b590, 0xc434c9e7c0, 0x7fd06db60001, 0x0, 0x8, 0x8) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:818 +0xc1 github.com/google/syzkaller/prog.(*ResourceType).generate(0xf507a0, 0xc434c9e7c0, 0xc43c92b590, 0x6, 0xc43566d760, 0x40fff9, 0xc434ca2000, 0x20) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:642 +0x931 github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc434c9e7c0, 0xc43c92b590, 0x9e9420, 0xf507a0, 0xc43566d700, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:635 +0x1b8 github.com/google/syzkaller/prog.(*randGen).generateArg(0xc434c9e7c0, 0xc43c92b590, 0x9e9420, 0xf507a0, 0x2, 0x2, 0x97, 0x0, 0x97) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:584 +0x52 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc434c9e7c0, 0xc43c92b590, 0xcb8b40, 0x2, 0x2, 0xc43566d968, 0x401e53f6, 0x50de348f9db0f716, 0xc43566d948, 0x500000000072d3f8, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:572 +0x18b github.com/google/syzkaller/prog.(*StructType).generate(0xcf24c0, 0xc434c9e7c0, 0xc43c92b590, 0xf, 0x18219e0, 0xc43314ca00, 0x73b4f92021b208f7, 0xc43566d9b0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:783 +0x74 github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc434c9e7c0, 0xc43c92b590, 0x9e94e0, 0xcf24c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:635 +0x1b8 github.com/google/syzkaller/prog.(*randGen).generateArg(0xc434c9e7c0, 0xc43c92b590, 0x9e94e0, 0xcf24c0, 0x410848, 0xc43566dac8, 0x72e084, 0x8a1514, 0x3) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:584 +0x52 github.com/google/syzkaller/prog.(*PtrType).generate(0xe4f4c0, 0xc434c9e7c0, 0xc43c92b590, 0x9e5f20, 0xc434c9ffe0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:799 +0xf7 github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc434c9e7c0, 0xc43c92b590, 0x9e9360, 0xe4f4c0, 0xc43566db00, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:635 +0x1b8 github.com/google/syzkaller/prog.(*randGen).generateArg(0xc434c9e7c0, 0xc43c92b590, 0x9e9360, 0xe4f4c0, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:584 +0x52 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc434c9e7c0, 0xc43c92b590, 0xcf2480, 0x3, 0x3, 0xc434b946c0, 0x7b6bd12ca11ece6f, 0xc43566dd58, 0x4e00ff, 0xc434b946c0, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:572 +0x18b github.com/google/syzkaller/prog.(*randGen).generateParticularCall(0xc434c9e7c0, 0xc43c92b590, 0x1076da0, 0x5, 0xc43c92b590, 0xc434b94210) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:516 +0xd6 github.com/google/syzkaller/prog.(*randGen).generateCall(0xc434c9e7c0, 0xc43c92b590, 0xc438724940, 0x0, 0xc438724940, 0xc438724980, 0xc43c92b590) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:508 +0xb4 github.com/google/syzkaller/prog.(*mutator).insertCall(0xc43566deb0, 0x14) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:137 +0xf5 github.com/google/syzkaller/prog.(*Prog).Mutate(0xc438724940, 0x9e3aa0, 0xc43b374090, 0x1e, 0xc43b50a040, 0xc439dbc000, 0xa61b, 0xc000) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:42 +0x2a9 main.(*Proc).loop(0xc43b50a280) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:99 +0x465 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:258 +0x1046 goroutine 8 [semacquire]: sync.runtime_notifyListWait(0xc42017ce50, 0xc4000000a1) /syzkaller/go/src/runtime/sema.go:510 +0x10b sync.(*Cond).Wait(0xc42017ce40) /syzkaller/go/src/sync/cond.go:56 +0x80 github.com/google/syzkaller/pkg/ipc.(*Gate).Enter(0xc42017ce80, 0x7dfe80) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/gate.go:34 +0x48 main.(*Proc).executeRaw(0xc43b50a080, 0xc4200985e0, 0xc442d62980, 0x1, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:286 +0x6b main.(*Proc).execute(0xc43b50a080, 0xc4200985e0, 0xc442d62980, 0x0, 0x1, 0x1) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x67 main.(*Proc).loop(0xc43b50a080) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:101 +0x516 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:258 +0x1046 goroutine 11 [semacquire]: sync.runtime_notifyListWait(0xc42017ce50, 0xa0) /syzkaller/go/src/runtime/sema.go:510 +0x10b sync.(*Cond).Wait(0xc42017ce40) /syzkaller/go/src/sync/cond.go:56 +0x80 github.com/google/syzkaller/pkg/ipc.(*Gate).Enter(0xc42017ce80, 0x41020d) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/gate.go:34 +0x48 main.(*Proc).executeRaw(0xc43b50a400, 0xc43af60a80, 0xc4429ed500, 0x4, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:286 +0x6b main.(*Proc).execute(0xc43b50a400, 0xc43af60a80, 0xc4429ed500, 0x0, 0x4, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x67 main.(*Proc).triageInput.func1(0xc4429ed500, 0xa, 0x2) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:152 +0x95 github.com/google/syzkaller/prog.Minimize.func1(0xc4429ed500, 0xa, 0xc43688fb00) /syzkaller/gopath/src/github.com/google/syzkaller/prog/minimization.go:20 +0xac github.com/google/syzkaller/prog.removeCalls(0xc422aff000, 0x14, 0x0, 0xc428a41500, 0x700000000862001, 0xffffffffffffffff) /syzkaller/gopath/src/github.com/google/syzkaller/prog/minimization.go:73 +0xa6 github.com/google/syzkaller/prog.Minimize(0xc422aff000, 0x14, 0x500, 0xc42f1b6960, 0x7fd0686a9f4c, 0x5f8) /syzkaller/gopath/src/github.com/google/syzkaller/prog/minimization.go:31 +0x11f main.(*Proc).triageInput(0xc43b50a400, 0xc4332be2a0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:149 +0xa44 main.(*Proc).loop(0xc43b50a400) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x1c8 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:258 +0x1046 goroutine 12 [IO wait]: internal/poll.runtime_pollWait(0x7fd06ceb04e0, 0x72, 0xc4393197f0) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc43a0a30f8, 0x72, 0xffffffffffffff01, 0x9e2f40, 0xbc0060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0x9b internal/poll.(*pollDesc).waitRead(0xc43a0a30f8, 0xc442948b01, 0xc, 0xc) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc43a0a30e0, 0xc442948b90, 0xc, 0xc, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:157 +0x17d os.(*File).read(0xc43459c250, 0xc442948b90, 0xc, 0xc, 0x41e126, 0xc442948b90, 0x7fd06d189847) /syzkaller/go/src/os/file_unix.go:226 +0x4e os.(*File).Read(0xc43459c250, 0xc442948b90, 0xc, 0xc, 0xc, 0xc442948b90, 0x0) /syzkaller/go/src/os/file.go:107 +0x6a io.ReadAtLeast(0x9e23c0, 0xc43459c250, 0xc442948b90, 0xc, 0xc, 0xc, 0x849b60, 0x1, 0xc442948b90) /syzkaller/go/src/io/io.go:309 +0x86 io.ReadFull(0x9e23c0, 0xc43459c250, 0xc442948b90, 0xc, 0xc, 0x0, 0x0, 0xc439319c28) /syzkaller/go/src/io/io.go:327 +0x58 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc429060850, 0xc4200985e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x9c, ...) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:749 +0x281 github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc43293e2d0, 0xc4200985e0, 0xc442b56580, 0x2, 0xc439319d70, 0x4dfde3, 0xc42efec000, 0x13ac23b97b3f09ca, 0xc439319d90, 0x4dfde3) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:279 +0x118 main.(*Proc).executeRaw(0xc43b50a440, 0xc4200985e0, 0xc442b56580, 0x1, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:292 +0x1ec main.(*Proc).execute(0xc43b50a440, 0xc4200985e0, 0xc442b56580, 0x0, 0x1, 0x1) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x67 main.(*Proc).loop(0xc43b50a440) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:101 +0x516 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:258 +0x1046 goroutine 13 [IO wait]: internal/poll.runtime_pollWait(0x7fd06d979898, 0x72, 0xc4367d37f0) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc43b5458c8, 0x72, 0xffffffffffffff01, 0x9e2f40, 0xbc0060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0x9b internal/poll.(*pollDesc).waitRead(0xc43b5458c8, 0xc44222d201, 0xc, 0xc) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc43b5458b0, 0xc44222d2d0, 0xc, 0xc, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:157 +0x17d os.(*File).read(0xc43459c120, 0xc44222d2d0, 0xc, 0xc, 0x41e126, 0xc44222d2d0, 0x7fd06d17f9b5) /syzkaller/go/src/os/file_unix.go:226 +0x4e os.(*File).Read(0xc43459c120, 0xc44222d2d0, 0xc, 0xc, 0xc, 0xc44222d2d0, 0x0) /syzkaller/go/src/os/file.go:107 +0x6a io.ReadAtLeast(0x9e23c0, 0xc43459c120, 0xc44222d2d0, 0xc, 0xc, 0xc, 0x849b60, 0x1, 0xc44222d2d0) /syzkaller/go/src/io/io.go:309 +0x86 io.ReadFull(0x9e23c0, 0xc43459c120, 0xc44222d2d0, 0xc, 0xc, 0x0, 0x0, 0xc4367d3c28) /syzkaller/go/src/io/io.go:327 +0x58 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc426bb8070, 0xc4200985e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc42002c500, 0xc44234fec0, 0x1, ...) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:749 +0x281 github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc43293e3f0, 0xc4200985e0, 0xc441f168c0, 0x3, 0xc4367d3d70, 0x4dfde3, 0xc42efed500, 0x7b4083e1ced3808e, 0x7325ef, 0x8a1c2a) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:279 +0x118 main.(*Proc).executeRaw(0xc43b50a940, 0xc4200985e0, 0xc441f168c0, 0x1, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:292 +0x1ec main.(*Proc).execute(0xc43b50a940, 0xc4200985e0, 0xc441f168c0, 0x0, 0x1, 0x1) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x67 main.(*Proc).loop(0xc43b50a940) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:101 +0x516 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:258 +0x1046 goroutine 14 [IO wait]: internal/poll.runtime_pollWait(0x7fd06d979a38, 0x72, 0xc42003d628) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc43b545508, 0x72, 0xffffffffffffff01, 0x9e2f40, 0xbc0060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0x9b internal/poll.(*pollDesc).waitRead(0xc43b545508, 0xc43aad2001, 0x20000, 0x20000) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc43b5454f0, 0xc43aad2000, 0x20000, 0x20000, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:157 +0x17d os.(*File).read(0xc43459c110, 0xc43aad2000, 0x20000, 0x20000, 0x101, 0xc42003d6b8, 0xc42003d730) /syzkaller/go/src/os/file_unix.go:226 +0x4e os.(*File).Read(0xc43459c110, 0xc43aad2000, 0x20000, 0x20000, 0x20000, 0x20000, 0x17) /syzkaller/go/src/os/file.go:107 +0x6a github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc43459c110, 0xc426bb8070) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:595 +0xc6 created by github.com/google/syzkaller/pkg/ipc.makeCommand /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:589 +0x7b9 goroutine 16 [IO wait]: internal/poll.runtime_pollWait(0x7fd06ceb0ea0, 0x72, 0xc42031fe28) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc43a0a2338, 0x72, 0xffffffffffffff01, 0x9e2f40, 0xbc0060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0x9b internal/poll.(*pollDesc).waitRead(0xc43a0a2338, 0xc43b518001, 0x1ffcd, 0x1ffcd) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc43a0a2320, 0xc43b518033, 0x1ffcd, 0x1ffcd, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:157 +0x17d os.(*File).read(0xc43459c198, 0xc43b518033, 0x1ffcd, 0x1ffcd, 0x33, 0x0, 0x0) /syzkaller/go/src/os/file_unix.go:226 +0x4e os.(*File).Read(0xc43459c198, 0xc43b518033, 0x1ffcd, 0x1ffcd, 0x33, 0x0, 0x0) /syzkaller/go/src/os/file.go:107 +0x6a github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc43459c198, 0xc426bb93b0) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:595 +0xc6 created by github.com/google/syzkaller/pkg/ipc.makeCommand /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:589 +0x7b9 goroutine 49 [IO wait]: internal/poll.runtime_pollWait(0x7fd06ceb09c0, 0x72, 0xc420320628) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc43a0a2928, 0x72, 0xffffffffffffff01, 0x9e2f40, 0xbc0060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0x9b internal/poll.(*pollDesc).waitRead(0xc43a0a2928, 0xc43b49a001, 0x20000, 0x20000) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc43a0a2910, 0xc43b49a000, 0x20000, 0x20000, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:157 +0x17d os.(*File).read(0xc43459c1d8, 0xc43b49a000, 0x20000, 0x20000, 0x101, 0xc4203206b8, 0xc420320730) /syzkaller/go/src/os/file_unix.go:226 +0x4e os.(*File).Read(0xc43459c1d8, 0xc43b49a000, 0x20000, 0x20000, 0x20000, 0x20000, 0x2) /syzkaller/go/src/os/file.go:107 +0x6a github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc43459c1d8, 0xc4290605b0) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:595 +0xc6 created by github.com/google/syzkaller/pkg/ipc.makeCommand /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:589 +0x7b9 goroutine 50 [IO wait]: internal/poll.runtime_pollWait(0x7fd06d979bd8, 0x72, 0xc420321e28) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc43a0a3058, 0x72, 0xffffffffffffff01, 0x9e2f40, 0xbc0060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0x9b internal/poll.(*pollDesc).waitRead(0xc43a0a3058, 0xc43c33a001, 0x1ffcd, 0x1ffcd) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc43a0a3040, 0xc43c33a033, 0x1ffcd, 0x1ffcd, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:157 +0x17d os.(*File).read(0xc43459c240, 0xc43c33a033, 0x1ffcd, 0x1ffcd, 0x33, 0x0, 0x0) /syzkaller/go/src/os/file_unix.go:226 +0x4e os.(*File).Read(0xc43459c240, 0xc43c33a033, 0x1ffcd, 0x1ffcd, 0x33, 0x0, 0x0) /syzkaller/go/src/os/file.go:107 +0x6a github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc43459c240, 0xc429060850) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:595 +0xc6 created by github.com/google/syzkaller/pkg/ipc.makeCommand /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:589 +0x7b9 goroutine 653 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc429060850, 0xc4379a19e0, 0xc4379a1980) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:734 +0xe1 created by github.com/google/syzkaller/pkg/ipc.(*command).exec /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:732 +0x19c goroutine 617 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc426bb8070, 0xc43c2b7200, 0xc43c2b71a0) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:734 +0xe1 created by github.com/google/syzkaller/pkg/ipc.(*command).exec /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:732 +0x19c goroutine 311 [IO wait]: internal/poll.runtime_pollWait(0x7fd06d979b08, 0x72, 0xc430de1e28) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc43a218248, 0x72, 0xffffffffffffff01, 0x9e2f40, 0xbc0060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0x9b internal/poll.(*pollDesc).waitRead(0xc43a218248, 0xc43aa16001, 0x20000, 0x20000) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc43a218230, 0xc43aa16000, 0x20000, 0x20000, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:157 +0x17d os.(*File).read(0xc425010068, 0xc43aa16000, 0x20000, 0x20000, 0x101, 0xc430de1eb8, 0xc430de1f30) /syzkaller/go/src/os/file_unix.go:226 +0x4e os.(*File).Read(0xc425010068, 0xc43aa16000, 0x20000, 0x20000, 0x20000, 0x20000, 0x0) /syzkaller/go/src/os/file.go:107 +0x6a github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc425010068, 0xc43c42a070) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:595 +0xc6 created by github.com/google/syzkaller/pkg/ipc.makeCommand /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:589 +0x7b9 goroutine 326 [IO wait]: internal/poll.runtime_pollWait(0x7fd06d979e48, 0x72, 0xc430ddde28) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc4367301f8, 0x72, 0xffffffffffffff01, 0x9e2f40, 0xbc0060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0x9b internal/poll.(*pollDesc).waitRead(0xc4367301f8, 0xc439d1c001, 0x1ffe4, 0x1ffe4) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc4367301e0, 0xc439d1c01c, 0x1ffe4, 0x1ffe4, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:157 +0x17d os.(*File).read(0xc43459c2b8, 0xc439d1c01c, 0x1ffe4, 0x1ffe4, 0x1c, 0x0, 0x0) /syzkaller/go/src/os/file_unix.go:226 +0x4e os.(*File).Read(0xc43459c2b8, 0xc439d1c01c, 0x1ffe4, 0x1ffe4, 0x1c, 0x0, 0x0) /syzkaller/go/src/os/file.go:107 +0x6a github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc43459c2b8, 0xc43c42a310) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:595 +0xc6 created by github.com/google/syzkaller/pkg/ipc.makeCommand /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:589 +0x7b9 [ 224.853740] ================================================================== [ 224.861415] BUG: KASAN: use-after-free in __ext4_expand_extra_isize+0x14f/0x220 [ 224.868864] Write of size 37209 at addr ffff88807c2ef8a0 by task syz-executor.3/8198 [ 224.876735] [ 224.878360] CPU: 1 PID: 8198 Comm: syz-executor.3 Not tainted 4.14.146 #0 [ 224.885539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.894890] Call Trace: [ 224.897484] dump_stack+0x138/0x197 [ 224.901135] ? __ext4_expand_extra_isize+0x14f/0x220 [ 224.906240] print_address_description.cold+0x7c/0x1dc [ 224.911525] ? __ext4_expand_extra_isize+0x14f/0x220 [ 224.916631] kasan_report.cold+0xa9/0x2af [ 224.920804] check_memory_region+0x123/0x190 [ 224.925228] memset+0x24/0x40 [ 224.928377] __ext4_expand_extra_isize+0x14f/0x220 [ 224.933309] ext4_mark_inode_dirty+0x664/0x860 [ 224.937888] ? ext4_expand_extra_isize+0x4b0/0x4b0 [ 224.942988] ? __lock_is_held+0xb6/0x140 [ 224.947407] ? ext4_exit_mballoc+0xc0/0xc0 [ 224.951641] ? ext4_truncate+0x4b9/0x11f0 [ 224.955794] ext4_ext_truncate+0x96/0x1f0 [ 224.959948] ext4_truncate+0xbab/0x11f0 [ 224.963928] ? ext4_punch_hole+0x1040/0x1040 [ 224.968453] ? __ext4_journal_start_sb+0x105/0x450 [ 224.973402] ? ext4_evict_inode+0x735/0x15c0 [ 224.977830] ext4_evict_inode+0x8be/0x15c0 [ 224.982066] ? ext4_da_write_begin+0xc30/0xc30 [ 224.986643] ? _raw_spin_unlock+0x2d/0x50 [ 224.990807] ? ext4_da_write_begin+0xc30/0xc30 [ 224.995405] evict+0x2e6/0x630 [ 224.998607] iput+0x471/0x900 [ 225.001710] ? ext4_nfs_commit_metadata+0x2f0/0x2f0 [ 225.006725] dentry_unlink_inode+0x286/0x340 [ 225.011136] __dentry_kill+0x32e/0x580 [ 225.015110] ? dput.part.0+0x2a/0x750 [ 225.018904] ? dput.part.0+0x2a/0x750 [ 225.022693] dput.part.0+0x4e3/0x750 [ 225.026400] ? ext4_es_can_be_merged.cold+0x2c/0x2c [ 225.031406] dput+0x20/0x30 [ 225.034334] __fput+0x45f/0x7a0 [ 225.037619] ____fput+0x16/0x20 [ 225.040896] task_work_run+0x114/0x190 [ 225.044783] do_exit+0x7df/0x2c10 [ 225.048233] ? SOFTIRQ_verbose+0x10/0x10 [ 225.052291] ? find_held_lock+0x35/0x130 [ 225.056344] ? mm_update_next_owner+0x5d0/0x5d0 [ 225.061100] do_group_exit+0x111/0x330 [ 225.064982] get_signal+0x381/0x1cd0 [ 225.068690] ? debug_smp_processor_id+0x1c/0x20 [ 225.073357] ? save_trace+0x290/0x290 [ 225.077153] ? SOFTIRQ_verbose+0x10/0x10 [ 225.081218] do_signal+0x86/0x19a0 [ 225.084757] ? setup_sigcontext+0x7d0/0x7d0 [ 225.089079] ? kasan_check_read+0x11/0x20 [ 225.093225] ? _copy_to_user+0x87/0xd0 [ 225.097111] ? SyS_futex+0x215/0x302 [ 225.101531] ? SyS_futex+0x222/0x302 [ 225.105241] ? exit_to_usermode_loop+0x3d/0x220 [ 225.109911] exit_to_usermode_loop+0x15c/0x220 [ 225.114499] do_syscall_64+0x4bc/0x640 [ 225.118415] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 225.123262] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 225.129578] RIP: 0033:0x459a59 [ 225.132760] RSP: 002b:00007f5e32ac3cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 225.140463] RAX: fffffffffffffe00 RBX: 000000000075bf28 RCX: 0000000000459a59 [ 225.147749] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bf28 [ 225.155036] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 225.162302] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf2c [ 225.169572] R13: 00007ffd4eaa45df R14: 00007f5e32ac49c0 R15: 000000000075bf2c [ 225.176847] [ 225.178463] The buggy address belongs to the page: [ 225.183389] page:ffffea0001f0bbc0 count:2 mapcount:0 mapping:ffff8882184324e0 index:0x435 [ 225.191703] flags: 0x1fffc0000001074(referenced|dirty|lru|active|private) [ 225.198626] raw: 01fffc0000001074 ffff8882184324e0 0000000000000435 00000002ffffffff [ 225.206497] raw: ffffea00019a4220 ffffea0001bbf020 ffff8880894f5e70 ffff88821b7321c0 [ 225.214368] page dumped because: kasan: bad access detected [ 225.220069] page->mem_cgroup:ffff88821b7321c0 [ 225.224579] [ 225.226197] Memory state around the buggy address: [ 225.231122] ffff88807c2f3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 225.238485] ffff88807c2f3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 225.245896] >ffff88807c2f4000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 225.253248] ^ [ 225.256608] ffff88807c2f4080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 225.264053] ffff88807c2f4100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 225.271403] ================================================================== [ 225.278751] Disabling lock debugging due to kernel taint [ 225.288827] Kernel panic - not syncing: panic_on_warn set ... [ 225.288827] [ 225.296236] CPU: 1 PID: 8198 Comm: syz-executor.3 Tainted: G B 4.14.146 #0 [ 225.304375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.313726] Call Trace: [ 225.316311] dump_stack+0x138/0x197 [ 225.319936] ? __ext4_expand_extra_isize+0x14f/0x220 [ 225.325029] panic+0x1f2/0x426 [ 225.328230] ? add_taint.cold+0x16/0x16 [ 225.332223] ? ___preempt_schedule+0x16/0x18 [ 225.332235] kasan_end_report+0x47/0x4f [ 225.340676] kasan_report.cold+0x130/0x2af [ 225.344911] check_memory_region+0x123/0x190 [ 225.349338] memset+0x24/0x40 Connection to 10.128.1.47 closed by remote host. [ 225.352443] __ext4_expand_extra_isize+0x